type=CRED_REFR msg=audit(1446946801.462:683518): pid=15723 uid=0 auid=0 ses=21925 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446946801.474:683519): pid=15724 uid=0 auid=0 ses=21926 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446946801.475:683520): pid=15724 uid=0 auid=0 ses=21926 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446946801.477:683521): pid=15723 uid=0 auid=0 ses=21925 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446946801.480:683522): pid=15723 uid=0 auid=0 ses=21925 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446947401.493:683523): pid=17570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446947401.493:683524): pid=17571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446947401.494:683525): pid=17571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446947401.494:683526): pid=17570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446947401.495:683528): pid=17571 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=21928 res=1
type=LOGIN msg=audit(1446947401.495:683527): pid=17570 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=21927 res=1
type=USER_START msg=audit(1446947401.510:683529): pid=17571 uid=0 auid=0 ses=21928 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446947401.511:683530): pid=17571 uid=0 auid=0 ses=21928 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1446947401.516:683531): pid=17570 uid=0 auid=0 ses=21927 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446947401.516:683532): pid=17570 uid=0 auid=0 ses=21927 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446947401.517:683533): pid=17571 uid=0 auid=0 ses=21928 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446947401.520:683534): pid=17571 uid=0 auid=0 ses=21928 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446947401.530:683535): pid=17570 uid=0 auid=0 ses=21927 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446947401.532:683536): pid=17570 uid=0 auid=0 ses=21927 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1446947495.758:683537): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=CRYPTO_KEY_USER msg=audit(1446947582.790:683538): pid=18135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=18135 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446947582.790:683539): pid=18135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=18135 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446947582.790:683540): pid=18135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=18135 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446947582.834:683541): pid=18134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=18135 suid=74 rport=53731 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446947582.834:683542): pid=18134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=18135 suid=74 rport=53731 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446947582.963:683543): pid=18134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=53731 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446947582.963:683544): pid=18134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=53731 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446947582.972:683545): pid=18134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446947582.974:683546): pid=18134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18135 suid=74 rport=53731 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446947582.976:683547): pid=18134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446947582.976:683548): pid=18134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446947582.976:683549): pid=18134 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=21929 res=1
type=USER_ROLE_CHANGE msg=audit(1446947583.045:683550): pid=18134 uid=0 auid=0 ses=21929 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446947583.074:683551): pid=18134 uid=0 auid=0 ses=21929 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446947583.077:683552): pid=18134 uid=0 auid=0 ses=21929 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446947583.077:683553): pid=18134 uid=0 auid=0 ses=21929 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446947583.079:683554): pid=18137 uid=0 auid=0 ses=21929 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=18137 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446947583.079:683555): pid=18137 uid=0 auid=0 ses=21929 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=18137 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446947583.079:683556): pid=18137 uid=0 auid=0 ses=21929 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=18137 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446947583.080:683557): pid=18137 uid=0 auid=0 ses=21929 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446947583.100:683558): pid=18134 uid=0 auid=0 ses=21929 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446947583.100:683559): pid=18134 uid=0 auid=0 ses=21929 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446947583.104:683560): pid=18134 uid=0 auid=0 ses=21929 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446947583.104:683561): pid=18134 uid=0 auid=0 ses=21929 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446947583.104:683562): pid=18134 uid=0 auid=0 ses=21929 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18134 suid=0 rport=53731 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446947583.104:683563): pid=18134 uid=0 auid=0 ses=21929 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=18134 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446947583.104:683564): pid=18134 uid=0 auid=0 ses=21929 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=18134 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446947583.104:683565): pid=18134 uid=0 auid=0 ses=21929 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=18134 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446947583.128:683566): pid=18145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=18145 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446947583.129:683567): pid=18145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=18145 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446947583.129:683568): pid=18145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=18145 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446947583.173:683569): pid=18144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=18145 suid=74 rport=53732 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446947583.173:683570): pid=18144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=18145 suid=74 rport=53732 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446947583.302:683571): pid=18144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=53732 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446947583.302:683572): pid=18144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=53732 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446947583.312:683573): pid=18144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446947583.312:683574): pid=18144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18145 suid=74 rport=53732 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446947583.313:683575): pid=18144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446947583.314:683576): pid=18144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446947583.314:683577): pid=18144 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=21930 res=1
type=USER_ROLE_CHANGE msg=audit(1446947583.381:683578): pid=18144 uid=0 auid=0 ses=21930 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446947583.408:683579): pid=18144 uid=0 auid=0 ses=21930 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446947583.410:683580): pid=18144 uid=0 auid=0 ses=21930 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446947583.410:683581): pid=18144 uid=0 auid=0 ses=21930 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446947583.412:683582): pid=18147 uid=0 auid=0 ses=21930 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=18147 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446947583.412:683583): pid=18147 uid=0 auid=0 ses=21930 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=18147 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446947583.412:683584): pid=18147 uid=0 auid=0 ses=21930 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=18147 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446947583.413:683585): pid=18147 uid=0 auid=0 ses=21930 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446947584.680:683586): pid=18144 uid=0 auid=0 ses=21930 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446947584.680:683587): pid=18144 uid=0 auid=0 ses=21930 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446947584.684:683588): pid=18144 uid=0 auid=0 ses=21930 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446947584.684:683589): pid=18144 uid=0 auid=0 ses=21930 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446947584.684:683590): pid=18144 uid=0 auid=0 ses=21930 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18144 suid=0 rport=53732 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446947584.684:683591): pid=18144 uid=0 auid=0 ses=21930 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=18144 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446947584.684:683592): pid=18144 uid=0 auid=0 ses=21930 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=18144 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446947584.684:683593): pid=18144 uid=0 auid=0 ses=21930 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=18144 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446947584.716:683594): pid=18197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=18197 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446947584.716:683595): pid=18197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=18197 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446947584.716:683596): pid=18197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=18197 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446947584.761:683597): pid=18196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=18197 suid=74 rport=53735 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446947584.761:683598): pid=18196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=18197 suid=74 rport=53735 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446947584.880:683599): pid=18196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=53735 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446947584.880:683600): pid=18196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=53735 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446947584.885:683601): pid=18196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446947584.886:683602): pid=18196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18197 suid=74 rport=53735 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446947584.887:683603): pid=18196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446947584.887:683604): pid=18196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446947584.887:683605): pid=18196 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=21931 res=1
type=USER_ROLE_CHANGE msg=audit(1446947584.956:683606): pid=18196 uid=0 auid=0 ses=21931 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446947584.979:683607): pid=18196 uid=0 auid=0 ses=21931 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446947584.982:683608): pid=18196 uid=0 auid=0 ses=21931 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446947584.982:683609): pid=18196 uid=0 auid=0 ses=21931 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446947584.983:683610): pid=18199 uid=0 auid=0 ses=21931 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=18199 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446947584.983:683611): pid=18199 uid=0 auid=0 ses=21931 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=18199 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446947584.983:683612): pid=18199 uid=0 auid=0 ses=21931 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=18199 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446947584.984:683613): pid=18199 uid=0 auid=0 ses=21931 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446947585.001:683614): pid=18196 uid=0 auid=0 ses=21931 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446947585.001:683615): pid=18196 uid=0 auid=0 ses=21931 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446947585.004:683616): pid=18196 uid=0 auid=0 ses=21931 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446947585.004:683617): pid=18196 uid=0 auid=0 ses=21931 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446947585.005:683618): pid=18196 uid=0 auid=0 ses=21931 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18196 suid=0 rport=53735 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446947585.005:683619): pid=18196 uid=0 auid=0 ses=21931 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=18196 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446947585.005:683620): pid=18196 uid=0 auid=0 ses=21931 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=18196 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446947585.005:683621): pid=18196 uid=0 auid=0 ses=21931 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=18196 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446948001.560:683622): pid=19486 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446948001.560:683623): pid=19486 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446948001.560:683624): pid=19487 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446948001.560:683625): pid=19487 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446948001.561:683626): pid=19486 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=21932 res=1
type=LOGIN msg=audit(1446948001.561:683627): pid=19487 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=21933 res=1
type=USER_START msg=audit(1446948001.582:683628): pid=19486 uid=0 auid=0 ses=21932 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1446948001.582:683629): pid=19487 uid=0 auid=0 ses=21933 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446948001.583:683630): pid=19487 uid=0 auid=0 ses=21933 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446948001.583:683631): pid=19486 uid=0 auid=0 ses=21932 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446948001.593:683632): pid=19487 uid=0 auid=0 ses=21933 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446948001.594:683633): pid=19487 uid=0 auid=0 ses=21933 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446948001.602:683634): pid=19486 uid=0 auid=0 ses=21932 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446948001.603:683635): pid=19486 uid=0 auid=0 ses=21932 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446948061.616:683636): pid=19724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446948061.616:683637): pid=19724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446948061.616:683638): pid=19724 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=21934 res=1
type=USER_START msg=audit(1446948061.631:683639): pid=19724 uid=0 auid=0 ses=21934 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446948061.631:683640): pid=19724 uid=0 auid=0 ses=21934 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446948061.659:683641): pid=19724 uid=0 auid=0 ses=21934 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446948061.660:683642): pid=19724 uid=0 auid=0 ses=21934 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446948601.677:683643): pid=21395 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446948601.677:683644): pid=21394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446948601.677:683645): pid=21395 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446948601.677:683646): pid=21394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446948601.678:683647): pid=21395 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=21935 res=1
type=LOGIN msg=audit(1446948601.678:683648): pid=21394 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=21936 res=1
type=USER_START msg=audit(1446948601.692:683649): pid=21395 uid=0 auid=0 ses=21935 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446948601.692:683650): pid=21395 uid=0 auid=0 ses=21935 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1446948601.693:683651): pid=21394 uid=0 auid=0 ses=21936 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446948601.693:683652): pid=21394 uid=0 auid=0 ses=21936 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446948601.700:683653): pid=21395 uid=0 auid=0 ses=21935 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446948601.702:683654): pid=21395 uid=0 auid=0 ses=21935 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446948601.707:683655): pid=21394 uid=0 auid=0 ses=21936 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446948601.709:683656): pid=21394 uid=0 auid=0 ses=21936 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1446948782.835:683657): pid=21964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=21964 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446948782.836:683658): pid=21964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=21964 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446948782.836:683659): pid=21964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=21964 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446948782.879:683660): pid=21963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=21964 suid=74 rport=55712 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446948782.879:683661): pid=21963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=21964 suid=74 rport=55712 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446948783.008:683662): pid=21963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=55712 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446948783.008:683663): pid=21963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=55712 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446948783.018:683664): pid=21963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446948783.019:683665): pid=21963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21964 suid=74 rport=55712 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446948783.020:683666): pid=21963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446948783.020:683667): pid=21963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446948783.020:683668): pid=21963 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=21937 res=1
type=USER_ROLE_CHANGE msg=audit(1446948783.090:683669): pid=21963 uid=0 auid=0 ses=21937 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446948783.109:683670): pid=21963 uid=0 auid=0 ses=21937 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446948783.111:683671): pid=21963 uid=0 auid=0 ses=21937 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446948783.112:683672): pid=21963 uid=0 auid=0 ses=21937 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446948783.113:683673): pid=21966 uid=0 auid=0 ses=21937 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=21966 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446948783.113:683674): pid=21966 uid=0 auid=0 ses=21937 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=21966 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446948783.113:683675): pid=21966 uid=0 auid=0 ses=21937 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=21966 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446948783.114:683676): pid=21966 uid=0 auid=0 ses=21937 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446948783.131:683677): pid=21963 uid=0 auid=0 ses=21937 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446948783.132:683678): pid=21963 uid=0 auid=0 ses=21937 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446948783.134:683679): pid=21963 uid=0 auid=0 ses=21937 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446948783.134:683680): pid=21963 uid=0 auid=0 ses=21937 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446948783.136:683681): pid=21963 uid=0 auid=0 ses=21937 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21963 suid=0 rport=55712 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446948783.136:683682): pid=21963 uid=0 auid=0 ses=21937 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=21963 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446948783.136:683683): pid=21963 uid=0 auid=0 ses=21937 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=21963 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446948783.136:683684): pid=21963 uid=0 auid=0 ses=21937 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=21963 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446948783.160:683685): pid=21974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=21974 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446948783.160:683686): pid=21974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=21974 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446948783.160:683687): pid=21974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=21974 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446948783.205:683688): pid=21973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=21974 suid=74 rport=55713 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446948783.205:683689): pid=21973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=21974 suid=74 rport=55713 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446948783.335:683690): pid=21973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=55713 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446948783.335:683691): pid=21973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=55713 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446948783.345:683692): pid=21973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446948783.345:683693): pid=21973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21974 suid=74 rport=55713 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446948783.347:683694): pid=21973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446948783.348:683695): pid=21973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446948783.348:683696): pid=21973 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=21938 res=1
type=USER_ROLE_CHANGE msg=audit(1446948783.413:683697): pid=21973 uid=0 auid=0 ses=21938 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446948783.438:683698): pid=21973 uid=0 auid=0 ses=21938 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446948783.441:683699): pid=21973 uid=0 auid=0 ses=21938 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446948783.441:683700): pid=21973 uid=0 auid=0 ses=21938 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446948783.442:683701): pid=21976 uid=0 auid=0 ses=21938 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=21976 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446948783.442:683702): pid=21976 uid=0 auid=0 ses=21938 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=21976 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446948783.442:683703): pid=21976 uid=0 auid=0 ses=21938 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=21976 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446948783.443:683704): pid=21976 uid=0 auid=0 ses=21938 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446948784.726:683705): pid=21973 uid=0 auid=0 ses=21938 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446948784.726:683706): pid=21973 uid=0 auid=0 ses=21938 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446948784.734:683707): pid=21973 uid=0 auid=0 ses=21938 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446948784.734:683708): pid=21973 uid=0 auid=0 ses=21938 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446948784.736:683709): pid=21973 uid=0 auid=0 ses=21938 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21973 suid=0 rport=55713 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446948784.736:683710): pid=21973 uid=0 auid=0 ses=21938 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=21973 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446948784.736:683711): pid=21973 uid=0 auid=0 ses=21938 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=21973 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446948784.737:683712): pid=21973 uid=0 auid=0 ses=21938 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=21973 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446948784.762:683713): pid=22026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=22026 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446948784.762:683714): pid=22026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=22026 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446948784.762:683715): pid=22026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=22026 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446948784.807:683716): pid=22025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=22026 suid=74 rport=55715 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446948784.807:683717): pid=22025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=22026 suid=74 rport=55715 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446948784.933:683718): pid=22025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=55715 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446948784.933:683719): pid=22025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=55715 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446948784.942:683720): pid=22025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446948784.943:683721): pid=22025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22026 suid=74 rport=55715 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446948784.945:683722): pid=22025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446948784.945:683723): pid=22025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446948784.945:683724): pid=22025 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=21939 res=1
type=USER_ROLE_CHANGE msg=audit(1446948785.017:683725): pid=22025 uid=0 auid=0 ses=21939 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446948785.040:683726): pid=22025 uid=0 auid=0 ses=21939 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446948785.044:683727): pid=22025 uid=0 auid=0 ses=21939 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446948785.044:683728): pid=22025 uid=0 auid=0 ses=21939 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446948785.045:683729): pid=22028 uid=0 auid=0 ses=21939 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=22028 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446948785.045:683730): pid=22028 uid=0 auid=0 ses=21939 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=22028 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446948785.045:683731): pid=22028 uid=0 auid=0 ses=21939 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=22028 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446948785.046:683732): pid=22028 uid=0 auid=0 ses=21939 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446948785.061:683733): pid=22025 uid=0 auid=0 ses=21939 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446948785.062:683734): pid=22025 uid=0 auid=0 ses=21939 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446948785.065:683735): pid=22025 uid=0 auid=0 ses=21939 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446948785.065:683736): pid=22025 uid=0 auid=0 ses=21939 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446948785.065:683737): pid=22025 uid=0 auid=0 ses=21939 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22025 suid=0 rport=55715 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446948785.065:683738): pid=22025 uid=0 auid=0 ses=21939 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=22025 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446948785.065:683739): pid=22025 uid=0 auid=0 ses=21939 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=22025 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446948785.065:683740): pid=22025 uid=0 auid=0 ses=21939 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=22025 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446949201.729:683741): pid=23349 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446949201.729:683742): pid=23349 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446949201.730:683743): pid=23349 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=21940 res=1
type=USER_ACCT msg=audit(1446949201.733:683744): pid=23348 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446949201.733:683745): pid=23348 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446949201.733:683746): pid=23348 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=21941 res=1
type=USER_START msg=audit(1446949201.752:683747): pid=23349 uid=0 auid=0 ses=21940 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1446949201.752:683748): pid=23348 uid=0 auid=0 ses=21941 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446949201.752:683749): pid=23348 uid=0 auid=0 ses=21941 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446949201.752:683750): pid=23349 uid=0 auid=0 ses=21940 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446949201.763:683751): pid=23349 uid=0 auid=0 ses=21940 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446949201.765:683752): pid=23349 uid=0 auid=0 ses=21940 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446949201.768:683753): pid=23348 uid=0 auid=0 ses=21941 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446949201.773:683754): pid=23348 uid=0 auid=0 ses=21941 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1446949608.753:683755): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1446949801.793:683756): pid=25193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446949801.793:683757): pid=25193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446949801.793:683758): pid=25193 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=21942 res=1
type=USER_ACCT msg=audit(1446949801.794:683759): pid=25194 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446949801.794:683760): pid=25194 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446949801.794:683761): pid=25194 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=21943 res=1
type=USER_START msg=audit(1446949801.808:683762): pid=25194 uid=0 auid=0 ses=21943 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446949801.808:683763): pid=25194 uid=0 auid=0 ses=21943 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1446949801.809:683764): pid=25193 uid=0 auid=0 ses=21942 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446949801.809:683765): pid=25193 uid=0 auid=0 ses=21942 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446949801.817:683766): pid=25194 uid=0 auid=0 ses=21943 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446949801.818:683767): pid=25194 uid=0 auid=0 ses=21943 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446949801.821:683768): pid=25193 uid=0 auid=0 ses=21942 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446949826.848:683769): pid=25193 uid=0 auid=0 ses=21942 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=CRYPTO_KEY_USER msg=audit(1446949983.236:683770): pid=25760 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=25760 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446949983.237:683771): pid=25760 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=25760 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446949983.237:683772): pid=25760 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=25760 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446949983.280:683773): pid=25759 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=25760 suid=74 rport=57695 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446949983.280:683774): pid=25759 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=25760 suid=74 rport=57695 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446949983.407:683775): pid=25759 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=57695 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446949983.408:683776): pid=25759 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=57695 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446949983.414:683777): pid=25759 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446949983.416:683778): pid=25759 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25760 suid=74 rport=57695 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446949983.417:683779): pid=25759 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446949983.418:683780): pid=25759 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446949983.418:683781): pid=25759 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=21944 res=1
type=USER_ROLE_CHANGE msg=audit(1446949983.485:683782): pid=25759 uid=0 auid=0 ses=21944 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446949983.511:683783): pid=25759 uid=0 auid=0 ses=21944 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446949983.514:683784): pid=25759 uid=0 auid=0 ses=21944 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446949983.515:683785): pid=25759 uid=0 auid=0 ses=21944 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446949983.517:683786): pid=25762 uid=0 auid=0 ses=21944 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=25762 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446949983.517:683787): pid=25762 uid=0 auid=0 ses=21944 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=25762 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446949983.517:683788): pid=25762 uid=0 auid=0 ses=21944 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=25762 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446949983.518:683789): pid=25762 uid=0 auid=0 ses=21944 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446949983.537:683790): pid=25759 uid=0 auid=0 ses=21944 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446949983.537:683791): pid=25759 uid=0 auid=0 ses=21944 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446949983.542:683792): pid=25759 uid=0 auid=0 ses=21944 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446949983.542:683793): pid=25759 uid=0 auid=0 ses=21944 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446949983.543:683794): pid=25759 uid=0 auid=0 ses=21944 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25759 suid=0 rport=57695 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446949983.543:683795): pid=25759 uid=0 auid=0 ses=21944 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=25759 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446949983.543:683796): pid=25759 uid=0 auid=0 ses=21944 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=25759 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446949983.543:683797): pid=25759 uid=0 auid=0 ses=21944 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=25759 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446949983.565:683798): pid=25770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=25770 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446949983.565:683799): pid=25770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=25770 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446949983.565:683800): pid=25770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=25770 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446949983.609:683801): pid=25769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=25770 suid=74 rport=57697 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446949983.609:683802): pid=25769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=25770 suid=74 rport=57697 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446949983.736:683803): pid=25769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=57697 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446949983.736:683804): pid=25769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=57697 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446949983.741:683805): pid=25769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446949983.742:683806): pid=25769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25770 suid=74 rport=57697 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446949983.743:683807): pid=25769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446949983.744:683808): pid=25769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446949983.744:683809): pid=25769 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=21945 res=1
type=USER_ROLE_CHANGE msg=audit(1446949983.811:683810): pid=25769 uid=0 auid=0 ses=21945 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446949983.837:683811): pid=25769 uid=0 auid=0 ses=21945 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446949983.839:683812): pid=25769 uid=0 auid=0 ses=21945 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446949983.840:683813): pid=25769 uid=0 auid=0 ses=21945 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446949983.841:683814): pid=25772 uid=0 auid=0 ses=21945 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=25772 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446949983.841:683815): pid=25772 uid=0 auid=0 ses=21945 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=25772 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446949983.841:683816): pid=25772 uid=0 auid=0 ses=21945 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=25772 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446949983.842:683817): pid=25772 uid=0 auid=0 ses=21945 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446949985.138:683818): pid=25769 uid=0 auid=0 ses=21945 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446949985.138:683819): pid=25769 uid=0 auid=0 ses=21945 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446949985.144:683820): pid=25769 uid=0 auid=0 ses=21945 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446949985.144:683821): pid=25769 uid=0 auid=0 ses=21945 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446949985.144:683822): pid=25769 uid=0 auid=0 ses=21945 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25769 suid=0 rport=57697 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446949985.144:683823): pid=25769 uid=0 auid=0 ses=21945 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=25769 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446949985.144:683824): pid=25769 uid=0 auid=0 ses=21945 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=25769 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446949985.144:683825): pid=25769 uid=0 auid=0 ses=21945 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=25769 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446949985.178:683826): pid=25822 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=25822 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446949985.178:683827): pid=25822 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=25822 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446949985.178:683828): pid=25822 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=25822 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446949985.223:683829): pid=25821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=25822 suid=74 rport=57701 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446949985.223:683830): pid=25821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=25822 suid=74 rport=57701 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446949985.350:683831): pid=25821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=57701 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446949985.350:683832): pid=25821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=57701 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446949985.358:683833): pid=25821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446949985.359:683834): pid=25821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25822 suid=74 rport=57701 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446949985.360:683835): pid=25821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446949985.360:683836): pid=25821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446949985.361:683837): pid=25821 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=21946 res=1
type=USER_ROLE_CHANGE msg=audit(1446949985.426:683838): pid=25821 uid=0 auid=0 ses=21946 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446949985.446:683839): pid=25821 uid=0 auid=0 ses=21946 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446949985.448:683840): pid=25821 uid=0 auid=0 ses=21946 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446949985.448:683841): pid=25821 uid=0 auid=0 ses=21946 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446949985.449:683842): pid=25827 uid=0 auid=0 ses=21946 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=25827 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446949985.449:683843): pid=25827 uid=0 auid=0 ses=21946 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=25827 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446949985.449:683844): pid=25827 uid=0 auid=0 ses=21946 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=25827 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446949985.450:683845): pid=25827 uid=0 auid=0 ses=21946 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446949985.469:683846): pid=25821 uid=0 auid=0 ses=21946 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446949985.469:683847): pid=25821 uid=0 auid=0 ses=21946 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446949985.471:683848): pid=25821 uid=0 auid=0 ses=21946 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446949985.472:683849): pid=25821 uid=0 auid=0 ses=21946 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446949985.472:683850): pid=25821 uid=0 auid=0 ses=21946 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25821 suid=0 rport=57701 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446949985.472:683851): pid=25821 uid=0 auid=0 ses=21946 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=25821 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446949985.472:683852): pid=25821 uid=0 auid=0 ses=21946 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=25821 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446949985.472:683853): pid=25821 uid=0 auid=0 ses=21946 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=25821 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446950136.562:683854): pid=26309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=26309 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446950136.562:683855): pid=26309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=26309 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446950136.562:683856): pid=26309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=26309 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446950136.605:683857): pid=26308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=26309 suid=74 rport=58243 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446950136.606:683858): pid=26308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=26309 suid=74 rport=58243 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446950136.736:683859): pid=26308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=58243 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446950136.736:683860): pid=26308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=58243 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446950136.746:683861): pid=26308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446950136.748:683862): pid=26308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26309 suid=74 rport=58243 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446950136.749:683863): pid=26308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446950136.750:683864): pid=26308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446950136.750:683865): pid=26308 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=21947 res=1
type=USER_ROLE_CHANGE msg=audit(1446950136.817:683866): pid=26308 uid=0 auid=0 ses=21947 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446950136.839:683867): pid=26308 uid=0 auid=0 ses=21947 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446950136.842:683868): pid=26308 uid=0 auid=0 ses=21947 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446950136.842:683869): pid=26308 uid=0 auid=0 ses=21947 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446950136.844:683870): pid=26311 uid=0 auid=0 ses=21947 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=26311 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446950136.844:683871): pid=26311 uid=0 auid=0 ses=21947 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=26311 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446950136.844:683872): pid=26311 uid=0 auid=0 ses=21947 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=26311 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446950136.844:683873): pid=26311 uid=0 auid=0 ses=21947 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446950136.875:683874): pid=26308 uid=0 auid=0 ses=21947 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446950136.875:683875): pid=26308 uid=0 auid=0 ses=21947 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446950136.880:683876): pid=26308 uid=0 auid=0 ses=21947 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446950136.881:683877): pid=26308 uid=0 auid=0 ses=21947 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446950136.881:683878): pid=26308 uid=0 auid=0 ses=21947 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26308 suid=0 rport=58243 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446950136.881:683879): pid=26308 uid=0 auid=0 ses=21947 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=26308 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446950136.881:683880): pid=26308 uid=0 auid=0 ses=21947 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=26308 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446950136.881:683881): pid=26308 uid=0 auid=0 ses=21947 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=26308 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446950136.902:683882): pid=26319 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=26319 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446950136.902:683883): pid=26319 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=26319 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446950136.903:683884): pid=26319 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=26319 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446950136.947:683885): pid=26318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=26319 suid=74 rport=58246 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446950136.948:683886): pid=26318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=26319 suid=74 rport=58246 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446950137.077:683887): pid=26318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=58246 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446950137.077:683888): pid=26318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=58246 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446950137.087:683889): pid=26318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446950137.087:683890): pid=26318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26319 suid=74 rport=58246 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446950137.090:683891): pid=26318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446950137.090:683892): pid=26318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446950137.091:683893): pid=26318 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=21948 res=1
type=USER_ROLE_CHANGE msg=audit(1446950137.158:683894): pid=26318 uid=0 auid=0 ses=21948 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446950137.178:683895): pid=26318 uid=0 auid=0 ses=21948 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446950137.180:683896): pid=26318 uid=0 auid=0 ses=21948 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446950137.180:683897): pid=26318 uid=0 auid=0 ses=21948 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446950137.182:683898): pid=26321 uid=0 auid=0 ses=21948 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=26321 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446950137.182:683899): pid=26321 uid=0 auid=0 ses=21948 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=26321 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446950137.182:683900): pid=26321 uid=0 auid=0 ses=21948 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=26321 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446950137.183:683901): pid=26321 uid=0 auid=0 ses=21948 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=SYSCALL msg=audit(1446950138.080:683902): arch=c000003e syscall=59 success=yes exit=0 a0=2115500 a1=2112680 a2=210a5e0 a3=7fff0cc6b6f0 items=3 ppid=26321 pid=26389 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21948 comm="service" exe="/usr/bin/bash" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key="privileged"
type=EXECVE msg=audit(1446950138.080:683902): argc=4 a0="/bin/sh" a1="/sbin/service" a2="snmpd" a3="status"
type=CWD msg=audit(1446950138.080:683902):  cwd="/root"
type=PATH msg=audit(1446950138.080:683902): item=0 name="/sbin/service" inode=663302 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:bin_t:s0 objtype=NORMAL
type=PATH msg=audit(1446950138.080:683902): item=1 name=(null) inode=25167244 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:shell_exec_t:s0 objtype=NORMAL
type=PATH msg=audit(1446950138.080:683902): item=2 name=(null) inode=2292 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=SYSCALL msg=audit(1446950138.104:683903): arch=c000003e syscall=59 success=yes exit=0 a0=bcc740 a1=bf5e90 a2=bcdf50 a3=7fff2323feb0 items=2 ppid=26321 pid=26389 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21948 comm="systemctl" exe="/usr/bin/systemctl" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key="privileged"
type=EXECVE msg=audit(1446950138.104:683903): argc=3 a0="/bin/systemctl" a1="status" a2="snmpd.service"
type=CWD msg=audit(1446950138.104:683903):  cwd="/"
type=PATH msg=audit(1446950138.104:683903): item=0 name="/bin/systemctl" inode=25275302 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:systemd_systemctl_exec_t:s0 objtype=NORMAL
type=PATH msg=audit(1446950138.104:683903): item=1 name=(null) inode=2292 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=SYSCALL msg=audit(1446950138.127:683904): arch=c000003e syscall=59 success=yes exit=0 a0=2115130 a1=2115b90 a2=210a5e0 a3=7fff0cc6b140 items=2 ppid=26321 pid=26403 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21948 comm="systemctl" exe="/usr/bin/systemctl" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key="privileged"
type=EXECVE msg=audit(1446950138.127:683904): argc=3 a0="/bin/systemctl" a1="is-enabled" a2="snmpd"
type=CWD msg=audit(1446950138.127:683904):  cwd="/root"
type=PATH msg=audit(1446950138.127:683904): item=0 name="/bin/systemctl" inode=25275302 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:systemd_systemctl_exec_t:s0 objtype=NORMAL
type=PATH msg=audit(1446950138.127:683904): item=1 name=(null) inode=2292 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=SYSCALL msg=audit(1446950138.130:683905): arch=c000003e syscall=59 success=yes exit=0 a0=2108c30 a1=2112680 a2=210a5e0 a3=7fff0cc6b6f0 items=3 ppid=26321 pid=26404 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21948 comm="service" exe="/usr/bin/bash" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key="privileged"
type=EXECVE msg=audit(1446950138.130:683905): argc=4 a0="/bin/sh" a1="/sbin/service" a2="crond" a3="status"
type=CWD msg=audit(1446950138.130:683905):  cwd="/root"
type=PATH msg=audit(1446950138.130:683905): item=0 name="/sbin/service" inode=663302 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:bin_t:s0 objtype=NORMAL
type=PATH msg=audit(1446950138.130:683905): item=1 name=(null) inode=25167244 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:shell_exec_t:s0 objtype=NORMAL
type=PATH msg=audit(1446950138.130:683905): item=2 name=(null) inode=2292 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=SYSCALL msg=audit(1446950138.152:683906): arch=c000003e syscall=59 success=yes exit=0 a0=1752740 a1=177be90 a2=1753f50 a3=7fffae208f00 items=2 ppid=26321 pid=26404 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21948 comm="systemctl" exe="/usr/bin/systemctl" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key="privileged"
type=EXECVE msg=audit(1446950138.152:683906): argc=3 a0="/bin/systemctl" a1="status" a2="crond.service"
type=CWD msg=audit(1446950138.152:683906):  cwd="/"
type=PATH msg=audit(1446950138.152:683906): item=0 name="/bin/systemctl" inode=25275302 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:systemd_systemctl_exec_t:s0 objtype=NORMAL
type=PATH msg=audit(1446950138.152:683906): item=1 name=(null) inode=2292 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=SYSCALL msg=audit(1446950138.160:683907): arch=c000003e syscall=59 success=yes exit=0 a0=2115f70 a1=2115b90 a2=210a5e0 a3=7fff0cc6b140 items=2 ppid=26321 pid=26418 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21948 comm="systemctl" exe="/usr/bin/systemctl" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key="privileged"
type=EXECVE msg=audit(1446950138.160:683907): argc=3 a0="/bin/systemctl" a1="is-enabled" a2="crond"
type=CWD msg=audit(1446950138.160:683907):  cwd="/root"
type=PATH msg=audit(1446950138.160:683907): item=0 name="/bin/systemctl" inode=25275302 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:systemd_systemctl_exec_t:s0 objtype=NORMAL
type=PATH msg=audit(1446950138.160:683907): item=1 name=(null) inode=2292 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=SYSCALL msg=audit(1446950138.163:683908): arch=c000003e syscall=59 success=yes exit=0 a0=21154c0 a1=2112680 a2=210a5e0 a3=7fff0cc6b6f0 items=3 ppid=26321 pid=26419 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21948 comm="service" exe="/usr/bin/bash" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key="privileged"
type=EXECVE msg=audit(1446950138.163:683908): argc=4 a0="/bin/sh" a1="/sbin/service" a2="firewalld" a3="status"
type=CWD msg=audit(1446950138.163:683908):  cwd="/root"
type=PATH msg=audit(1446950138.163:683908): item=0 name="/sbin/service" inode=663302 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:bin_t:s0 objtype=NORMAL
type=PATH msg=audit(1446950138.163:683908): item=1 name=(null) inode=25167244 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:shell_exec_t:s0 objtype=NORMAL
type=PATH msg=audit(1446950138.163:683908): item=2 name=(null) inode=2292 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=SYSCALL msg=audit(1446950138.182:683909): arch=c000003e syscall=59 success=yes exit=0 a0=2270740 a1=2299e90 a2=2271f50 a3=7fff042f4530 items=2 ppid=26321 pid=26419 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21948 comm="systemctl" exe="/usr/bin/systemctl" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key="privileged"
type=EXECVE msg=audit(1446950138.182:683909): argc=3 a0="/bin/systemctl" a1="status" a2="firewalld.service"
type=CWD msg=audit(1446950138.182:683909):  cwd="/"
type=PATH msg=audit(1446950138.182:683909): item=0 name="/bin/systemctl" inode=25275302 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:systemd_systemctl_exec_t:s0 objtype=NORMAL
type=PATH msg=audit(1446950138.182:683909): item=1 name=(null) inode=2292 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=SYSCALL msg=audit(1446950138.191:683910): arch=c000003e syscall=59 success=yes exit=0 a0=21154e0 a1=2115bf0 a2=210a5e0 a3=7fff0cc6b140 items=2 ppid=26321 pid=26433 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21948 comm="systemctl" exe="/usr/bin/systemctl" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key="privileged"
type=EXECVE msg=audit(1446950138.191:683910): argc=3 a0="/bin/systemctl" a1="is-enabled" a2="firewalld"
type=CWD msg=audit(1446950138.191:683910):  cwd="/root"
type=PATH msg=audit(1446950138.191:683910): item=0 name="/bin/systemctl" inode=25275302 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:systemd_systemctl_exec_t:s0 objtype=NORMAL
type=PATH msg=audit(1446950138.191:683910): item=1 name=(null) inode=2292 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=SYSCALL msg=audit(1446950138.194:683911): arch=c000003e syscall=59 success=yes exit=0 a0=2114fd0 a1=2112680 a2=210a5e0 a3=7fff0cc6b6f0 items=3 ppid=26321 pid=26434 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21948 comm="service" exe="/usr/bin/bash" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key="privileged"
type=EXECVE msg=audit(1446950138.194:683911): argc=4 a0="/bin/sh" a1="/sbin/service" a2="ntpd" a3="status"
type=CWD msg=audit(1446950138.194:683911):  cwd="/root"
type=PATH msg=audit(1446950138.194:683911): item=0 name="/sbin/service" inode=663302 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:bin_t:s0 objtype=NORMAL
type=PATH msg=audit(1446950138.194:683911): item=1 name=(null) inode=25167244 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:shell_exec_t:s0 objtype=NORMAL
type=PATH msg=audit(1446950138.194:683911): item=2 name=(null) inode=2292 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=SYSCALL msg=audit(1446950138.214:683912): arch=c000003e syscall=59 success=yes exit=0 a0=d4c740 a1=d75e90 a2=d4df50 a3=7fff813c4a80 items=2 ppid=26321 pid=26434 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21948 comm="systemctl" exe="/usr/bin/systemctl" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key="privileged"
type=EXECVE msg=audit(1446950138.214:683912): argc=3 a0="/bin/systemctl" a1="status" a2="ntpd.service"
type=CWD msg=audit(1446950138.214:683912):  cwd="/"
type=PATH msg=audit(1446950138.214:683912): item=0 name="/bin/systemctl" inode=25275302 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:systemd_systemctl_exec_t:s0 objtype=NORMAL
type=PATH msg=audit(1446950138.214:683912): item=1 name=(null) inode=2292 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=SYSCALL msg=audit(1446950138.262:683913): arch=c000003e syscall=59 success=yes exit=0 a0=21158a0 a1=2112d00 a2=210a5e0 a3=7fff0cc6b140 items=2 ppid=26321 pid=26457 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21948 comm="systemctl" exe="/usr/bin/systemctl" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key="privileged"
type=EXECVE msg=audit(1446950138.262:683913): argc=3 a0="/bin/systemctl" a1="is-enabled" a2="ntpd"
type=CWD msg=audit(1446950138.262:683913):  cwd="/root"
type=PATH msg=audit(1446950138.262:683913): item=0 name="/bin/systemctl" inode=25275302 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:systemd_systemctl_exec_t:s0 objtype=NORMAL
type=PATH msg=audit(1446950138.262:683913): item=1 name=(null) inode=2292 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=SYSCALL msg=audit(1446950139.124:683914): arch=c000003e syscall=59 success=yes exit=0 a0=2114cb0 a1=21189a0 a2=210a5e0 a3=7fff0cc698f0 items=2 ppid=26321 pid=26545 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21948 comm="systemctl" exe="/usr/bin/systemctl" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key="privileged"
type=EXECVE msg=audit(1446950139.124:683914): argc=3 a0="/bin/systemctl" a1="is-enabled" a2="auditd"
type=CWD msg=audit(1446950139.124:683914):  cwd="/root"
type=PATH msg=audit(1446950139.124:683914): item=0 name="/bin/systemctl" inode=25275302 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:systemd_systemctl_exec_t:s0 objtype=NORMAL
type=PATH msg=audit(1446950139.124:683914): item=1 name=(null) inode=2292 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=SYSCALL msg=audit(1446950139.129:683915): arch=c000003e syscall=59 success=yes exit=0 a0=2118cd0 a1=2117040 a2=210a5e0 a3=7fff0cc69f90 items=3 ppid=26321 pid=26546 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21948 comm="service" exe="/usr/bin/bash" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key="privileged"
type=EXECVE msg=audit(1446950139.129:683915): argc=4 a0="/bin/sh" a1="/sbin/service" a2="auditd" a3="status"
type=CWD msg=audit(1446950139.129:683915):  cwd="/root"
type=PATH msg=audit(1446950139.129:683915): item=0 name="/sbin/service" inode=663302 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:bin_t:s0 objtype=NORMAL
type=PATH msg=audit(1446950139.129:683915): item=1 name=(null) inode=25167244 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:shell_exec_t:s0 objtype=NORMAL
type=PATH msg=audit(1446950139.129:683915): item=2 name=(null) inode=2292 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=SYSCALL msg=audit(1446950139.144:683916): arch=c000003e syscall=59 success=yes exit=0 a0=c7e740 a1=ca7e90 a2=c7ff50 a3=7fff2347fd00 items=2 ppid=26321 pid=26546 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21948 comm="systemctl" exe="/usr/bin/systemctl" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key="privileged"
type=EXECVE msg=audit(1446950139.144:683916): argc=3 a0="/bin/systemctl" a1="status" a2="auditd.service"
type=CWD msg=audit(1446950139.144:683916):  cwd="/"
type=PATH msg=audit(1446950139.144:683916): item=0 name="/bin/systemctl" inode=25275302 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:systemd_systemctl_exec_t:s0 objtype=NORMAL
type=PATH msg=audit(1446950139.144:683916): item=1 name=(null) inode=2292 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=SYSCALL msg=audit(1446950139.408:683917): arch=c000003e syscall=59 success=yes exit=0 a0=2123250 a1=2112c20 a2=210a5e0 a3=7fff0cc6b6f0 items=2 ppid=26321 pid=26691 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21948 comm="systemctl" exe="/usr/bin/systemctl" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key="privileged"
type=EXECVE msg=audit(1446950139.408:683917): argc=3 a0="/bin/systemctl" a1="is-enabled" a2="os_watcher"
type=CWD msg=audit(1446950139.408:683917):  cwd="/root"
type=PATH msg=audit(1446950139.408:683917): item=0 name="/bin/systemctl" inode=25275302 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:systemd_systemctl_exec_t:s0 objtype=NORMAL
type=PATH msg=audit(1446950139.408:683917): item=1 name=(null) inode=2292 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=USER_END msg=audit(1446950139.480:683918): pid=26318 uid=0 auid=0 ses=21948 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446950139.480:683919): pid=26318 uid=0 auid=0 ses=21948 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446950139.485:683920): pid=26318 uid=0 auid=0 ses=21948 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446950139.485:683921): pid=26318 uid=0 auid=0 ses=21948 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446950139.485:683922): pid=26318 uid=0 auid=0 ses=21948 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26318 suid=0 rport=58246 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446950139.485:683923): pid=26318 uid=0 auid=0 ses=21948 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=26318 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446950139.485:683924): pid=26318 uid=0 auid=0 ses=21948 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=26318 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446950139.485:683925): pid=26318 uid=0 auid=0 ses=21948 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=26318 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446950139.515:683926): pid=26777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=26777 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446950139.515:683927): pid=26777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=26777 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446950139.515:683928): pid=26777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=26777 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446950139.561:683929): pid=26776 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=26777 suid=74 rport=58251 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446950139.561:683930): pid=26776 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=26777 suid=74 rport=58251 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446950139.690:683931): pid=26776 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=58251 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446950139.690:683932): pid=26776 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=58251 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446950139.696:683933): pid=26776 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446950139.697:683934): pid=26776 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26777 suid=74 rport=58251 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446950139.698:683935): pid=26776 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446950139.698:683936): pid=26776 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446950139.698:683937): pid=26776 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=21949 res=1
type=USER_ROLE_CHANGE msg=audit(1446950139.768:683938): pid=26776 uid=0 auid=0 ses=21949 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446950139.790:683939): pid=26776 uid=0 auid=0 ses=21949 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446950139.793:683940): pid=26776 uid=0 auid=0 ses=21949 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446950139.793:683941): pid=26776 uid=0 auid=0 ses=21949 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446950139.795:683942): pid=26779 uid=0 auid=0 ses=21949 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=26779 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446950139.795:683943): pid=26779 uid=0 auid=0 ses=21949 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=26779 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446950139.795:683944): pid=26779 uid=0 auid=0 ses=21949 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=26779 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446950139.796:683945): pid=26779 uid=0 auid=0 ses=21949 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446950139.813:683946): pid=26776 uid=0 auid=0 ses=21949 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446950139.813:683947): pid=26776 uid=0 auid=0 ses=21949 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446950139.816:683948): pid=26776 uid=0 auid=0 ses=21949 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446950139.817:683949): pid=26776 uid=0 auid=0 ses=21949 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446950139.817:683950): pid=26776 uid=0 auid=0 ses=21949 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26776 suid=0 rport=58251 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446950139.817:683951): pid=26776 uid=0 auid=0 ses=21949 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=26776 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446950139.817:683952): pid=26776 uid=0 auid=0 ses=21949 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=26776 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446950139.817:683953): pid=26776 uid=0 auid=0 ses=21949 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=26776 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446950401.874:683954): pid=27587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446950401.874:683955): pid=27587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446950401.875:683956): pid=27588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446950401.875:683957): pid=27588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446950401.876:683958): pid=27587 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=21950 res=1
type=LOGIN msg=audit(1446950401.876:683959): pid=27588 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=21951 res=1
type=USER_START msg=audit(1446950401.896:683960): pid=27587 uid=0 auid=0 ses=21950 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446950401.896:683961): pid=27587 uid=0 auid=0 ses=21950 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1446950401.897:683962): pid=27588 uid=0 auid=0 ses=21951 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446950401.897:683963): pid=27588 uid=0 auid=0 ses=21951 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446950401.905:683964): pid=27588 uid=0 auid=0 ses=21951 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446950401.906:683965): pid=27588 uid=0 auid=0 ses=21951 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446950401.916:683966): pid=27587 uid=0 auid=0 ses=21950 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446950401.917:683967): pid=27587 uid=0 auid=0 ses=21950 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446951001.931:683968): pid=29433 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446951001.931:683969): pid=29434 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446951001.931:683970): pid=29433 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446951001.931:683971): pid=29434 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446951001.931:683972): pid=29433 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=21952 res=1
type=LOGIN msg=audit(1446951001.931:683973): pid=29434 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=21953 res=1
type=USER_START msg=audit(1446951001.947:683974): pid=29434 uid=0 auid=0 ses=21953 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446951001.947:683975): pid=29434 uid=0 auid=0 ses=21953 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1446951001.948:683976): pid=29433 uid=0 auid=0 ses=21952 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446951001.948:683977): pid=29433 uid=0 auid=0 ses=21952 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446951001.957:683978): pid=29434 uid=0 auid=0 ses=21953 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446951001.959:683979): pid=29434 uid=0 auid=0 ses=21953 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446951001.967:683980): pid=29433 uid=0 auid=0 ses=21952 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446951001.968:683981): pid=29433 uid=0 auid=0 ses=21952 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1446951182.436:683982): pid=29994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=29994 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446951182.436:683983): pid=29994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=29994 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446951182.436:683984): pid=29994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=29994 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446951182.480:683985): pid=29993 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=29994 suid=74 rport=59828 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446951182.481:683986): pid=29993 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=29994 suid=74 rport=59828 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446951182.606:683987): pid=29993 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59828 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446951182.606:683988): pid=29993 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=59828 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446951182.614:683989): pid=29993 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446951182.616:683990): pid=29993 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29994 suid=74 rport=59828 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446951182.618:683991): pid=29993 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446951182.618:683992): pid=29993 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446951182.618:683993): pid=29993 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=21954 res=1
type=USER_ROLE_CHANGE msg=audit(1446951182.688:683994): pid=29993 uid=0 auid=0 ses=21954 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446951182.710:683995): pid=29993 uid=0 auid=0 ses=21954 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446951182.713:683996): pid=29993 uid=0 auid=0 ses=21954 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446951182.713:683997): pid=29993 uid=0 auid=0 ses=21954 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446951182.715:683998): pid=29996 uid=0 auid=0 ses=21954 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=29996 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446951182.715:683999): pid=29996 uid=0 auid=0 ses=21954 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=29996 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446951182.715:684000): pid=29996 uid=0 auid=0 ses=21954 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=29996 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446951182.716:684001): pid=29996 uid=0 auid=0 ses=21954 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446951182.735:684002): pid=29993 uid=0 auid=0 ses=21954 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446951182.735:684003): pid=29993 uid=0 auid=0 ses=21954 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446951182.741:684004): pid=29993 uid=0 auid=0 ses=21954 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446951182.741:684005): pid=29993 uid=0 auid=0 ses=21954 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446951182.742:684006): pid=29993 uid=0 auid=0 ses=21954 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29993 suid=0 rport=59828 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446951182.742:684007): pid=29993 uid=0 auid=0 ses=21954 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=29993 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446951182.742:684008): pid=29993 uid=0 auid=0 ses=21954 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=29993 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446951182.742:684009): pid=29993 uid=0 auid=0 ses=21954 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=29993 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446951182.761:684010): pid=30004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=30004 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446951182.762:684011): pid=30004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=30004 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446951182.762:684012): pid=30004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=30004 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446951182.810:684013): pid=30003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=30004 suid=74 rport=59830 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446951182.810:684014): pid=30003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=30004 suid=74 rport=59830 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446951182.938:684015): pid=30003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59830 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446951182.938:684016): pid=30003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=59830 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446951182.949:684017): pid=30003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446951182.950:684018): pid=30003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=30004 suid=74 rport=59830 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446951182.952:684019): pid=30003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446951182.952:684020): pid=30003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446951182.953:684021): pid=30003 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=21955 res=1
type=USER_ROLE_CHANGE msg=audit(1446951183.019:684022): pid=30003 uid=0 auid=0 ses=21955 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446951183.044:684023): pid=30003 uid=0 auid=0 ses=21955 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446951183.046:684024): pid=30003 uid=0 auid=0 ses=21955 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446951183.047:684025): pid=30003 uid=0 auid=0 ses=21955 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446951183.048:684026): pid=30010 uid=0 auid=0 ses=21955 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=30010 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446951183.048:684027): pid=30010 uid=0 auid=0 ses=21955 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=30010 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446951183.048:684028): pid=30010 uid=0 auid=0 ses=21955 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=30010 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446951183.049:684029): pid=30010 uid=0 auid=0 ses=21955 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446951184.341:684030): pid=30003 uid=0 auid=0 ses=21955 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446951184.342:684031): pid=30003 uid=0 auid=0 ses=21955 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446951184.348:684032): pid=30003 uid=0 auid=0 ses=21955 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446951184.348:684033): pid=30003 uid=0 auid=0 ses=21955 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446951184.349:684034): pid=30003 uid=0 auid=0 ses=21955 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=30003 suid=0 rport=59830 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446951184.349:684035): pid=30003 uid=0 auid=0 ses=21955 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=30003 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446951184.349:684036): pid=30003 uid=0 auid=0 ses=21955 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=30003 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446951184.349:684037): pid=30003 uid=0 auid=0 ses=21955 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=30003 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446951184.377:684038): pid=30060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=30060 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446951184.377:684039): pid=30060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=30060 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446951184.377:684040): pid=30060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=30060 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446951184.422:684041): pid=30059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=30060 suid=74 rport=59831 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446951184.422:684042): pid=30059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=30060 suid=74 rport=59831 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446951184.552:684043): pid=30059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59831 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446951184.552:684044): pid=30059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=59831 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446951184.561:684045): pid=30059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446951184.562:684046): pid=30059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=30060 suid=74 rport=59831 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446951184.563:684047): pid=30059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446951184.564:684048): pid=30059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446951184.564:684049): pid=30059 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=21956 res=1
type=USER_ROLE_CHANGE msg=audit(1446951184.633:684050): pid=30059 uid=0 auid=0 ses=21956 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446951184.656:684051): pid=30059 uid=0 auid=0 ses=21956 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446951184.659:684052): pid=30059 uid=0 auid=0 ses=21956 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446951184.659:684053): pid=30059 uid=0 auid=0 ses=21956 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446951184.661:684054): pid=30062 uid=0 auid=0 ses=21956 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=30062 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446951184.661:684055): pid=30062 uid=0 auid=0 ses=21956 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=30062 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446951184.661:684056): pid=30062 uid=0 auid=0 ses=21956 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=30062 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446951184.661:684057): pid=30062 uid=0 auid=0 ses=21956 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446951184.680:684058): pid=30059 uid=0 auid=0 ses=21956 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446951184.680:684059): pid=30059 uid=0 auid=0 ses=21956 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446951184.684:684060): pid=30059 uid=0 auid=0 ses=21956 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446951184.684:684061): pid=30059 uid=0 auid=0 ses=21956 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446951184.685:684062): pid=30059 uid=0 auid=0 ses=21956 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=30059 suid=0 rport=59831 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446951184.685:684063): pid=30059 uid=0 auid=0 ses=21956 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=30059 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446951184.685:684064): pid=30059 uid=0 auid=0 ses=21956 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=30059 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446951184.685:684065): pid=30059 uid=0 auid=0 ses=21956 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=30059 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446951601.994:684066): pid=31352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446951601.994:684067): pid=31351 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446951601.994:684068): pid=31352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446951601.994:684069): pid=31351 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446951601.995:684070): pid=31352 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=21957 res=1
type=LOGIN msg=audit(1446951601.995:684071): pid=31351 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=21958 res=1
type=USER_START msg=audit(1446951602.016:684072): pid=31352 uid=0 auid=0 ses=21957 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446951602.016:684073): pid=31352 uid=0 auid=0 ses=21957 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1446951602.016:684074): pid=31351 uid=0 auid=0 ses=21958 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446951602.016:684075): pid=31351 uid=0 auid=0 ses=21958 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446951602.026:684076): pid=31352 uid=0 auid=0 ses=21957 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446951602.028:684077): pid=31352 uid=0 auid=0 ses=21957 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446951602.031:684078): pid=31351 uid=0 auid=0 ses=21958 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446951602.035:684079): pid=31351 uid=0 auid=0 ses=21958 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446951661.048:684080): pid=31555 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446951661.048:684081): pid=31555 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446951661.048:684082): pid=31555 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=21959 res=1
type=USER_START msg=audit(1446951661.057:684083): pid=31555 uid=0 auid=0 ses=21959 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446951661.057:684084): pid=31555 uid=0 auid=0 ses=21959 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446951661.083:684085): pid=31555 uid=0 auid=0 ses=21959 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446951661.085:684086): pid=31555 uid=0 auid=0 ses=21959 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1446951684.759:684087): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1446952201.099:684089): pid=1003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446952201.099:684088): pid=1004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446952201.099:684090): pid=1003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446952201.099:684091): pid=1004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446952201.100:684092): pid=1003 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=21960 res=1
type=LOGIN msg=audit(1446952201.100:684093): pid=1004 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=21961 res=1
type=USER_START msg=audit(1446952201.113:684094): pid=1003 uid=0 auid=0 ses=21960 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1446952201.113:684095): pid=1004 uid=0 auid=0 ses=21961 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446952201.113:684096): pid=1004 uid=0 auid=0 ses=21961 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446952201.113:684097): pid=1003 uid=0 auid=0 ses=21960 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446952201.120:684098): pid=1004 uid=0 auid=0 ses=21961 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446952201.123:684099): pid=1003 uid=0 auid=0 ses=21960 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446952201.125:684100): pid=1004 uid=0 auid=0 ses=21961 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446952201.127:684101): pid=1003 uid=0 auid=0 ses=21960 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1446952382.499:684102): pid=1569 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=1569 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446952382.500:684103): pid=1569 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=1569 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446952382.500:684104): pid=1569 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=1569 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446952382.544:684105): pid=1568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=1569 suid=74 rport=61803 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446952382.544:684106): pid=1568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=1569 suid=74 rport=61803 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446952382.674:684107): pid=1568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=61803 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446952382.674:684108): pid=1568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=61803 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446952382.681:684109): pid=1568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446952382.683:684110): pid=1568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1569 suid=74 rport=61803 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446952382.684:684111): pid=1568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446952382.684:684112): pid=1568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446952382.684:684113): pid=1568 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=21962 res=1
type=USER_ROLE_CHANGE msg=audit(1446952382.754:684114): pid=1568 uid=0 auid=0 ses=21962 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446952382.772:684115): pid=1568 uid=0 auid=0 ses=21962 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446952382.775:684116): pid=1568 uid=0 auid=0 ses=21962 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446952382.775:684117): pid=1568 uid=0 auid=0 ses=21962 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446952382.777:684118): pid=1583 uid=0 auid=0 ses=21962 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=1583 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446952382.777:684119): pid=1583 uid=0 auid=0 ses=21962 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=1583 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446952382.777:684120): pid=1583 uid=0 auid=0 ses=21962 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=1583 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446952382.778:684121): pid=1583 uid=0 auid=0 ses=21962 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446952382.795:684122): pid=1568 uid=0 auid=0 ses=21962 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446952382.795:684123): pid=1568 uid=0 auid=0 ses=21962 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446952382.800:684124): pid=1568 uid=0 auid=0 ses=21962 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446952382.800:684125): pid=1568 uid=0 auid=0 ses=21962 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446952382.800:684126): pid=1568 uid=0 auid=0 ses=21962 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1568 suid=0 rport=61803 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446952382.800:684127): pid=1568 uid=0 auid=0 ses=21962 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=1568 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446952382.800:684128): pid=1568 uid=0 auid=0 ses=21962 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=1568 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446952382.800:684129): pid=1568 uid=0 auid=0 ses=21962 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=1568 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446952382.829:684130): pid=1590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=1590 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446952382.829:684131): pid=1590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=1590 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446952382.830:684132): pid=1590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=1590 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446952382.874:684133): pid=1589 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=1590 suid=74 rport=61810 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446952382.874:684134): pid=1589 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=1590 suid=74 rport=61810 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446952383.002:684135): pid=1589 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=61810 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446952383.002:684136): pid=1589 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=61810 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446952383.011:684137): pid=1589 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446952383.012:684138): pid=1589 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1590 suid=74 rport=61810 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446952383.014:684139): pid=1589 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446952383.014:684140): pid=1589 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446952383.014:684141): pid=1589 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=21963 res=1
type=USER_ROLE_CHANGE msg=audit(1446952383.091:684142): pid=1589 uid=0 auid=0 ses=21963 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446952383.112:684143): pid=1589 uid=0 auid=0 ses=21963 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446952383.114:684144): pid=1589 uid=0 auid=0 ses=21963 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446952383.114:684145): pid=1589 uid=0 auid=0 ses=21963 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446952383.115:684146): pid=1592 uid=0 auid=0 ses=21963 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=1592 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446952383.116:684147): pid=1592 uid=0 auid=0 ses=21963 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=1592 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446952383.116:684148): pid=1592 uid=0 auid=0 ses=21963 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=1592 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446952383.116:684149): pid=1592 uid=0 auid=0 ses=21963 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446952384.385:684150): pid=1589 uid=0 auid=0 ses=21963 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446952384.385:684151): pid=1589 uid=0 auid=0 ses=21963 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446952384.389:684152): pid=1589 uid=0 auid=0 ses=21963 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446952384.389:684153): pid=1589 uid=0 auid=0 ses=21963 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446952384.390:684154): pid=1589 uid=0 auid=0 ses=21963 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1589 suid=0 rport=61810 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446952384.390:684155): pid=1589 uid=0 auid=0 ses=21963 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=1589 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446952384.390:684156): pid=1589 uid=0 auid=0 ses=21963 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=1589 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446952384.390:684157): pid=1589 uid=0 auid=0 ses=21963 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=1589 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446952384.423:684158): pid=1661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=1661 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446952384.423:684159): pid=1661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=1661 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446952384.423:684160): pid=1661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=1661 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446952384.468:684161): pid=1660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=1661 suid=74 rport=61812 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446952384.468:684162): pid=1660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=1661 suid=74 rport=61812 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446952384.598:684163): pid=1660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=61812 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446952384.598:684164): pid=1660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=61812 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446952384.604:684165): pid=1660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446952384.604:684166): pid=1660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1661 suid=74 rport=61812 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446952384.606:684167): pid=1660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446952384.607:684168): pid=1660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446952384.607:684169): pid=1660 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=21964 res=1
type=USER_ROLE_CHANGE msg=audit(1446952384.672:684170): pid=1660 uid=0 auid=0 ses=21964 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446952384.695:684171): pid=1660 uid=0 auid=0 ses=21964 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446952384.698:684172): pid=1660 uid=0 auid=0 ses=21964 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446952384.698:684173): pid=1660 uid=0 auid=0 ses=21964 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446952384.700:684174): pid=1663 uid=0 auid=0 ses=21964 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=1663 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446952384.700:684175): pid=1663 uid=0 auid=0 ses=21964 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=1663 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446952384.700:684176): pid=1663 uid=0 auid=0 ses=21964 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=1663 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446952384.701:684177): pid=1663 uid=0 auid=0 ses=21964 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446952384.718:684178): pid=1660 uid=0 auid=0 ses=21964 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446952384.718:684179): pid=1660 uid=0 auid=0 ses=21964 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446952384.721:684180): pid=1660 uid=0 auid=0 ses=21964 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446952384.721:684181): pid=1660 uid=0 auid=0 ses=21964 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446952384.721:684182): pid=1660 uid=0 auid=0 ses=21964 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1660 suid=0 rport=61812 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446952384.721:684183): pid=1660 uid=0 auid=0 ses=21964 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=1660 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446952384.721:684184): pid=1660 uid=0 auid=0 ses=21964 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=1660 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446952384.722:684185): pid=1660 uid=0 auid=0 ses=21964 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=1660 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=SYSCALL msg=audit(1446952729.664:684186): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1446952801.154:684187): pid=2887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446952801.154:684188): pid=2888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446952801.154:684189): pid=2888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446952801.154:684190): pid=2887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446952801.155:684191): pid=2888 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=21965 res=1
type=LOGIN msg=audit(1446952801.155:684192): pid=2887 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=21966 res=1
type=USER_START msg=audit(1446952801.173:684193): pid=2888 uid=0 auid=0 ses=21965 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1446952801.173:684194): pid=2887 uid=0 auid=0 ses=21966 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446952801.173:684195): pid=2888 uid=0 auid=0 ses=21965 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446952801.173:684196): pid=2887 uid=0 auid=0 ses=21966 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446952801.182:684197): pid=2888 uid=0 auid=0 ses=21965 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446952801.184:684198): pid=2888 uid=0 auid=0 ses=21965 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446952801.192:684199): pid=2887 uid=0 auid=0 ses=21966 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446952801.193:684200): pid=2887 uid=0 auid=0 ses=21966 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446953401.208:684202): pid=4730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446953401.208:684201): pid=4729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446953401.208:684203): pid=4729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446953401.208:684204): pid=4730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446953401.208:684205): pid=4729 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=21967 res=1
type=LOGIN msg=audit(1446953401.208:684206): pid=4730 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=21968 res=1
type=USER_START msg=audit(1446953401.222:684207): pid=4730 uid=0 auid=0 ses=21968 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446953401.222:684208): pid=4730 uid=0 auid=0 ses=21968 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1446953401.225:684209): pid=4729 uid=0 auid=0 ses=21967 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446953401.225:684210): pid=4729 uid=0 auid=0 ses=21967 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446953401.228:684211): pid=4730 uid=0 auid=0 ses=21968 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446953401.229:684212): pid=4730 uid=0 auid=0 ses=21968 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446953401.240:684213): pid=4729 uid=0 auid=0 ses=21967 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446953401.242:684214): pid=4729 uid=0 auid=0 ses=21967 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1446953582.648:684215): pid=5290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=5290 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446953582.649:684216): pid=5290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=5290 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446953582.649:684217): pid=5290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=5290 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446953582.692:684218): pid=5289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=5290 suid=74 rport=63784 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446953582.692:684219): pid=5289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=5290 suid=74 rport=63784 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446953582.822:684220): pid=5289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=63784 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446953582.822:684221): pid=5289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=63784 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446953582.831:684222): pid=5289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446953582.832:684223): pid=5289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5290 suid=74 rport=63784 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446953582.834:684224): pid=5289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446953582.835:684225): pid=5289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446953582.835:684226): pid=5289 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=21969 res=1
type=USER_ROLE_CHANGE msg=audit(1446953582.903:684227): pid=5289 uid=0 auid=0 ses=21969 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446953582.924:684228): pid=5289 uid=0 auid=0 ses=21969 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446953582.927:684229): pid=5289 uid=0 auid=0 ses=21969 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446953582.927:684230): pid=5289 uid=0 auid=0 ses=21969 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446953582.928:684231): pid=5292 uid=0 auid=0 ses=21969 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=5292 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446953582.929:684232): pid=5292 uid=0 auid=0 ses=21969 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=5292 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446953582.929:684233): pid=5292 uid=0 auid=0 ses=21969 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=5292 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446953582.930:684234): pid=5292 uid=0 auid=0 ses=21969 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446953582.950:684235): pid=5289 uid=0 auid=0 ses=21969 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446953582.950:684236): pid=5289 uid=0 auid=0 ses=21969 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446953582.954:684237): pid=5289 uid=0 auid=0 ses=21969 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446953582.954:684238): pid=5289 uid=0 auid=0 ses=21969 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446953582.954:684239): pid=5289 uid=0 auid=0 ses=21969 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5289 suid=0 rport=63784 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446953582.954:684240): pid=5289 uid=0 auid=0 ses=21969 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=5289 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446953582.954:684241): pid=5289 uid=0 auid=0 ses=21969 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=5289 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446953582.954:684242): pid=5289 uid=0 auid=0 ses=21969 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=5289 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446953582.978:684243): pid=5299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=5299 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446953582.979:684244): pid=5299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=5299 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446953582.979:684245): pid=5299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=5299 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446953583.025:684246): pid=5298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=5299 suid=74 rport=63786 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446953583.025:684247): pid=5298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=5299 suid=74 rport=63786 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446953583.152:684248): pid=5298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=63786 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446953583.152:684249): pid=5298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=63786 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446953583.161:684250): pid=5298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446953583.162:684251): pid=5298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5299 suid=74 rport=63786 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446953583.164:684252): pid=5298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446953583.165:684253): pid=5298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446953583.165:684254): pid=5298 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=21970 res=1
type=USER_ROLE_CHANGE msg=audit(1446953583.228:684255): pid=5298 uid=0 auid=0 ses=21970 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446953583.251:684256): pid=5298 uid=0 auid=0 ses=21970 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446953583.254:684257): pid=5298 uid=0 auid=0 ses=21970 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446953583.254:684258): pid=5298 uid=0 auid=0 ses=21970 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446953583.255:684259): pid=5301 uid=0 auid=0 ses=21970 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=5301 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446953583.255:684260): pid=5301 uid=0 auid=0 ses=21970 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=5301 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446953583.255:684261): pid=5301 uid=0 auid=0 ses=21970 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=5301 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446953583.256:684262): pid=5301 uid=0 auid=0 ses=21970 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446953584.533:684263): pid=5298 uid=0 auid=0 ses=21970 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446953584.533:684264): pid=5298 uid=0 auid=0 ses=21970 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446953584.539:684265): pid=5298 uid=0 auid=0 ses=21970 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446953584.539:684266): pid=5298 uid=0 auid=0 ses=21970 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446953584.539:684267): pid=5298 uid=0 auid=0 ses=21970 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5298 suid=0 rport=63786 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446953584.539:684268): pid=5298 uid=0 auid=0 ses=21970 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=5298 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446953584.540:684269): pid=5298 uid=0 auid=0 ses=21970 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=5298 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446953584.540:684270): pid=5298 uid=0 auid=0 ses=21970 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=5298 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446953584.574:684271): pid=5354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=5354 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446953584.574:684272): pid=5354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=5354 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446953584.574:684273): pid=5354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=5354 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446953584.619:684274): pid=5353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=5354 suid=74 rport=63794 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446953584.619:684275): pid=5353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=5354 suid=74 rport=63794 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446953584.745:684276): pid=5353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=63794 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446953584.745:684277): pid=5353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=63794 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446953584.753:684278): pid=5353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446953584.754:684279): pid=5353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5354 suid=74 rport=63794 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446953584.756:684280): pid=5353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446953584.756:684281): pid=5353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446953584.756:684282): pid=5353 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=21971 res=1
type=USER_ROLE_CHANGE msg=audit(1446953584.819:684283): pid=5353 uid=0 auid=0 ses=21971 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446953584.843:684284): pid=5353 uid=0 auid=0 ses=21971 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446953584.846:684285): pid=5353 uid=0 auid=0 ses=21971 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446953584.846:684286): pid=5353 uid=0 auid=0 ses=21971 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446953584.848:684287): pid=5356 uid=0 auid=0 ses=21971 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=5356 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446953584.848:684288): pid=5356 uid=0 auid=0 ses=21971 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=5356 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446953584.848:684289): pid=5356 uid=0 auid=0 ses=21971 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=5356 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446953584.849:684290): pid=5356 uid=0 auid=0 ses=21971 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446953584.866:684291): pid=5353 uid=0 auid=0 ses=21971 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446953584.866:684292): pid=5353 uid=0 auid=0 ses=21971 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446953584.870:684293): pid=5353 uid=0 auid=0 ses=21971 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446953584.870:684294): pid=5353 uid=0 auid=0 ses=21971 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446953584.871:684295): pid=5353 uid=0 auid=0 ses=21971 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5353 suid=0 rport=63794 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446953584.871:684296): pid=5353 uid=0 auid=0 ses=21971 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=5353 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446953584.871:684297): pid=5353 uid=0 auid=0 ses=21971 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=5353 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446953584.871:684298): pid=5353 uid=0 auid=0 ses=21971 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=5353 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=SYSCALL msg=audit(1446953761.759:684299): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1446954001.267:684301): pid=6642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446954001.267:684300): pid=6641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446954001.267:684302): pid=6642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446954001.267:684303): pid=6641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446954001.269:684304): pid=6641 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=21972 res=1
type=LOGIN msg=audit(1446954001.269:684305): pid=6642 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=21973 res=1
type=USER_START msg=audit(1446954001.284:684306): pid=6642 uid=0 auid=0 ses=21973 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1446954001.285:684307): pid=6641 uid=0 auid=0 ses=21972 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446954001.285:684308): pid=6642 uid=0 auid=0 ses=21973 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446954001.285:684309): pid=6641 uid=0 auid=0 ses=21972 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446954001.295:684310): pid=6642 uid=0 auid=0 ses=21973 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446954001.296:684311): pid=6642 uid=0 auid=0 ses=21973 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446954001.299:684312): pid=6641 uid=0 auid=0 ses=21972 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446954026.327:684313): pid=6641 uid=0 auid=0 ses=21972 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=USER_ACCT msg=audit(1446954601.344:684314): pid=8523 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446954601.344:684315): pid=8524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446954601.344:684316): pid=8524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446954601.344:684317): pid=8523 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446954601.345:684318): pid=8524 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=21974 res=1
type=LOGIN msg=audit(1446954601.345:684319): pid=8523 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=21975 res=1
type=USER_START msg=audit(1446954601.363:684320): pid=8523 uid=0 auid=0 ses=21975 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446954601.364:684321): pid=8523 uid=0 auid=0 ses=21975 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1446954601.364:684322): pid=8524 uid=0 auid=0 ses=21974 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446954601.365:684323): pid=8524 uid=0 auid=0 ses=21974 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446954601.374:684324): pid=8524 uid=0 auid=0 ses=21974 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446954601.377:684325): pid=8524 uid=0 auid=0 ses=21974 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446954601.380:684326): pid=8523 uid=0 auid=0 ses=21975 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446954601.383:684327): pid=8523 uid=0 auid=0 ses=21975 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1446954782.989:684328): pid=9084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=9084 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446954782.990:684329): pid=9084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=9084 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446954782.990:684330): pid=9084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=9084 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446954783.034:684331): pid=9083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=9084 suid=74 rport=32999 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446954783.034:684332): pid=9083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=9084 suid=74 rport=32999 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446954783.162:684333): pid=9083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=32999 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446954783.162:684334): pid=9083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=32999 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446954783.168:684335): pid=9083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446954783.170:684336): pid=9083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9084 suid=74 rport=32999 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446954783.170:684337): pid=9083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446954783.171:684338): pid=9083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446954783.171:684339): pid=9083 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=21976 res=1
type=USER_ROLE_CHANGE msg=audit(1446954783.242:684340): pid=9083 uid=0 auid=0 ses=21976 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446954783.261:684341): pid=9083 uid=0 auid=0 ses=21976 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446954783.263:684342): pid=9083 uid=0 auid=0 ses=21976 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446954783.263:684343): pid=9083 uid=0 auid=0 ses=21976 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446954783.265:684344): pid=9086 uid=0 auid=0 ses=21976 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=9086 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446954783.265:684345): pid=9086 uid=0 auid=0 ses=21976 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=9086 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446954783.265:684346): pid=9086 uid=0 auid=0 ses=21976 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=9086 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446954783.266:684347): pid=9086 uid=0 auid=0 ses=21976 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446954783.283:684348): pid=9083 uid=0 auid=0 ses=21976 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446954783.283:684349): pid=9083 uid=0 auid=0 ses=21976 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446954783.286:684350): pid=9083 uid=0 auid=0 ses=21976 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446954783.287:684351): pid=9083 uid=0 auid=0 ses=21976 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446954783.287:684352): pid=9083 uid=0 auid=0 ses=21976 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9083 suid=0 rport=32999 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446954783.287:684353): pid=9083 uid=0 auid=0 ses=21976 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=9083 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446954783.287:684354): pid=9083 uid=0 auid=0 ses=21976 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=9083 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446954783.287:684355): pid=9083 uid=0 auid=0 ses=21976 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=9083 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446954783.311:684356): pid=9094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=9094 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446954783.311:684357): pid=9094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=9094 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446954783.311:684358): pid=9094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=9094 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446954783.356:684359): pid=9093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=9094 suid=74 rport=33000 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446954783.357:684360): pid=9093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=9094 suid=74 rport=33000 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446954783.486:684361): pid=9093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33000 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446954783.487:684362): pid=9093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=33000 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446954783.495:684363): pid=9093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446954783.496:684364): pid=9093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9094 suid=74 rport=33000 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446954783.498:684365): pid=9093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446954783.498:684366): pid=9093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446954783.498:684367): pid=9093 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=21977 res=1
type=USER_ROLE_CHANGE msg=audit(1446954783.562:684368): pid=9093 uid=0 auid=0 ses=21977 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446954783.580:684369): pid=9093 uid=0 auid=0 ses=21977 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446954783.583:684370): pid=9093 uid=0 auid=0 ses=21977 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446954783.583:684371): pid=9093 uid=0 auid=0 ses=21977 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446954783.584:684372): pid=9096 uid=0 auid=0 ses=21977 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=9096 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446954783.584:684373): pid=9096 uid=0 auid=0 ses=21977 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=9096 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446954783.584:684374): pid=9096 uid=0 auid=0 ses=21977 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=9096 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446954783.585:684375): pid=9096 uid=0 auid=0 ses=21977 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446954784.860:684376): pid=9093 uid=0 auid=0 ses=21977 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446954784.860:684377): pid=9093 uid=0 auid=0 ses=21977 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446954784.864:684378): pid=9093 uid=0 auid=0 ses=21977 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446954784.864:684379): pid=9093 uid=0 auid=0 ses=21977 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446954784.865:684380): pid=9093 uid=0 auid=0 ses=21977 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9093 suid=0 rport=33000 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446954784.865:684381): pid=9093 uid=0 auid=0 ses=21977 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=9093 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446954784.865:684382): pid=9093 uid=0 auid=0 ses=21977 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=9093 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446954784.865:684383): pid=9093 uid=0 auid=0 ses=21977 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=9093 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446954784.904:684384): pid=9150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=9150 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446954784.904:684385): pid=9150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=9150 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446954784.904:684386): pid=9150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=9150 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446954784.949:684387): pid=9149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=9150 suid=74 rport=33009 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446954784.949:684388): pid=9149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=9150 suid=74 rport=33009 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446954785.077:684389): pid=9149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33009 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446954785.077:684390): pid=9149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=33009 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446954785.086:684391): pid=9149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446954785.086:684392): pid=9149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9150 suid=74 rport=33009 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446954785.088:684393): pid=9149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446954785.089:684394): pid=9149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446954785.089:684395): pid=9149 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=21978 res=1
type=USER_ROLE_CHANGE msg=audit(1446954785.158:684396): pid=9149 uid=0 auid=0 ses=21978 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446954785.179:684397): pid=9149 uid=0 auid=0 ses=21978 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446954785.182:684398): pid=9149 uid=0 auid=0 ses=21978 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446954785.182:684399): pid=9149 uid=0 auid=0 ses=21978 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446954785.184:684400): pid=9152 uid=0 auid=0 ses=21978 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=9152 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446954785.184:684401): pid=9152 uid=0 auid=0 ses=21978 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=9152 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446954785.184:684402): pid=9152 uid=0 auid=0 ses=21978 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=9152 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446954785.185:684403): pid=9152 uid=0 auid=0 ses=21978 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446954785.204:684404): pid=9149 uid=0 auid=0 ses=21978 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446954785.204:684405): pid=9149 uid=0 auid=0 ses=21978 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446954785.208:684406): pid=9149 uid=0 auid=0 ses=21978 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446954785.208:684407): pid=9149 uid=0 auid=0 ses=21978 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446954785.209:684408): pid=9149 uid=0 auid=0 ses=21978 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9149 suid=0 rport=33009 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446954785.209:684409): pid=9149 uid=0 auid=0 ses=21978 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=9149 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446954785.209:684410): pid=9149 uid=0 auid=0 ses=21978 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=9149 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446954785.209:684411): pid=9149 uid=0 auid=0 ses=21978 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=9149 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=SYSCALL msg=audit(1446954843.677:684412): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1446955201.403:684413): pid=10439 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446955201.403:684414): pid=10440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446955201.403:684415): pid=10440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446955201.403:684416): pid=10439 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446955201.405:684417): pid=10439 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=21979 res=1
type=LOGIN msg=audit(1446955201.405:684418): pid=10440 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=21980 res=1
type=USER_START msg=audit(1446955201.425:684419): pid=10440 uid=0 auid=0 ses=21980 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446955201.426:684420): pid=10440 uid=0 auid=0 ses=21980 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1446955201.432:684421): pid=10439 uid=0 auid=0 ses=21979 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446955201.432:684422): pid=10439 uid=0 auid=0 ses=21979 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446955201.437:684423): pid=10440 uid=0 auid=0 ses=21980 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446955201.447:684424): pid=10439 uid=0 auid=0 ses=21979 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446955201.447:684425): pid=10440 uid=0 auid=0 ses=21980 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446955226.481:684426): pid=10439 uid=0 auid=0 ses=21979 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=USER_ACCT msg=audit(1446955261.490:684427): pid=10677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446955261.490:684428): pid=10677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446955261.490:684429): pid=10677 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=21981 res=1
type=USER_START msg=audit(1446955261.500:684430): pid=10677 uid=0 auid=0 ses=21981 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446955261.500:684431): pid=10677 uid=0 auid=0 ses=21981 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446955261.524:684432): pid=10677 uid=0 auid=0 ses=21981 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446955261.527:684433): pid=10677 uid=0 auid=0 ses=21981 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446955801.539:684434): pid=12346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446955801.539:684435): pid=12346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446955801.539:684436): pid=12346 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=21982 res=1
type=USER_ACCT msg=audit(1446955801.539:684437): pid=12345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446955801.539:684438): pid=12345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446955801.540:684439): pid=12345 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=21983 res=1
type=USER_START msg=audit(1446955801.552:684440): pid=12346 uid=0 auid=0 ses=21982 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446955801.553:684441): pid=12346 uid=0 auid=0 ses=21982 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1446955801.554:684442): pid=12345 uid=0 auid=0 ses=21983 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446955801.554:684443): pid=12345 uid=0 auid=0 ses=21983 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446955801.559:684444): pid=12346 uid=0 auid=0 ses=21982 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446955801.566:684445): pid=12345 uid=0 auid=0 ses=21983 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446955801.567:684446): pid=12346 uid=0 auid=0 ses=21982 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446955801.573:684447): pid=12345 uid=0 auid=0 ses=21983 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1446955982.640:684448): pid=12906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12906 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446955982.640:684449): pid=12906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12906 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446955982.640:684450): pid=12906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12906 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446955982.684:684451): pid=12905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=12906 suid=74 rport=34979 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446955982.684:684452): pid=12905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=12906 suid=74 rport=34979 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446955982.813:684453): pid=12905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34979 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446955982.813:684454): pid=12905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=34979 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446955982.819:684455): pid=12905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446955982.820:684456): pid=12905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12906 suid=74 rport=34979 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446955982.821:684457): pid=12905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446955982.821:684458): pid=12905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446955982.821:684459): pid=12905 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=21984 res=1
type=USER_ROLE_CHANGE msg=audit(1446955982.892:684460): pid=12905 uid=0 auid=0 ses=21984 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446955982.916:684461): pid=12905 uid=0 auid=0 ses=21984 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446955982.918:684462): pid=12905 uid=0 auid=0 ses=21984 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446955982.918:684463): pid=12905 uid=0 auid=0 ses=21984 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446955982.919:684464): pid=12908 uid=0 auid=0 ses=21984 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12908 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446955982.919:684465): pid=12908 uid=0 auid=0 ses=21984 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12908 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446955982.920:684466): pid=12908 uid=0 auid=0 ses=21984 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12908 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446955982.920:684467): pid=12908 uid=0 auid=0 ses=21984 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446955982.939:684468): pid=12905 uid=0 auid=0 ses=21984 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446955982.939:684469): pid=12905 uid=0 auid=0 ses=21984 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446955982.942:684470): pid=12905 uid=0 auid=0 ses=21984 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446955982.942:684471): pid=12905 uid=0 auid=0 ses=21984 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446955982.943:684472): pid=12905 uid=0 auid=0 ses=21984 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12905 suid=0 rport=34979 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446955982.943:684473): pid=12905 uid=0 auid=0 ses=21984 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12905 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446955982.943:684474): pid=12905 uid=0 auid=0 ses=21984 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12905 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446955982.943:684475): pid=12905 uid=0 auid=0 ses=21984 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12905 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446955982.965:684476): pid=12916 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12916 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446955982.965:684477): pid=12916 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12916 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446955982.965:684478): pid=12916 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12916 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446955983.009:684479): pid=12915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=12916 suid=74 rport=34981 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446955983.009:684480): pid=12915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=12916 suid=74 rport=34981 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446955983.138:684481): pid=12915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34981 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446955983.138:684482): pid=12915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=34981 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446955983.147:684483): pid=12915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446955983.147:684484): pid=12915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12916 suid=74 rport=34981 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446955983.149:684485): pid=12915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446955983.150:684486): pid=12915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446955983.150:684487): pid=12915 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=21985 res=1
type=USER_ROLE_CHANGE msg=audit(1446955983.214:684488): pid=12915 uid=0 auid=0 ses=21985 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446955983.234:684489): pid=12915 uid=0 auid=0 ses=21985 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446955983.237:684490): pid=12915 uid=0 auid=0 ses=21985 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446955983.237:684491): pid=12915 uid=0 auid=0 ses=21985 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446955983.238:684492): pid=12918 uid=0 auid=0 ses=21985 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12918 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446955983.238:684493): pid=12918 uid=0 auid=0 ses=21985 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12918 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446955983.238:684494): pid=12918 uid=0 auid=0 ses=21985 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12918 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446955983.239:684495): pid=12918 uid=0 auid=0 ses=21985 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446955984.509:684496): pid=12915 uid=0 auid=0 ses=21985 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446955984.509:684497): pid=12915 uid=0 auid=0 ses=21985 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446955984.514:684498): pid=12915 uid=0 auid=0 ses=21985 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446955984.514:684499): pid=12915 uid=0 auid=0 ses=21985 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446955984.514:684500): pid=12915 uid=0 auid=0 ses=21985 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12915 suid=0 rport=34981 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446955984.515:684501): pid=12915 uid=0 auid=0 ses=21985 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12915 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446955984.515:684502): pid=12915 uid=0 auid=0 ses=21985 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12915 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446955984.515:684503): pid=12915 uid=0 auid=0 ses=21985 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12915 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446955984.550:684504): pid=12968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12968 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446955984.550:684505): pid=12968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12968 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446955984.550:684506): pid=12968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12968 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446955984.596:684507): pid=12967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=12968 suid=74 rport=34984 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446955984.596:684508): pid=12967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=12968 suid=74 rport=34984 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446955984.722:684509): pid=12967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34984 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446955984.722:684510): pid=12967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=34984 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446955984.726:684511): pid=12967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446955984.729:684512): pid=12967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12968 suid=74 rport=34984 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446955984.730:684513): pid=12967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446955984.730:684514): pid=12967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446955984.730:684515): pid=12967 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=21986 res=1
type=USER_ROLE_CHANGE msg=audit(1446955984.796:684516): pid=12967 uid=0 auid=0 ses=21986 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446955984.819:684517): pid=12967 uid=0 auid=0 ses=21986 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446955984.822:684518): pid=12967 uid=0 auid=0 ses=21986 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446955984.823:684519): pid=12967 uid=0 auid=0 ses=21986 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446955984.824:684520): pid=12980 uid=0 auid=0 ses=21986 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12980 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446955984.824:684521): pid=12980 uid=0 auid=0 ses=21986 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12980 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446955984.824:684522): pid=12980 uid=0 auid=0 ses=21986 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12980 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446955984.825:684523): pid=12980 uid=0 auid=0 ses=21986 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446955984.846:684524): pid=12967 uid=0 auid=0 ses=21986 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446955984.846:684525): pid=12967 uid=0 auid=0 ses=21986 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446955984.853:684526): pid=12967 uid=0 auid=0 ses=21986 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446955984.853:684527): pid=12967 uid=0 auid=0 ses=21986 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446955984.854:684528): pid=12967 uid=0 auid=0 ses=21986 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12967 suid=0 rport=34984 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446955984.854:684529): pid=12967 uid=0 auid=0 ses=21986 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12967 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446955984.854:684530): pid=12967 uid=0 auid=0 ses=21986 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12967 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446955984.854:684531): pid=12967 uid=0 auid=0 ses=21986 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12967 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446956401.599:684532): pid=14269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446956401.599:684533): pid=14268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446956401.600:684534): pid=14269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446956401.600:684535): pid=14268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446956401.601:684536): pid=14269 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=21987 res=1
type=LOGIN msg=audit(1446956401.601:684537): pid=14268 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=21988 res=1
type=USER_START msg=audit(1446956401.620:684538): pid=14268 uid=0 auid=0 ses=21988 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1446956401.620:684539): pid=14269 uid=0 auid=0 ses=21987 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446956401.621:684540): pid=14269 uid=0 auid=0 ses=21987 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446956401.621:684541): pid=14268 uid=0 auid=0 ses=21988 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446956401.629:684542): pid=14269 uid=0 auid=0 ses=21987 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446956401.632:684543): pid=14269 uid=0 auid=0 ses=21987 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446956401.642:684544): pid=14268 uid=0 auid=0 ses=21988 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446956401.644:684545): pid=14268 uid=0 auid=0 ses=21988 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1446956971.692:684546): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1446957001.655:684547): pid=16113 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446957001.655:684548): pid=16114 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446957001.655:684549): pid=16113 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446957001.655:684550): pid=16114 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446957001.655:684551): pid=16113 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=21989 res=1
type=LOGIN msg=audit(1446957001.655:684552): pid=16114 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=21990 res=1
type=USER_START msg=audit(1446957001.670:684553): pid=16113 uid=0 auid=0 ses=21989 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446957001.670:684554): pid=16113 uid=0 auid=0 ses=21989 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1446957001.671:684555): pid=16114 uid=0 auid=0 ses=21990 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446957001.671:684556): pid=16114 uid=0 auid=0 ses=21990 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446957001.679:684557): pid=16114 uid=0 auid=0 ses=21990 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446957001.680:684558): pid=16114 uid=0 auid=0 ses=21990 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446957001.684:684559): pid=16113 uid=0 auid=0 ses=21989 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446957001.686:684560): pid=16113 uid=0 auid=0 ses=21989 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1446957182.723:684561): pid=16677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16677 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446957182.724:684562): pid=16677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16677 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446957182.724:684563): pid=16677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16677 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446957182.767:684564): pid=16676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=16677 suid=74 rport=36959 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446957182.767:684565): pid=16676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=16677 suid=74 rport=36959 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446957182.894:684566): pid=16676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=36959 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446957182.894:684567): pid=16676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=36959 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446957182.902:684568): pid=16676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446957182.903:684569): pid=16676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16677 suid=74 rport=36959 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446957182.907:684570): pid=16676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446957182.907:684571): pid=16676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446957182.907:684572): pid=16676 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=21991 res=1
type=USER_ROLE_CHANGE msg=audit(1446957182.975:684573): pid=16676 uid=0 auid=0 ses=21991 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446957183.002:684574): pid=16676 uid=0 auid=0 ses=21991 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446957183.005:684575): pid=16676 uid=0 auid=0 ses=21991 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446957183.005:684576): pid=16676 uid=0 auid=0 ses=21991 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446957183.006:684577): pid=16679 uid=0 auid=0 ses=21991 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16679 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446957183.006:684578): pid=16679 uid=0 auid=0 ses=21991 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16679 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446957183.007:684579): pid=16679 uid=0 auid=0 ses=21991 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16679 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446957183.008:684580): pid=16679 uid=0 auid=0 ses=21991 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446957183.026:684581): pid=16676 uid=0 auid=0 ses=21991 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446957183.026:684582): pid=16676 uid=0 auid=0 ses=21991 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446957183.030:684583): pid=16676 uid=0 auid=0 ses=21991 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446957183.030:684584): pid=16676 uid=0 auid=0 ses=21991 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446957183.030:684585): pid=16676 uid=0 auid=0 ses=21991 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16676 suid=0 rport=36959 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446957183.030:684586): pid=16676 uid=0 auid=0 ses=21991 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16676 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446957183.030:684587): pid=16676 uid=0 auid=0 ses=21991 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16676 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446957183.030:684588): pid=16676 uid=0 auid=0 ses=21991 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16676 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446957183.052:684589): pid=16687 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16687 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446957183.053:684590): pid=16687 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16687 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446957183.053:684591): pid=16687 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16687 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446957183.098:684592): pid=16686 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=16687 suid=74 rport=36960 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446957183.098:684593): pid=16686 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=16687 suid=74 rport=36960 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446957183.224:684594): pid=16686 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=36960 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446957183.224:684595): pid=16686 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=36960 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446957183.231:684596): pid=16686 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446957183.233:684597): pid=16686 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16687 suid=74 rport=36960 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446957183.235:684598): pid=16686 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446957183.235:684599): pid=16686 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446957183.235:684600): pid=16686 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=21992 res=1
type=USER_ROLE_CHANGE msg=audit(1446957183.300:684601): pid=16686 uid=0 auid=0 ses=21992 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446957183.319:684602): pid=16686 uid=0 auid=0 ses=21992 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446957183.322:684603): pid=16686 uid=0 auid=0 ses=21992 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446957183.322:684604): pid=16686 uid=0 auid=0 ses=21992 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446957183.323:684605): pid=16689 uid=0 auid=0 ses=21992 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16689 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446957183.323:684606): pid=16689 uid=0 auid=0 ses=21992 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16689 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446957183.323:684607): pid=16689 uid=0 auid=0 ses=21992 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16689 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446957183.324:684608): pid=16689 uid=0 auid=0 ses=21992 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446957184.591:684609): pid=16686 uid=0 auid=0 ses=21992 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446957184.591:684610): pid=16686 uid=0 auid=0 ses=21992 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446957184.595:684611): pid=16686 uid=0 auid=0 ses=21992 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446957184.595:684612): pid=16686 uid=0 auid=0 ses=21992 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446957184.596:684613): pid=16686 uid=0 auid=0 ses=21992 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16686 suid=0 rport=36960 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446957184.596:684614): pid=16686 uid=0 auid=0 ses=21992 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16686 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446957184.596:684615): pid=16686 uid=0 auid=0 ses=21992 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16686 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446957184.596:684616): pid=16686 uid=0 auid=0 ses=21992 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16686 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446957184.627:684617): pid=16739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16739 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446957184.627:684618): pid=16739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16739 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446957184.627:684619): pid=16739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16739 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446957184.672:684620): pid=16738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=16739 suid=74 rport=36962 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446957184.672:684621): pid=16738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=16739 suid=74 rport=36962 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446957184.793:684622): pid=16738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=36962 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446957184.793:684623): pid=16738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=36962 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446957184.798:684624): pid=16738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446957184.799:684625): pid=16738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16739 suid=74 rport=36962 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446957184.801:684626): pid=16738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446957184.801:684627): pid=16738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446957184.801:684628): pid=16738 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=21993 res=1
type=USER_ROLE_CHANGE msg=audit(1446957184.868:684629): pid=16738 uid=0 auid=0 ses=21993 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446957184.888:684630): pid=16738 uid=0 auid=0 ses=21993 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446957184.891:684631): pid=16738 uid=0 auid=0 ses=21993 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446957184.891:684632): pid=16738 uid=0 auid=0 ses=21993 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446957184.892:684633): pid=16741 uid=0 auid=0 ses=21993 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16741 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446957184.893:684634): pid=16741 uid=0 auid=0 ses=21993 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16741 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446957184.893:684635): pid=16741 uid=0 auid=0 ses=21993 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16741 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446957184.893:684636): pid=16741 uid=0 auid=0 ses=21993 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446957184.909:684637): pid=16738 uid=0 auid=0 ses=21993 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446957184.909:684638): pid=16738 uid=0 auid=0 ses=21993 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446957184.913:684639): pid=16738 uid=0 auid=0 ses=21993 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446957184.913:684640): pid=16738 uid=0 auid=0 ses=21993 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446957184.913:684641): pid=16738 uid=0 auid=0 ses=21993 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16738 suid=0 rport=36962 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446957184.913:684642): pid=16738 uid=0 auid=0 ses=21993 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16738 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446957184.913:684643): pid=16738 uid=0 auid=0 ses=21993 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16738 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446957184.913:684644): pid=16738 uid=0 auid=0 ses=21993 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16738 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446957601.705:684646): pid=18032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446957601.705:684645): pid=18031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446957601.706:684647): pid=18032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446957601.706:684648): pid=18031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446957601.707:684649): pid=18032 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=21994 res=1
type=LOGIN msg=audit(1446957601.707:684650): pid=18031 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=21995 res=1
type=USER_START msg=audit(1446957601.725:684651): pid=18031 uid=0 auid=0 ses=21995 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1446957601.725:684652): pid=18032 uid=0 auid=0 ses=21994 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446957601.725:684653): pid=18031 uid=0 auid=0 ses=21995 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446957601.725:684654): pid=18032 uid=0 auid=0 ses=21994 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446957601.734:684655): pid=18032 uid=0 auid=0 ses=21994 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446957601.735:684656): pid=18032 uid=0 auid=0 ses=21994 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446957601.744:684657): pid=18031 uid=0 auid=0 ses=21995 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446957601.745:684658): pid=18031 uid=0 auid=0 ses=21995 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446958201.760:684659): pid=19877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446958201.760:684660): pid=19878 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446958201.760:684661): pid=19877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446958201.760:684662): pid=19878 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446958201.760:684663): pid=19877 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=21996 res=1
type=LOGIN msg=audit(1446958201.760:684664): pid=19878 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=21997 res=1
type=USER_START msg=audit(1446958201.776:684665): pid=19878 uid=0 auid=0 ses=21997 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1446958201.776:684666): pid=19877 uid=0 auid=0 ses=21996 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446958201.777:684667): pid=19878 uid=0 auid=0 ses=21997 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446958201.777:684668): pid=19877 uid=0 auid=0 ses=21996 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446958201.785:684669): pid=19878 uid=0 auid=0 ses=21997 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446958201.786:684670): pid=19878 uid=0 auid=0 ses=21997 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446958201.789:684671): pid=19877 uid=0 auid=0 ses=21996 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446958201.793:684672): pid=19877 uid=0 auid=0 ses=21996 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1446958382.999:684673): pid=20436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=20436 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446958382.999:684674): pid=20436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=20436 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446958382.999:684675): pid=20436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=20436 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446958383.043:684676): pid=20435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=20436 suid=74 rport=38940 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446958383.043:684677): pid=20435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=20436 suid=74 rport=38940 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446958383.174:684678): pid=20435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38940 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446958383.174:684679): pid=20435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=38940 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446958383.181:684680): pid=20435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446958383.183:684681): pid=20435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20436 suid=74 rport=38940 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446958383.186:684682): pid=20435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446958383.186:684683): pid=20435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446958383.187:684684): pid=20435 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=21998 res=1
type=USER_ROLE_CHANGE msg=audit(1446958383.256:684685): pid=20435 uid=0 auid=0 ses=21998 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446958383.275:684686): pid=20435 uid=0 auid=0 ses=21998 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446958383.278:684687): pid=20435 uid=0 auid=0 ses=21998 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446958383.278:684688): pid=20435 uid=0 auid=0 ses=21998 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446958383.279:684689): pid=20438 uid=0 auid=0 ses=21998 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=20438 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446958383.279:684690): pid=20438 uid=0 auid=0 ses=21998 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=20438 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446958383.279:684691): pid=20438 uid=0 auid=0 ses=21998 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=20438 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446958383.280:684692): pid=20438 uid=0 auid=0 ses=21998 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446958383.298:684693): pid=20435 uid=0 auid=0 ses=21998 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446958383.298:684694): pid=20435 uid=0 auid=0 ses=21998 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446958383.302:684695): pid=20435 uid=0 auid=0 ses=21998 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446958383.302:684696): pid=20435 uid=0 auid=0 ses=21998 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446958383.302:684697): pid=20435 uid=0 auid=0 ses=21998 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20435 suid=0 rport=38940 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446958383.302:684698): pid=20435 uid=0 auid=0 ses=21998 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=20435 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446958383.302:684699): pid=20435 uid=0 auid=0 ses=21998 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=20435 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446958383.302:684700): pid=20435 uid=0 auid=0 ses=21998 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=20435 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446958383.326:684701): pid=20446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=20446 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446958383.327:684702): pid=20446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=20446 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446958383.327:684703): pid=20446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=20446 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446958383.372:684704): pid=20445 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=20446 suid=74 rport=38941 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446958383.372:684705): pid=20445 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=20446 suid=74 rport=38941 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446958383.501:684706): pid=20445 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38941 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446958383.501:684707): pid=20445 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=38941 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446958383.510:684708): pid=20445 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446958383.513:684709): pid=20445 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20446 suid=74 rport=38941 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446958383.513:684710): pid=20445 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446958383.513:684711): pid=20445 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446958383.513:684712): pid=20445 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=21999 res=1
type=USER_ROLE_CHANGE msg=audit(1446958383.576:684713): pid=20445 uid=0 auid=0 ses=21999 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446958383.600:684714): pid=20445 uid=0 auid=0 ses=21999 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446958383.603:684715): pid=20445 uid=0 auid=0 ses=21999 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446958383.603:684716): pid=20445 uid=0 auid=0 ses=21999 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446958383.605:684717): pid=20448 uid=0 auid=0 ses=21999 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=20448 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446958383.605:684718): pid=20448 uid=0 auid=0 ses=21999 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=20448 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446958383.605:684719): pid=20448 uid=0 auid=0 ses=21999 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=20448 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446958383.606:684720): pid=20448 uid=0 auid=0 ses=21999 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446958384.886:684721): pid=20445 uid=0 auid=0 ses=21999 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446958384.886:684722): pid=20445 uid=0 auid=0 ses=21999 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446958384.891:684723): pid=20445 uid=0 auid=0 ses=21999 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446958384.891:684724): pid=20445 uid=0 auid=0 ses=21999 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446958384.892:684725): pid=20445 uid=0 auid=0 ses=21999 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20445 suid=0 rport=38941 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446958384.892:684726): pid=20445 uid=0 auid=0 ses=21999 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=20445 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446958384.892:684727): pid=20445 uid=0 auid=0 ses=21999 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=20445 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446958384.892:684728): pid=20445 uid=0 auid=0 ses=21999 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=20445 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446958384.925:684729): pid=20498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=20498 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446958384.925:684730): pid=20498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=20498 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446958384.926:684731): pid=20498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=20498 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446958384.969:684732): pid=20497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=20498 suid=74 rport=38943 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446958384.969:684733): pid=20497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=20498 suid=74 rport=38943 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446958385.097:684734): pid=20497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38943 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446958385.097:684735): pid=20497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=38943 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446958385.106:684736): pid=20497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446958385.107:684737): pid=20497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20498 suid=74 rport=38943 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446958385.109:684738): pid=20497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446958385.109:684739): pid=20497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446958385.109:684740): pid=20497 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22000 res=1
type=USER_ROLE_CHANGE msg=audit(1446958385.176:684741): pid=20497 uid=0 auid=0 ses=22000 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446958385.197:684742): pid=20497 uid=0 auid=0 ses=22000 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446958385.200:684743): pid=20497 uid=0 auid=0 ses=22000 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446958385.200:684744): pid=20497 uid=0 auid=0 ses=22000 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446958385.201:684745): pid=20500 uid=0 auid=0 ses=22000 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=20500 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446958385.201:684746): pid=20500 uid=0 auid=0 ses=22000 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=20500 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446958385.201:684747): pid=20500 uid=0 auid=0 ses=22000 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=20500 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446958385.202:684748): pid=20500 uid=0 auid=0 ses=22000 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446958385.221:684749): pid=20497 uid=0 auid=0 ses=22000 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446958385.221:684750): pid=20497 uid=0 auid=0 ses=22000 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446958385.224:684751): pid=20497 uid=0 auid=0 ses=22000 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446958385.224:684752): pid=20497 uid=0 auid=0 ses=22000 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446958385.225:684753): pid=20497 uid=0 auid=0 ses=22000 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20497 suid=0 rport=38943 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446958385.225:684754): pid=20497 uid=0 auid=0 ses=22000 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=20497 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446958385.225:684755): pid=20497 uid=0 auid=0 ses=22000 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=20497 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446958385.225:684756): pid=20497 uid=0 auid=0 ses=22000 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=20497 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446958801.814:684757): pid=21793 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446958801.814:684758): pid=21793 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446958801.816:684759): pid=21793 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22001 res=1
type=USER_ACCT msg=audit(1446958801.816:684760): pid=21792 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446958801.816:684761): pid=21792 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446958801.816:684762): pid=21792 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22002 res=1
type=USER_START msg=audit(1446958801.840:684763): pid=21793 uid=0 auid=0 ses=22001 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1446958801.840:684764): pid=21792 uid=0 auid=0 ses=22002 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446958801.840:684765): pid=21793 uid=0 auid=0 ses=22001 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446958801.840:684766): pid=21792 uid=0 auid=0 ses=22002 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446958801.851:684767): pid=21793 uid=0 auid=0 ses=22001 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446958801.858:684768): pid=21793 uid=0 auid=0 ses=22001 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446958801.859:684769): pid=21792 uid=0 auid=0 ses=22002 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446958801.863:684770): pid=21792 uid=0 auid=0 ses=22002 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446958861.872:684771): pid=21997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446958861.872:684772): pid=21997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446958861.873:684773): pid=21997 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22003 res=1
type=USER_START msg=audit(1446958861.882:684774): pid=21997 uid=0 auid=0 ses=22003 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446958861.882:684775): pid=21997 uid=0 auid=0 ses=22003 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446958861.909:684776): pid=21997 uid=0 auid=0 ses=22003 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446958861.911:684777): pid=21997 uid=0 auid=0 ses=22003 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1446959122.757:684778): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1446959401.924:684779): pid=23677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446959401.924:684780): pid=23676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446959401.924:684781): pid=23677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446959401.924:684782): pid=23676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446959401.925:684783): pid=23677 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22004 res=1
type=LOGIN msg=audit(1446959401.925:684784): pid=23676 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22005 res=1
type=USER_START msg=audit(1446959401.941:684785): pid=23676 uid=0 auid=0 ses=22005 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446959401.941:684786): pid=23676 uid=0 auid=0 ses=22005 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1446959401.941:684787): pid=23677 uid=0 auid=0 ses=22004 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446959401.942:684788): pid=23677 uid=0 auid=0 ses=22004 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446959401.948:684789): pid=23677 uid=0 auid=0 ses=22004 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446959401.953:684790): pid=23676 uid=0 auid=0 ses=22005 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446959401.955:684791): pid=23676 uid=0 auid=0 ses=22005 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446959401.955:684792): pid=23677 uid=0 auid=0 ses=22004 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1446959582.797:684793): pid=24237 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=24237 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446959582.797:684794): pid=24237 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=24237 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446959582.797:684795): pid=24237 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=24237 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446959582.840:684796): pid=24236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=24237 suid=74 rport=40921 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446959582.840:684797): pid=24236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=24237 suid=74 rport=40921 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446959582.962:684798): pid=24236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=40921 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446959582.962:684799): pid=24236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=40921 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446959582.966:684800): pid=24236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446959582.967:684801): pid=24236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24237 suid=74 rport=40921 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446959582.968:684802): pid=24236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446959582.969:684803): pid=24236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446959582.969:684804): pid=24236 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22006 res=1
type=USER_ROLE_CHANGE msg=audit(1446959583.041:684805): pid=24236 uid=0 auid=0 ses=22006 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446959583.061:684806): pid=24236 uid=0 auid=0 ses=22006 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446959583.063:684807): pid=24236 uid=0 auid=0 ses=22006 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446959583.064:684808): pid=24236 uid=0 auid=0 ses=22006 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446959583.065:684809): pid=24251 uid=0 auid=0 ses=22006 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=24251 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446959583.065:684810): pid=24251 uid=0 auid=0 ses=22006 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=24251 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446959583.065:684811): pid=24251 uid=0 auid=0 ses=22006 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=24251 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446959583.066:684812): pid=24251 uid=0 auid=0 ses=22006 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446959583.083:684813): pid=24236 uid=0 auid=0 ses=22006 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446959583.083:684814): pid=24236 uid=0 auid=0 ses=22006 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446959583.086:684815): pid=24236 uid=0 auid=0 ses=22006 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446959583.087:684816): pid=24236 uid=0 auid=0 ses=22006 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446959583.087:684817): pid=24236 uid=0 auid=0 ses=22006 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24236 suid=0 rport=40921 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446959583.087:684818): pid=24236 uid=0 auid=0 ses=22006 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=24236 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446959583.087:684819): pid=24236 uid=0 auid=0 ses=22006 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=24236 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446959583.087:684820): pid=24236 uid=0 auid=0 ses=22006 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=24236 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446959583.109:684821): pid=24259 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=24259 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446959583.109:684822): pid=24259 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=24259 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446959583.109:684823): pid=24259 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=24259 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446959583.154:684824): pid=24258 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=24259 suid=74 rport=40922 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446959583.155:684825): pid=24258 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=24259 suid=74 rport=40922 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446959583.274:684826): pid=24258 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=40922 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446959583.274:684827): pid=24258 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=40922 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446959583.279:684828): pid=24258 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446959583.280:684829): pid=24258 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24259 suid=74 rport=40922 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446959583.282:684830): pid=24258 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446959583.282:684831): pid=24258 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446959583.282:684832): pid=24258 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22007 res=1
type=USER_ROLE_CHANGE msg=audit(1446959583.350:684833): pid=24258 uid=0 auid=0 ses=22007 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446959583.370:684834): pid=24258 uid=0 auid=0 ses=22007 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446959583.373:684835): pid=24258 uid=0 auid=0 ses=22007 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446959583.373:684836): pid=24258 uid=0 auid=0 ses=22007 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446959583.375:684837): pid=24261 uid=0 auid=0 ses=22007 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=24261 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446959583.375:684838): pid=24261 uid=0 auid=0 ses=22007 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=24261 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446959583.375:684839): pid=24261 uid=0 auid=0 ses=22007 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=24261 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446959583.376:684840): pid=24261 uid=0 auid=0 ses=22007 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446959584.650:684841): pid=24258 uid=0 auid=0 ses=22007 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446959584.650:684842): pid=24258 uid=0 auid=0 ses=22007 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446959584.654:684843): pid=24258 uid=0 auid=0 ses=22007 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446959584.654:684844): pid=24258 uid=0 auid=0 ses=22007 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446959584.655:684845): pid=24258 uid=0 auid=0 ses=22007 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24258 suid=0 rport=40922 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446959584.655:684846): pid=24258 uid=0 auid=0 ses=22007 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=24258 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446959584.655:684847): pid=24258 uid=0 auid=0 ses=22007 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=24258 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446959584.655:684848): pid=24258 uid=0 auid=0 ses=22007 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=24258 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446959584.692:684849): pid=24321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=24321 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446959584.692:684850): pid=24321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=24321 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446959584.692:684851): pid=24321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=24321 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446959584.736:684852): pid=24320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=24321 suid=74 rport=40924 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446959584.736:684853): pid=24320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=24321 suid=74 rport=40924 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446959584.865:684854): pid=24320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=40924 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446959584.865:684855): pid=24320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=40924 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446959584.875:684856): pid=24320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446959584.876:684857): pid=24320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24321 suid=74 rport=40924 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446959584.877:684858): pid=24320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446959584.877:684859): pid=24320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446959584.878:684860): pid=24320 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22008 res=1
type=USER_ROLE_CHANGE msg=audit(1446959584.942:684861): pid=24320 uid=0 auid=0 ses=22008 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446959584.974:684862): pid=24320 uid=0 auid=0 ses=22008 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446959584.976:684863): pid=24320 uid=0 auid=0 ses=22008 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446959584.976:684864): pid=24320 uid=0 auid=0 ses=22008 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446959584.978:684865): pid=24323 uid=0 auid=0 ses=22008 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=24323 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446959584.978:684866): pid=24323 uid=0 auid=0 ses=22008 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=24323 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446959584.978:684867): pid=24323 uid=0 auid=0 ses=22008 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=24323 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446959584.979:684868): pid=24323 uid=0 auid=0 ses=22008 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446959584.996:684869): pid=24320 uid=0 auid=0 ses=22008 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446959584.996:684870): pid=24320 uid=0 auid=0 ses=22008 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446959584.999:684871): pid=24320 uid=0 auid=0 ses=22008 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446959585.000:684872): pid=24320 uid=0 auid=0 ses=22008 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446959585.001:684873): pid=24320 uid=0 auid=0 ses=22008 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24320 suid=0 rport=40924 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446959585.001:684874): pid=24320 uid=0 auid=0 ses=22008 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=24320 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446959585.001:684875): pid=24320 uid=0 auid=0 ses=22008 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=24320 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446959585.001:684876): pid=24320 uid=0 auid=0 ses=22008 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=24320 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446960001.976:684877): pid=25559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446960001.976:684878): pid=25559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446960001.976:684879): pid=25558 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446960001.976:684880): pid=25558 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446960001.977:684881): pid=25559 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22009 res=1
type=LOGIN msg=audit(1446960001.977:684882): pid=25558 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22010 res=1
type=USER_START msg=audit(1446960001.994:684883): pid=25558 uid=0 auid=0 ses=22010 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1446960001.994:684884): pid=25559 uid=0 auid=0 ses=22009 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446960001.994:684885): pid=25558 uid=0 auid=0 ses=22010 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446960001.994:684886): pid=25559 uid=0 auid=0 ses=22009 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446960002.004:684887): pid=25559 uid=0 auid=0 ses=22009 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446960002.005:684888): pid=25559 uid=0 auid=0 ses=22009 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446960002.010:684889): pid=25558 uid=0 auid=0 ses=22010 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446960002.012:684890): pid=25558 uid=0 auid=0 ses=22010 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1446960195.759:684891): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1446960601.029:684892): pid=27404 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446960601.029:684893): pid=27403 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446960601.029:684895): pid=27403 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446960601.029:684894): pid=27404 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446960601.030:684896): pid=27403 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22011 res=1
type=LOGIN msg=audit(1446960601.030:684897): pid=27404 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22012 res=1
type=USER_START msg=audit(1446960601.047:684898): pid=27403 uid=0 auid=0 ses=22011 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1446960601.047:684899): pid=27404 uid=0 auid=0 ses=22012 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446960601.047:684900): pid=27403 uid=0 auid=0 ses=22011 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446960601.047:684901): pid=27404 uid=0 auid=0 ses=22012 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446960601.054:684902): pid=27404 uid=0 auid=0 ses=22012 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446960601.055:684903): pid=27404 uid=0 auid=0 ses=22012 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446960601.063:684904): pid=27403 uid=0 auid=0 ses=22011 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446960601.065:684905): pid=27403 uid=0 auid=0 ses=22011 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1446960783.309:684906): pid=27965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=27965 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446960783.309:684907): pid=27965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=27965 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446960783.309:684908): pid=27965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27965 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446960783.353:684909): pid=27964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=27965 suid=74 rport=42902 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446960783.353:684910): pid=27964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=27965 suid=74 rport=42902 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446960783.478:684911): pid=27964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42902 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446960783.479:684912): pid=27964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=42902 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446960783.487:684913): pid=27964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446960783.488:684914): pid=27964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27965 suid=74 rport=42902 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446960783.490:684915): pid=27964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446960783.491:684916): pid=27964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446960783.491:684917): pid=27964 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22013 res=1
type=USER_ROLE_CHANGE msg=audit(1446960783.558:684918): pid=27964 uid=0 auid=0 ses=22013 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446960783.583:684919): pid=27964 uid=0 auid=0 ses=22013 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446960783.585:684920): pid=27964 uid=0 auid=0 ses=22013 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446960783.585:684921): pid=27964 uid=0 auid=0 ses=22013 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446960783.587:684922): pid=27967 uid=0 auid=0 ses=22013 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=27967 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446960783.587:684923): pid=27967 uid=0 auid=0 ses=22013 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=27967 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446960783.587:684924): pid=27967 uid=0 auid=0 ses=22013 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27967 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446960783.589:684925): pid=27967 uid=0 auid=0 ses=22013 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446960783.613:684926): pid=27964 uid=0 auid=0 ses=22013 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446960783.613:684927): pid=27964 uid=0 auid=0 ses=22013 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446960783.617:684928): pid=27964 uid=0 auid=0 ses=22013 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446960783.617:684929): pid=27964 uid=0 auid=0 ses=22013 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446960783.618:684930): pid=27964 uid=0 auid=0 ses=22013 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27964 suid=0 rport=42902 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446960783.619:684931): pid=27964 uid=0 auid=0 ses=22013 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=27964 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446960783.619:684932): pid=27964 uid=0 auid=0 ses=22013 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=27964 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446960783.619:684933): pid=27964 uid=0 auid=0 ses=22013 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27964 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446960783.647:684934): pid=27975 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=27975 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446960783.647:684935): pid=27975 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=27975 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446960783.647:684936): pid=27975 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27975 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446960783.691:684937): pid=27974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=27975 suid=74 rport=42903 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446960783.692:684938): pid=27974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=27975 suid=74 rport=42903 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446960783.816:684939): pid=27974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42903 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446960783.816:684940): pid=27974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=42903 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446960783.822:684941): pid=27974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446960783.822:684942): pid=27974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27975 suid=74 rport=42903 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446960783.824:684943): pid=27974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446960783.824:684944): pid=27974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446960783.824:684945): pid=27974 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22014 res=1
type=USER_ROLE_CHANGE msg=audit(1446960783.890:684946): pid=27974 uid=0 auid=0 ses=22014 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446960783.913:684947): pid=27974 uid=0 auid=0 ses=22014 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446960783.915:684948): pid=27974 uid=0 auid=0 ses=22014 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446960783.915:684949): pid=27974 uid=0 auid=0 ses=22014 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446960783.917:684950): pid=27977 uid=0 auid=0 ses=22014 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=27977 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446960783.917:684951): pid=27977 uid=0 auid=0 ses=22014 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=27977 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446960783.917:684952): pid=27977 uid=0 auid=0 ses=22014 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27977 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446960783.918:684953): pid=27977 uid=0 auid=0 ses=22014 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446960785.195:684954): pid=27974 uid=0 auid=0 ses=22014 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446960785.195:684955): pid=27974 uid=0 auid=0 ses=22014 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446960785.204:684956): pid=27974 uid=0 auid=0 ses=22014 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446960785.204:684957): pid=27974 uid=0 auid=0 ses=22014 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446960785.204:684958): pid=27974 uid=0 auid=0 ses=22014 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27974 suid=0 rport=42903 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446960785.204:684959): pid=27974 uid=0 auid=0 ses=22014 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=27974 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446960785.207:684960): pid=27974 uid=0 auid=0 ses=22014 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=27974 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446960785.207:684961): pid=27974 uid=0 auid=0 ses=22014 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27974 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446960785.230:684962): pid=28027 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=28027 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446960785.230:684963): pid=28027 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=28027 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446960785.230:684964): pid=28027 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=28027 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446960785.276:684965): pid=28026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=28027 suid=74 rport=42905 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446960785.276:684966): pid=28026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=28027 suid=74 rport=42905 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446960785.408:684967): pid=28026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42905 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446960785.408:684968): pid=28026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=42905 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446960785.414:684969): pid=28026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446960785.415:684970): pid=28026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=28027 suid=74 rport=42905 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446960785.416:684971): pid=28026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446960785.416:684972): pid=28026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446960785.416:684973): pid=28026 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22015 res=1
type=USER_ROLE_CHANGE msg=audit(1446960785.486:684974): pid=28026 uid=0 auid=0 ses=22015 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446960785.508:684975): pid=28026 uid=0 auid=0 ses=22015 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446960785.511:684976): pid=28026 uid=0 auid=0 ses=22015 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446960785.511:684977): pid=28026 uid=0 auid=0 ses=22015 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446960785.512:684978): pid=28029 uid=0 auid=0 ses=22015 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=28029 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446960785.512:684979): pid=28029 uid=0 auid=0 ses=22015 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=28029 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446960785.512:684980): pid=28029 uid=0 auid=0 ses=22015 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=28029 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446960785.513:684981): pid=28029 uid=0 auid=0 ses=22015 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446960785.533:684982): pid=28026 uid=0 auid=0 ses=22015 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446960785.533:684983): pid=28026 uid=0 auid=0 ses=22015 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446960785.539:684984): pid=28026 uid=0 auid=0 ses=22015 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446960785.539:684985): pid=28026 uid=0 auid=0 ses=22015 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446960785.540:684986): pid=28026 uid=0 auid=0 ses=22015 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=28026 suid=0 rport=42905 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446960785.540:684987): pid=28026 uid=0 auid=0 ses=22015 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=28026 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446960785.540:684988): pid=28026 uid=0 auid=0 ses=22015 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=28026 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446960785.540:684989): pid=28026 uid=0 auid=0 ses=22015 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=28026 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446961201.084:684990): pid=29321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446961201.084:684991): pid=29320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446961201.084:684992): pid=29321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446961201.084:684993): pid=29320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446961201.086:684994): pid=29321 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22016 res=1
type=LOGIN msg=audit(1446961201.086:684995): pid=29320 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22017 res=1
type=USER_START msg=audit(1446961201.107:684996): pid=29321 uid=0 auid=0 ses=22016 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1446961201.108:684997): pid=29320 uid=0 auid=0 ses=22017 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446961201.108:684998): pid=29321 uid=0 auid=0 ses=22016 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446961201.108:684999): pid=29320 uid=0 auid=0 ses=22017 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446961201.117:685000): pid=29321 uid=0 auid=0 ses=22016 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446961201.119:685001): pid=29321 uid=0 auid=0 ses=22016 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446961201.126:685002): pid=29320 uid=0 auid=0 ses=22017 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446961201.128:685003): pid=29320 uid=0 auid=0 ses=22017 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1446961231.758:685004): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1446961801.141:685005): pid=31168 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446961801.141:685006): pid=31168 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446961801.141:685007): pid=31168 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22018 res=1
type=USER_ACCT msg=audit(1446961801.143:685008): pid=31167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446961801.143:685009): pid=31167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446961801.144:685010): pid=31167 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22019 res=1
type=USER_START msg=audit(1446961801.156:685011): pid=31168 uid=0 auid=0 ses=22018 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446961801.157:685012): pid=31168 uid=0 auid=0 ses=22018 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1446961801.161:685013): pid=31167 uid=0 auid=0 ses=22019 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446961801.161:685014): pid=31167 uid=0 auid=0 ses=22019 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446961801.165:685015): pid=31168 uid=0 auid=0 ses=22018 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446961801.167:685016): pid=31168 uid=0 auid=0 ses=22018 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446961801.175:685017): pid=31167 uid=0 auid=0 ses=22019 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446961801.177:685018): pid=31167 uid=0 auid=0 ses=22019 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1446961983.296:685019): pid=31728 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=31728 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446961983.296:685020): pid=31728 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=31728 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446961983.296:685021): pid=31728 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=31728 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446961983.340:685022): pid=31727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=31728 suid=74 rport=44883 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446961983.340:685023): pid=31727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=31728 suid=74 rport=44883 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446961983.470:685024): pid=31727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=44883 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446961983.470:685025): pid=31727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=44883 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446961983.479:685026): pid=31727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446961983.481:685027): pid=31727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=31728 suid=74 rport=44883 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446961983.484:685028): pid=31727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446961983.484:685029): pid=31727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446961983.484:685030): pid=31727 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22020 res=1
type=USER_ROLE_CHANGE msg=audit(1446961983.553:685031): pid=31727 uid=0 auid=0 ses=22020 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446961983.576:685032): pid=31727 uid=0 auid=0 ses=22020 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446961983.579:685033): pid=31727 uid=0 auid=0 ses=22020 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446961983.579:685034): pid=31727 uid=0 auid=0 ses=22020 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446961983.580:685035): pid=31730 uid=0 auid=0 ses=22020 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=31730 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446961983.580:685036): pid=31730 uid=0 auid=0 ses=22020 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=31730 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446961983.580:685037): pid=31730 uid=0 auid=0 ses=22020 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=31730 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446961983.581:685038): pid=31730 uid=0 auid=0 ses=22020 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446961983.600:685039): pid=31727 uid=0 auid=0 ses=22020 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446961983.600:685040): pid=31727 uid=0 auid=0 ses=22020 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446961983.603:685041): pid=31727 uid=0 auid=0 ses=22020 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446961983.603:685042): pid=31727 uid=0 auid=0 ses=22020 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446961983.604:685043): pid=31727 uid=0 auid=0 ses=22020 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=31727 suid=0 rport=44883 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446961983.604:685044): pid=31727 uid=0 auid=0 ses=22020 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=31727 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446961983.604:685045): pid=31727 uid=0 auid=0 ses=22020 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=31727 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446961983.604:685046): pid=31727 uid=0 auid=0 ses=22020 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=31727 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446961983.630:685047): pid=31738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=31738 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446961983.630:685048): pid=31738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=31738 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446961983.630:685049): pid=31738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=31738 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446961983.675:685050): pid=31737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=31738 suid=74 rport=44884 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446961983.675:685051): pid=31737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=31738 suid=74 rport=44884 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446961983.806:685052): pid=31737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=44884 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446961983.806:685053): pid=31737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=44884 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446961983.812:685054): pid=31737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446961983.813:685055): pid=31737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=31738 suid=74 rport=44884 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446961983.814:685056): pid=31737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446961983.814:685057): pid=31737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446961983.814:685058): pid=31737 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22021 res=1
type=USER_ROLE_CHANGE msg=audit(1446961983.880:685059): pid=31737 uid=0 auid=0 ses=22021 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446961983.899:685060): pid=31737 uid=0 auid=0 ses=22021 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446961983.902:685061): pid=31737 uid=0 auid=0 ses=22021 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446961983.902:685062): pid=31737 uid=0 auid=0 ses=22021 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446961983.904:685063): pid=31740 uid=0 auid=0 ses=22021 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=31740 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446961983.904:685064): pid=31740 uid=0 auid=0 ses=22021 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=31740 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446961983.904:685065): pid=31740 uid=0 auid=0 ses=22021 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=31740 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446961983.905:685066): pid=31740 uid=0 auid=0 ses=22021 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446961985.200:685067): pid=31737 uid=0 auid=0 ses=22021 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446961985.200:685068): pid=31737 uid=0 auid=0 ses=22021 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446961985.208:685069): pid=31737 uid=0 auid=0 ses=22021 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446961985.208:685070): pid=31737 uid=0 auid=0 ses=22021 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446961985.209:685071): pid=31737 uid=0 auid=0 ses=22021 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=31737 suid=0 rport=44884 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446961985.209:685072): pid=31737 uid=0 auid=0 ses=22021 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=31737 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446961985.209:685073): pid=31737 uid=0 auid=0 ses=22021 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=31737 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446961985.209:685074): pid=31737 uid=0 auid=0 ses=22021 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=31737 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446961985.237:685075): pid=31790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=31790 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446961985.237:685076): pid=31790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=31790 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446961985.237:685077): pid=31790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=31790 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446961985.281:685078): pid=31789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=31790 suid=74 rport=44886 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446961985.282:685079): pid=31789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=31790 suid=74 rport=44886 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446961985.410:685080): pid=31789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=44886 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446961985.410:685081): pid=31789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=44886 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446961985.419:685082): pid=31789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446961985.420:685083): pid=31789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=31790 suid=74 rport=44886 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446961985.421:685084): pid=31789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446961985.421:685085): pid=31789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446961985.421:685086): pid=31789 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22022 res=1
type=USER_ROLE_CHANGE msg=audit(1446961985.490:685087): pid=31789 uid=0 auid=0 ses=22022 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446961985.513:685088): pid=31789 uid=0 auid=0 ses=22022 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446961985.516:685089): pid=31789 uid=0 auid=0 ses=22022 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446961985.516:685090): pid=31789 uid=0 auid=0 ses=22022 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446961985.518:685091): pid=31792 uid=0 auid=0 ses=22022 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=31792 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446961985.519:685092): pid=31792 uid=0 auid=0 ses=22022 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=31792 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446961985.519:685093): pid=31792 uid=0 auid=0 ses=22022 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=31792 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446961985.519:685094): pid=31792 uid=0 auid=0 ses=22022 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446961985.538:685095): pid=31789 uid=0 auid=0 ses=22022 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446961985.538:685096): pid=31789 uid=0 auid=0 ses=22022 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446961985.543:685097): pid=31789 uid=0 auid=0 ses=22022 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446961985.543:685098): pid=31789 uid=0 auid=0 ses=22022 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446961985.543:685099): pid=31789 uid=0 auid=0 ses=22022 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=31789 suid=0 rport=44886 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446961985.543:685100): pid=31789 uid=0 auid=0 ses=22022 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=31789 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446961985.543:685101): pid=31789 uid=0 auid=0 ses=22022 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=31789 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446961985.544:685102): pid=31789 uid=0 auid=0 ses=22022 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=31789 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=SYSCALL msg=audit(1446962273.758:685103): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1446962401.197:685105): pid=847 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446962401.197:685104): pid=848 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446962401.197:685106): pid=847 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446962401.198:685107): pid=848 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446962401.199:685108): pid=848 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22023 res=1
type=LOGIN msg=audit(1446962401.199:685109): pid=847 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22024 res=1
type=USER_START msg=audit(1446962401.218:685110): pid=847 uid=0 auid=0 ses=22024 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446962401.219:685111): pid=847 uid=0 auid=0 ses=22024 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1446962401.219:685112): pid=848 uid=0 auid=0 ses=22023 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446962401.219:685113): pid=848 uid=0 auid=0 ses=22023 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446962401.228:685114): pid=848 uid=0 auid=0 ses=22023 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446962401.231:685115): pid=848 uid=0 auid=0 ses=22023 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446962401.235:685116): pid=847 uid=0 auid=0 ses=22024 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446962401.237:685117): pid=847 uid=0 auid=0 ses=22024 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446962461.246:685118): pid=1092 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446962461.246:685119): pid=1092 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446962461.246:685120): pid=1092 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22025 res=1
type=USER_START msg=audit(1446962461.258:685121): pid=1092 uid=0 auid=0 ses=22025 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446962461.258:685122): pid=1092 uid=0 auid=0 ses=22025 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446962461.285:685123): pid=1092 uid=0 auid=0 ses=22025 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446962461.287:685124): pid=1092 uid=0 auid=0 ses=22025 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446963001.300:685125): pid=2763 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446963001.300:685126): pid=2763 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446963001.300:685127): pid=2762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446963001.300:685128): pid=2763 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22026 res=1
type=CRED_ACQ msg=audit(1446963001.300:685129): pid=2762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446963001.300:685130): pid=2762 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22027 res=1
type=USER_START msg=audit(1446963001.314:685131): pid=2762 uid=0 auid=0 ses=22027 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446963001.314:685132): pid=2762 uid=0 auid=0 ses=22027 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1446963001.315:685133): pid=2763 uid=0 auid=0 ses=22026 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446963001.315:685134): pid=2763 uid=0 auid=0 ses=22026 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446963001.323:685135): pid=2763 uid=0 auid=0 ses=22026 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446963001.329:685136): pid=2762 uid=0 auid=0 ses=22027 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446963001.329:685137): pid=2763 uid=0 auid=0 ses=22026 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446963001.332:685138): pid=2762 uid=0 auid=0 ses=22027 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1446963182.829:685139): pid=3323 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=3323 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446963182.829:685140): pid=3323 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=3323 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446963182.829:685141): pid=3323 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=3323 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446963182.874:685142): pid=3322 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=3323 suid=74 rport=46863 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446963182.874:685143): pid=3322 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=3323 suid=74 rport=46863 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446963182.996:685144): pid=3322 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=46863 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446963182.996:685145): pid=3322 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=46863 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446963183.000:685146): pid=3322 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446963183.001:685147): pid=3322 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3323 suid=74 rport=46863 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446963183.004:685148): pid=3322 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446963183.004:685149): pid=3322 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446963183.004:685150): pid=3322 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22028 res=1
type=USER_ROLE_CHANGE msg=audit(1446963183.076:685151): pid=3322 uid=0 auid=0 ses=22028 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446963183.096:685152): pid=3322 uid=0 auid=0 ses=22028 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446963183.098:685153): pid=3322 uid=0 auid=0 ses=22028 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446963183.098:685154): pid=3322 uid=0 auid=0 ses=22028 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446963183.100:685155): pid=3325 uid=0 auid=0 ses=22028 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=3325 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446963183.100:685156): pid=3325 uid=0 auid=0 ses=22028 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=3325 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446963183.100:685157): pid=3325 uid=0 auid=0 ses=22028 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=3325 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446963183.101:685158): pid=3325 uid=0 auid=0 ses=22028 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446963183.119:685159): pid=3322 uid=0 auid=0 ses=22028 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446963183.119:685160): pid=3322 uid=0 auid=0 ses=22028 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446963183.123:685161): pid=3322 uid=0 auid=0 ses=22028 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446963183.123:685162): pid=3322 uid=0 auid=0 ses=22028 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446963183.124:685163): pid=3322 uid=0 auid=0 ses=22028 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3322 suid=0 rport=46863 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446963183.124:685164): pid=3322 uid=0 auid=0 ses=22028 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=3322 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446963183.124:685165): pid=3322 uid=0 auid=0 ses=22028 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=3322 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446963183.124:685166): pid=3322 uid=0 auid=0 ses=22028 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=3322 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446963183.145:685167): pid=3333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=3333 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446963183.146:685168): pid=3333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=3333 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446963183.146:685169): pid=3333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=3333 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446963183.190:685170): pid=3332 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=3333 suid=74 rport=46864 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446963183.190:685171): pid=3332 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=3333 suid=74 rport=46864 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446963183.313:685172): pid=3332 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=46864 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446963183.313:685173): pid=3332 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=46864 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446963183.322:685174): pid=3332 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446963183.323:685175): pid=3332 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3333 suid=74 rport=46864 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446963183.325:685176): pid=3332 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446963183.326:685177): pid=3332 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446963183.326:685178): pid=3332 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22029 res=1
type=USER_ROLE_CHANGE msg=audit(1446963183.392:685179): pid=3332 uid=0 auid=0 ses=22029 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446963183.412:685180): pid=3332 uid=0 auid=0 ses=22029 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446963183.414:685181): pid=3332 uid=0 auid=0 ses=22029 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446963183.414:685182): pid=3332 uid=0 auid=0 ses=22029 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446963183.416:685183): pid=3335 uid=0 auid=0 ses=22029 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=3335 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446963183.416:685184): pid=3335 uid=0 auid=0 ses=22029 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=3335 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446963183.416:685185): pid=3335 uid=0 auid=0 ses=22029 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=3335 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446963183.417:685186): pid=3335 uid=0 auid=0 ses=22029 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446963184.685:685187): pid=3332 uid=0 auid=0 ses=22029 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446963184.685:685188): pid=3332 uid=0 auid=0 ses=22029 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446963184.692:685189): pid=3332 uid=0 auid=0 ses=22029 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446963184.693:685190): pid=3332 uid=0 auid=0 ses=22029 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446963184.693:685191): pid=3332 uid=0 auid=0 ses=22029 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3332 suid=0 rport=46864 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446963184.694:685192): pid=3332 uid=0 auid=0 ses=22029 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=3332 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446963184.694:685193): pid=3332 uid=0 auid=0 ses=22029 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=3332 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446963184.694:685194): pid=3332 uid=0 auid=0 ses=22029 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=3332 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446963184.720:685195): pid=3385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=3385 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446963184.720:685196): pid=3385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=3385 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446963184.720:685197): pid=3385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=3385 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446963184.765:685198): pid=3384 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=3385 suid=74 rport=46865 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446963184.765:685199): pid=3384 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=3385 suid=74 rport=46865 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446963184.891:685200): pid=3384 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=46865 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446963184.891:685201): pid=3384 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=46865 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446963184.900:685202): pid=3384 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446963184.901:685203): pid=3384 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3385 suid=74 rport=46865 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446963184.902:685204): pid=3384 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446963184.903:685205): pid=3384 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446963184.903:685206): pid=3384 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22030 res=1
type=USER_ROLE_CHANGE msg=audit(1446963184.970:685207): pid=3384 uid=0 auid=0 ses=22030 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446963184.997:685208): pid=3384 uid=0 auid=0 ses=22030 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446963185.000:685209): pid=3384 uid=0 auid=0 ses=22030 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446963185.000:685210): pid=3384 uid=0 auid=0 ses=22030 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446963185.001:685211): pid=3387 uid=0 auid=0 ses=22030 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=3387 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446963185.001:685212): pid=3387 uid=0 auid=0 ses=22030 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=3387 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446963185.001:685213): pid=3387 uid=0 auid=0 ses=22030 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=3387 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446963185.002:685214): pid=3387 uid=0 auid=0 ses=22030 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446963185.020:685215): pid=3384 uid=0 auid=0 ses=22030 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446963185.020:685216): pid=3384 uid=0 auid=0 ses=22030 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446963185.025:685217): pid=3384 uid=0 auid=0 ses=22030 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446963185.025:685218): pid=3384 uid=0 auid=0 ses=22030 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446963185.025:685219): pid=3384 uid=0 auid=0 ses=22030 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3384 suid=0 rport=46865 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446963185.025:685220): pid=3384 uid=0 auid=0 ses=22030 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=3384 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446963185.025:685221): pid=3384 uid=0 auid=0 ses=22030 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=3384 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446963185.025:685222): pid=3384 uid=0 auid=0 ses=22030 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=3384 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=SYSCALL msg=audit(1446963327.756:685223): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1446963601.352:685224): pid=4686 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446963601.353:685225): pid=4686 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446963601.353:685226): pid=4685 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446963601.353:685227): pid=4685 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446963601.354:685228): pid=4686 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22031 res=1
type=LOGIN msg=audit(1446963601.354:685229): pid=4685 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22032 res=1
type=USER_START msg=audit(1446963601.371:685230): pid=4686 uid=0 auid=0 ses=22031 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1446963601.371:685231): pid=4685 uid=0 auid=0 ses=22032 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446963601.372:685232): pid=4686 uid=0 auid=0 ses=22031 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446963601.372:685233): pid=4685 uid=0 auid=0 ses=22032 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446963601.380:685234): pid=4686 uid=0 auid=0 ses=22031 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446963601.381:685235): pid=4686 uid=0 auid=0 ses=22031 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446963601.391:685236): pid=4685 uid=0 auid=0 ses=22032 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446963601.393:685237): pid=4685 uid=0 auid=0 ses=22032 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446964201.409:685238): pid=6530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446964201.409:685239): pid=6530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446964201.409:685240): pid=6531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446964201.409:685241): pid=6531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446964201.410:685242): pid=6530 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22033 res=1
type=LOGIN msg=audit(1446964201.410:685243): pid=6531 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22034 res=1
type=USER_START msg=audit(1446964201.426:685244): pid=6531 uid=0 auid=0 ses=22034 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1446964201.427:685245): pid=6530 uid=0 auid=0 ses=22033 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446964201.427:685246): pid=6531 uid=0 auid=0 ses=22034 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446964201.427:685247): pid=6530 uid=0 auid=0 ses=22033 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446964201.434:685248): pid=6531 uid=0 auid=0 ses=22034 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446964201.439:685249): pid=6530 uid=0 auid=0 ses=22033 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446964201.440:685250): pid=6531 uid=0 auid=0 ses=22034 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446964201.441:685251): pid=6530 uid=0 auid=0 ses=22033 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1446964383.346:685252): pid=7093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=7093 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446964383.346:685253): pid=7093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=7093 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446964383.346:685254): pid=7093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=7093 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446964383.391:685255): pid=7092 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=7093 suid=74 rport=48844 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446964383.392:685256): pid=7092 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=7093 suid=74 rport=48844 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446964383.523:685257): pid=7092 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=48844 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446964383.523:685258): pid=7092 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=48844 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446964383.532:685259): pid=7092 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446964383.534:685260): pid=7092 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7093 suid=74 rport=48844 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446964383.534:685261): pid=7092 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446964383.535:685262): pid=7092 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446964383.535:685263): pid=7092 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22035 res=1
type=USER_ROLE_CHANGE msg=audit(1446964383.605:685264): pid=7092 uid=0 auid=0 ses=22035 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446964383.623:685265): pid=7092 uid=0 auid=0 ses=22035 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446964383.626:685266): pid=7092 uid=0 auid=0 ses=22035 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446964383.626:685267): pid=7092 uid=0 auid=0 ses=22035 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446964383.628:685268): pid=7095 uid=0 auid=0 ses=22035 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=7095 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446964383.628:685269): pid=7095 uid=0 auid=0 ses=22035 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=7095 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446964383.628:685270): pid=7095 uid=0 auid=0 ses=22035 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=7095 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446964383.628:685271): pid=7095 uid=0 auid=0 ses=22035 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446964383.646:685272): pid=7092 uid=0 auid=0 ses=22035 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446964383.646:685273): pid=7092 uid=0 auid=0 ses=22035 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446964383.650:685274): pid=7092 uid=0 auid=0 ses=22035 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446964383.651:685275): pid=7092 uid=0 auid=0 ses=22035 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446964383.651:685276): pid=7092 uid=0 auid=0 ses=22035 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7092 suid=0 rport=48844 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446964383.651:685277): pid=7092 uid=0 auid=0 ses=22035 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=7092 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446964383.651:685278): pid=7092 uid=0 auid=0 ses=22035 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=7092 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446964383.651:685279): pid=7092 uid=0 auid=0 ses=22035 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=7092 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446964383.678:685280): pid=7103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=7103 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446964383.678:685281): pid=7103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=7103 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446964383.678:685282): pid=7103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=7103 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446964383.723:685283): pid=7102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=7103 suid=74 rport=48845 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446964383.723:685284): pid=7102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=7103 suid=74 rport=48845 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446964383.851:685285): pid=7102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=48845 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446964383.851:685286): pid=7102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=48845 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446964383.860:685287): pid=7102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446964383.861:685288): pid=7102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7103 suid=74 rport=48845 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446964383.864:685289): pid=7102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446964383.864:685290): pid=7102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446964383.864:685291): pid=7102 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22036 res=1
type=USER_ROLE_CHANGE msg=audit(1446964383.926:685292): pid=7102 uid=0 auid=0 ses=22036 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446964383.947:685293): pid=7102 uid=0 auid=0 ses=22036 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446964383.950:685294): pid=7102 uid=0 auid=0 ses=22036 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446964383.950:685295): pid=7102 uid=0 auid=0 ses=22036 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446964383.951:685296): pid=7105 uid=0 auid=0 ses=22036 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=7105 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446964383.951:685297): pid=7105 uid=0 auid=0 ses=22036 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=7105 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446964383.951:685298): pid=7105 uid=0 auid=0 ses=22036 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=7105 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446964383.952:685299): pid=7105 uid=0 auid=0 ses=22036 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446964385.221:685300): pid=7102 uid=0 auid=0 ses=22036 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446964385.221:685301): pid=7102 uid=0 auid=0 ses=22036 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446964385.226:685302): pid=7102 uid=0 auid=0 ses=22036 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446964385.226:685303): pid=7102 uid=0 auid=0 ses=22036 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446964385.226:685304): pid=7102 uid=0 auid=0 ses=22036 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7102 suid=0 rport=48845 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446964385.226:685305): pid=7102 uid=0 auid=0 ses=22036 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=7102 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446964385.226:685306): pid=7102 uid=0 auid=0 ses=22036 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=7102 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446964385.226:685307): pid=7102 uid=0 auid=0 ses=22036 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=7102 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446964385.263:685308): pid=7155 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=7155 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446964385.263:685309): pid=7155 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=7155 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446964385.264:685310): pid=7155 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=7155 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446964385.308:685311): pid=7154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=7155 suid=74 rport=48846 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446964385.308:685312): pid=7154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=7155 suid=74 rport=48846 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446964385.434:685313): pid=7154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=48846 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446964385.434:685314): pid=7154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=48846 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446964385.440:685315): pid=7154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446964385.440:685316): pid=7154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7155 suid=74 rport=48846 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446964385.441:685317): pid=7154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446964385.442:685318): pid=7154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446964385.442:685319): pid=7154 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22037 res=1
type=USER_ROLE_CHANGE msg=audit(1446964385.507:685320): pid=7154 uid=0 auid=0 ses=22037 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446964385.530:685321): pid=7154 uid=0 auid=0 ses=22037 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446964385.532:685322): pid=7154 uid=0 auid=0 ses=22037 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446964385.532:685323): pid=7154 uid=0 auid=0 ses=22037 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446964385.534:685324): pid=7157 uid=0 auid=0 ses=22037 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=7157 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446964385.534:685325): pid=7157 uid=0 auid=0 ses=22037 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=7157 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446964385.534:685326): pid=7157 uid=0 auid=0 ses=22037 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=7157 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446964385.535:685327): pid=7157 uid=0 auid=0 ses=22037 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446964385.550:685328): pid=7154 uid=0 auid=0 ses=22037 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446964385.550:685329): pid=7154 uid=0 auid=0 ses=22037 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446964385.554:685330): pid=7154 uid=0 auid=0 ses=22037 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446964385.554:685331): pid=7154 uid=0 auid=0 ses=22037 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446964385.555:685332): pid=7154 uid=0 auid=0 ses=22037 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7154 suid=0 rport=48846 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446964385.555:685333): pid=7154 uid=0 auid=0 ses=22037 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=7154 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446964385.555:685334): pid=7154 uid=0 auid=0 ses=22037 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=7154 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446964385.555:685335): pid=7154 uid=0 auid=0 ses=22037 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=7154 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446964801.462:685336): pid=8447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446964801.462:685337): pid=8448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446964801.462:685339): pid=8448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446964801.462:685338): pid=8447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446964801.463:685340): pid=8448 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22038 res=1
type=LOGIN msg=audit(1446964801.463:685341): pid=8447 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22039 res=1
type=USER_START msg=audit(1446964801.480:685342): pid=8447 uid=0 auid=0 ses=22039 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1446964801.480:685343): pid=8448 uid=0 auid=0 ses=22038 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446964801.481:685344): pid=8447 uid=0 auid=0 ses=22039 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446964801.481:685345): pid=8448 uid=0 auid=0 ses=22038 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446964801.491:685346): pid=8448 uid=0 auid=0 ses=22038 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446964801.493:685347): pid=8448 uid=0 auid=0 ses=22038 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446964801.495:685348): pid=8447 uid=0 auid=0 ses=22039 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446964826.522:685349): pid=8447 uid=0 auid=0 ses=22039 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=USER_ACCT msg=audit(1446965401.539:685350): pid=10294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446965401.539:685351): pid=10294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446965401.540:685352): pid=10293 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446965401.540:685353): pid=10294 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22040 res=1
type=CRED_ACQ msg=audit(1446965401.540:685354): pid=10293 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446965401.540:685355): pid=10293 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22041 res=1
type=USER_START msg=audit(1446965401.556:685356): pid=10294 uid=0 auid=0 ses=22040 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1446965401.556:685357): pid=10293 uid=0 auid=0 ses=22041 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446965401.556:685358): pid=10294 uid=0 auid=0 ses=22040 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446965401.557:685359): pid=10293 uid=0 auid=0 ses=22041 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446965401.562:685360): pid=10294 uid=0 auid=0 ses=22040 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446965401.563:685361): pid=10294 uid=0 auid=0 ses=22040 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446965401.568:685362): pid=10293 uid=0 auid=0 ses=22041 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446965426.595:685363): pid=10293 uid=0 auid=0 ses=22041 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=SYSCALL msg=audit(1446965437.758:685364): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=CRYPTO_KEY_USER msg=audit(1446965583.084:685365): pid=10853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=10853 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446965583.084:685366): pid=10853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=10853 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446965583.084:685367): pid=10853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=10853 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446965583.128:685368): pid=10852 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=10853 suid=74 rport=50822 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446965583.128:685369): pid=10852 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=10853 suid=74 rport=50822 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446965583.254:685370): pid=10852 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=50822 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446965583.254:685371): pid=10852 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=50822 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446965583.261:685372): pid=10852 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446965583.263:685373): pid=10852 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10853 suid=74 rport=50822 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446965583.267:685374): pid=10852 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446965583.267:685375): pid=10852 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446965583.268:685376): pid=10852 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22042 res=1
type=USER_ROLE_CHANGE msg=audit(1446965583.336:685377): pid=10852 uid=0 auid=0 ses=22042 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446965583.355:685378): pid=10852 uid=0 auid=0 ses=22042 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446965583.358:685379): pid=10852 uid=0 auid=0 ses=22042 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446965583.358:685380): pid=10852 uid=0 auid=0 ses=22042 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446965583.359:685381): pid=10855 uid=0 auid=0 ses=22042 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=10855 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446965583.359:685382): pid=10855 uid=0 auid=0 ses=22042 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=10855 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446965583.360:685383): pid=10855 uid=0 auid=0 ses=22042 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=10855 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446965583.361:685384): pid=10855 uid=0 auid=0 ses=22042 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446965583.381:685385): pid=10852 uid=0 auid=0 ses=22042 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446965583.381:685386): pid=10852 uid=0 auid=0 ses=22042 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446965583.384:685387): pid=10852 uid=0 auid=0 ses=22042 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446965583.384:685388): pid=10852 uid=0 auid=0 ses=22042 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446965583.384:685389): pid=10852 uid=0 auid=0 ses=22042 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10852 suid=0 rport=50822 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446965583.385:685390): pid=10852 uid=0 auid=0 ses=22042 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=10852 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446965583.385:685391): pid=10852 uid=0 auid=0 ses=22042 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=10852 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446965583.385:685392): pid=10852 uid=0 auid=0 ses=22042 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=10852 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446965583.406:685393): pid=10863 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=10863 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446965583.406:685394): pid=10863 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=10863 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446965583.407:685395): pid=10863 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=10863 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446965583.450:685396): pid=10862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=10863 suid=74 rport=50823 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446965583.451:685397): pid=10862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=10863 suid=74 rport=50823 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446965583.580:685398): pid=10862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=50823 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446965583.580:685399): pid=10862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=50823 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446965583.590:685400): pid=10862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446965583.591:685401): pid=10862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10863 suid=74 rport=50823 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446965583.591:685402): pid=10862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446965583.592:685403): pid=10862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446965583.592:685404): pid=10862 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22043 res=1
type=USER_ROLE_CHANGE msg=audit(1446965583.660:685405): pid=10862 uid=0 auid=0 ses=22043 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446965583.685:685406): pid=10862 uid=0 auid=0 ses=22043 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446965583.687:685407): pid=10862 uid=0 auid=0 ses=22043 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446965583.687:685408): pid=10862 uid=0 auid=0 ses=22043 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446965583.689:685409): pid=10865 uid=0 auid=0 ses=22043 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=10865 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446965583.689:685410): pid=10865 uid=0 auid=0 ses=22043 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=10865 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446965583.689:685411): pid=10865 uid=0 auid=0 ses=22043 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=10865 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446965583.690:685412): pid=10865 uid=0 auid=0 ses=22043 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446965584.981:685413): pid=10862 uid=0 auid=0 ses=22043 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446965584.981:685414): pid=10862 uid=0 auid=0 ses=22043 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446965584.985:685415): pid=10862 uid=0 auid=0 ses=22043 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446965584.985:685416): pid=10862 uid=0 auid=0 ses=22043 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446965584.986:685417): pid=10862 uid=0 auid=0 ses=22043 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10862 suid=0 rport=50823 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446965584.986:685418): pid=10862 uid=0 auid=0 ses=22043 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=10862 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446965584.986:685419): pid=10862 uid=0 auid=0 ses=22043 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=10862 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446965584.986:685420): pid=10862 uid=0 auid=0 ses=22043 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=10862 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446965585.014:685421): pid=10915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=10915 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446965585.015:685422): pid=10915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=10915 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446965585.015:685423): pid=10915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=10915 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446965585.059:685424): pid=10914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=10915 suid=74 rport=50827 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446965585.059:685425): pid=10914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=10915 suid=74 rport=50827 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446965585.180:685426): pid=10914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=50827 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446965585.180:685427): pid=10914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=50827 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446965585.186:685428): pid=10914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446965585.186:685429): pid=10914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10915 suid=74 rport=50827 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446965585.189:685430): pid=10914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446965585.189:685431): pid=10914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446965585.190:685432): pid=10914 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22044 res=1
type=USER_ROLE_CHANGE msg=audit(1446965585.255:685433): pid=10914 uid=0 auid=0 ses=22044 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446965585.274:685434): pid=10914 uid=0 auid=0 ses=22044 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446965585.276:685435): pid=10914 uid=0 auid=0 ses=22044 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446965585.276:685436): pid=10914 uid=0 auid=0 ses=22044 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446965585.278:685437): pid=10917 uid=0 auid=0 ses=22044 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=10917 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446965585.278:685438): pid=10917 uid=0 auid=0 ses=22044 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=10917 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446965585.278:685439): pid=10917 uid=0 auid=0 ses=22044 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=10917 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446965585.278:685440): pid=10917 uid=0 auid=0 ses=22044 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446965585.295:685441): pid=10914 uid=0 auid=0 ses=22044 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446965585.295:685442): pid=10914 uid=0 auid=0 ses=22044 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446965585.299:685443): pid=10914 uid=0 auid=0 ses=22044 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446965585.299:685444): pid=10914 uid=0 auid=0 ses=22044 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446965585.299:685445): pid=10914 uid=0 auid=0 ses=22044 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10914 suid=0 rport=50827 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446965585.299:685446): pid=10914 uid=0 auid=0 ses=22044 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=10914 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446965585.299:685447): pid=10914 uid=0 auid=0 ses=22044 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=10914 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446965585.299:685448): pid=10914 uid=0 auid=0 ses=22044 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=10914 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446966001.612:685449): pid=12211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446966001.612:685450): pid=12211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446966001.613:685451): pid=12210 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446966001.613:685452): pid=12210 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446966001.613:685453): pid=12211 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22045 res=1
type=LOGIN msg=audit(1446966001.613:685454): pid=12210 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22046 res=1
type=USER_START msg=audit(1446966001.632:685455): pid=12210 uid=0 auid=0 ses=22046 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446966001.633:685456): pid=12210 uid=0 auid=0 ses=22046 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1446966001.633:685457): pid=12211 uid=0 auid=0 ses=22045 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446966001.633:685458): pid=12211 uid=0 auid=0 ses=22045 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446966001.643:685459): pid=12211 uid=0 auid=0 ses=22045 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446966001.644:685460): pid=12211 uid=0 auid=0 ses=22045 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446966001.651:685461): pid=12210 uid=0 auid=0 ses=22046 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446966026.679:685462): pid=12210 uid=0 auid=0 ses=22046 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=USER_ACCT msg=audit(1446966061.690:685463): pid=12447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446966061.690:685464): pid=12447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446966061.690:685465): pid=12447 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22047 res=1
type=USER_START msg=audit(1446966061.700:685466): pid=12447 uid=0 auid=0 ses=22047 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446966061.700:685467): pid=12447 uid=0 auid=0 ses=22047 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446966061.726:685468): pid=12447 uid=0 auid=0 ses=22047 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446966061.728:685469): pid=12447 uid=0 auid=0 ses=22047 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1446966248.045:685470): pid=13023 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=13023 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446966248.045:685471): pid=13023 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=13023 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446966248.045:685472): pid=13023 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=13023 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446966248.048:685473): pid=13022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-cbc ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=13023 suid=74 rport=48808 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446966248.048:685474): pid=13022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-cbc ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=13023 suid=74 rport=48808 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_AUTH msg=audit(1446966248.130:685475): pid=13022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=48808 acct="svnadm" exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_AUTH msg=audit(1446966248.130:685476): pid=13022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-dss size=1024 fp=41:85:f9:50:1a:0f:bb:e4:07:e8:23:7a:13:fa:b2:e5 rport=48808 acct="svnadm" exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_ACCT msg=audit(1446966248.137:685477): pid=13022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446966248.138:685478): pid=13022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13023 suid=74 rport=48808 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_AUTH msg=audit(1446966248.141:685479): pid=13022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="svnadm" exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446966248.141:685480): pid=13022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=LOGIN msg=audit(1446966248.141:685481): pid=13022 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1001 old-ses=4294967295 ses=22048 res=1
type=USER_ROLE_CHANGE msg=audit(1446966248.207:685482): pid=13022 uid=0 auid=1001 ses=22048 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=USER_START msg=audit(1446966248.234:685483): pid=13022 uid=0 auid=1001 ses=22048 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446966248.234:685484): pid=13022 uid=0 auid=1001 ses=22048 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13022 suid=0 rport=48808 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446966248.235:685485): pid=13025 uid=0 auid=1001 ses=22048 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=13025 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446966248.235:685486): pid=13025 uid=0 auid=1001 ses=22048 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=13025 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446966248.235:685487): pid=13025 uid=0 auid=1001 ses=22048 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=13025 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRED_ACQ msg=audit(1446966248.235:685488): pid=13025 uid=0 auid=1001 ses=22048 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446966248.237:685489): pid=13022 uid=0 auid=1001 ses=22048 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1001 exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=USER_START msg=audit(1446966248.237:685490): pid=13022 uid=0 auid=1001 ses=22048 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1001 exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446966248.239:685491): pid=13022 uid=0 auid=1001 ses=22048 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=13026 suid=1001  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_END msg=audit(1446966248.256:685492): pid=13022 uid=0 auid=1001 ses=22048 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1001 exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446966248.256:685493): pid=13022 uid=0 auid=1001 ses=22048 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1001 exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446966248.257:685494): pid=13022 uid=0 auid=1001 ses=22048 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13025 suid=1001 rport=48808 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446966248.257:685495): pid=13022 uid=0 auid=1001 ses=22048 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=13025 suid=1001  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_END msg=audit(1446966248.261:685496): pid=13022 uid=0 auid=1001 ses=22048 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446966248.261:685497): pid=13022 uid=0 auid=1001 ses=22048 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446966248.262:685498): pid=13022 uid=0 auid=1001 ses=22048 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=13022 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446966248.262:685499): pid=13022 uid=0 auid=1001 ses=22048 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=13022 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446966248.262:685500): pid=13022 uid=0 auid=1001 ses=22048 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=13022 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446966248.275:685501): pid=13038 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=13038 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446966248.275:685502): pid=13038 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=13038 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446966248.275:685503): pid=13038 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=13038 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446966248.277:685504): pid=13034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-cbc ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=13038 suid=74 rport=48809 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446966248.277:685505): pid=13034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-cbc ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=13038 suid=74 rport=48809 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_AUTH msg=audit(1446966248.336:685506): pid=13034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=48809 acct="svnadm" exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_AUTH msg=audit(1446966248.336:685507): pid=13034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-dss size=1024 fp=41:85:f9:50:1a:0f:bb:e4:07:e8:23:7a:13:fa:b2:e5 rport=48809 acct="svnadm" exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_ACCT msg=audit(1446966248.344:685508): pid=13034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446966248.345:685509): pid=13034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13038 suid=74 rport=48809 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_AUTH msg=audit(1446966248.347:685510): pid=13034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="svnadm" exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446966248.347:685511): pid=13034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=LOGIN msg=audit(1446966248.348:685512): pid=13034 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1001 old-ses=4294967295 ses=22049 res=1
type=USER_ROLE_CHANGE msg=audit(1446966248.417:685513): pid=13034 uid=0 auid=1001 ses=22049 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=USER_START msg=audit(1446966248.444:685514): pid=13034 uid=0 auid=1001 ses=22049 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446966248.445:685515): pid=13034 uid=0 auid=1001 ses=22049 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13034 suid=0 rport=48809 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446966248.445:685516): pid=13040 uid=0 auid=1001 ses=22049 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=13040 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446966248.445:685517): pid=13040 uid=0 auid=1001 ses=22049 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=13040 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446966248.445:685518): pid=13040 uid=0 auid=1001 ses=22049 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=13040 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRED_ACQ msg=audit(1446966248.446:685519): pid=13040 uid=0 auid=1001 ses=22049 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446966248.448:685520): pid=13034 uid=0 auid=1001 ses=22049 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1001 exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=USER_START msg=audit(1446966248.448:685521): pid=13034 uid=0 auid=1001 ses=22049 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1001 exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446966248.449:685522): pid=13034 uid=0 auid=1001 ses=22049 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=13041 suid=1001  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=SYSCALL msg=audit(1446966248.465:685523): arch=c000003e syscall=263 success=yes exit=0 a0=ffffffffffffff9c a1=1b0f0c0 a2=0 a3=7fffa66f30a0 items=2 ppid=13040 pid=13041 auid=1001 uid=1001 gid=1003 euid=1001 suid=1001 fsuid=1001 egid=1003 sgid=1003 fsgid=1003 tty=(none) ses=22049 comm="rm" exe="/usr/bin/rm" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key="delete"
type=CWD msg=audit(1446966248.465:685523):  cwd="/home/svnadm"
type=PATH msg=audit(1446966248.465:685523): item=0 name="/usr/local/test/titan/" inode=9255149 dev=08:02 mode=040777 ouid=0 ogid=0 rdev=00:00 obj=unconfined_u:object_r:usr_t:s0 objtype=PARENT
type=PATH msg=audit(1446966248.465:685523): item=1 name="/usr/local/test/titan/NNI-titan-master-7.6.3-4283.linux-x64.sh" inode=9255147 dev=08:02 mode=0100755 ouid=1001 ogid=1003 rdev=00:00 obj=unconfined_u:object_r:usr_t:s0 objtype=DELETE
type=USER_END msg=audit(1446966248.619:685524): pid=13034 uid=0 auid=1001 ses=22049 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1001 exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446966248.619:685525): pid=13034 uid=0 auid=1001 ses=22049 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1001 exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446966248.619:685526): pid=13034 uid=0 auid=1001 ses=22049 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13040 suid=1001 rport=48809 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446966248.619:685527): pid=13034 uid=0 auid=1001 ses=22049 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=13040 suid=1001  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_END msg=audit(1446966248.622:685528): pid=13034 uid=0 auid=1001 ses=22049 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446966248.622:685529): pid=13034 uid=0 auid=1001 ses=22049 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446966248.623:685530): pid=13034 uid=0 auid=1001 ses=22049 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=13034 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446966248.623:685531): pid=13034 uid=0 auid=1001 ses=22049 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=13034 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446966248.623:685532): pid=13034 uid=0 auid=1001 ses=22049 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=13034 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446966248.634:685533): pid=13051 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=13051 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446966248.635:685534): pid=13051 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=13051 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446966248.635:685535): pid=13051 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=13051 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446966248.635:685536): pid=13049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-cbc ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=13051 suid=74 rport=48810 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446966248.636:685537): pid=13049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-cbc ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=13051 suid=74 rport=48810 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_AUTH msg=audit(1446966248.693:685538): pid=13049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=48810 acct="svnadm" exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_AUTH msg=audit(1446966248.693:685539): pid=13049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-dss size=1024 fp=41:85:f9:50:1a:0f:bb:e4:07:e8:23:7a:13:fa:b2:e5 rport=48810 acct="svnadm" exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_ACCT msg=audit(1446966248.699:685540): pid=13049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446966248.700:685541): pid=13049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13051 suid=74 rport=48810 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_AUTH msg=audit(1446966248.702:685542): pid=13049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="svnadm" exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446966248.702:685543): pid=13049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=LOGIN msg=audit(1446966248.702:685544): pid=13049 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1001 old-ses=4294967295 ses=22050 res=1
type=USER_ROLE_CHANGE msg=audit(1446966248.767:685545): pid=13049 uid=0 auid=1001 ses=22050 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=USER_START msg=audit(1446966248.791:685546): pid=13049 uid=0 auid=1001 ses=22050 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446966248.792:685547): pid=13049 uid=0 auid=1001 ses=22050 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13049 suid=0 rport=48810 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446966248.792:685548): pid=13053 uid=0 auid=1001 ses=22050 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=13053 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446966248.793:685549): pid=13053 uid=0 auid=1001 ses=22050 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=13053 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446966248.793:685550): pid=13053 uid=0 auid=1001 ses=22050 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=13053 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRED_ACQ msg=audit(1446966248.793:685551): pid=13053 uid=0 auid=1001 ses=22050 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446966248.795:685552): pid=13049 uid=0 auid=1001 ses=22050 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1001 exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=USER_START msg=audit(1446966248.795:685553): pid=13049 uid=0 auid=1001 ses=22050 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1001 exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446966248.796:685554): pid=13049 uid=0 auid=1001 ses=22050 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=13054 suid=1001  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_END msg=audit(1446966264.276:685555): pid=13049 uid=0 auid=1001 ses=22050 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1001 exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446966264.276:685556): pid=13049 uid=0 auid=1001 ses=22050 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1001 exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446966264.276:685557): pid=13049 uid=0 auid=1001 ses=22050 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13053 suid=1001 rport=48810 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446966264.277:685558): pid=13049 uid=0 auid=1001 ses=22050 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=13053 suid=1001  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_END msg=audit(1446966264.281:685559): pid=13049 uid=0 auid=1001 ses=22050 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446966264.281:685560): pid=13049 uid=0 auid=1001 ses=22050 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446966264.281:685561): pid=13049 uid=0 auid=1001 ses=22050 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=13049 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446966264.281:685562): pid=13049 uid=0 auid=1001 ses=22050 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=13049 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446966264.282:685563): pid=13049 uid=0 auid=1001 ses=22050 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=13049 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446966264.297:685564): pid=13070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=13070 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446966264.297:685565): pid=13070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=13070 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446966264.297:685566): pid=13070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=13070 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446966264.298:685567): pid=13068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-cbc ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=13070 suid=74 rport=48812 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446966264.298:685568): pid=13068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-cbc ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=13070 suid=74 rport=48812 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_AUTH msg=audit(1446966264.351:685569): pid=13068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=48812 acct="svnadm" exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_AUTH msg=audit(1446966264.351:685570): pid=13068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-dss size=1024 fp=41:85:f9:50:1a:0f:bb:e4:07:e8:23:7a:13:fa:b2:e5 rport=48812 acct="svnadm" exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_ACCT msg=audit(1446966264.355:685571): pid=13068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446966264.356:685572): pid=13068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13070 suid=74 rport=48812 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_AUTH msg=audit(1446966264.357:685573): pid=13068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="svnadm" exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446966264.357:685574): pid=13068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=LOGIN msg=audit(1446966264.357:685575): pid=13068 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1001 old-ses=4294967295 ses=22051 res=1
type=USER_ROLE_CHANGE msg=audit(1446966264.422:685576): pid=13068 uid=0 auid=1001 ses=22051 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=USER_START msg=audit(1446966264.439:685577): pid=13068 uid=0 auid=1001 ses=22051 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446966264.440:685578): pid=13068 uid=0 auid=1001 ses=22051 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13068 suid=0 rport=48812 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446966264.440:685579): pid=13072 uid=0 auid=1001 ses=22051 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=13072 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446966264.440:685580): pid=13072 uid=0 auid=1001 ses=22051 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=13072 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446966264.441:685581): pid=13072 uid=0 auid=1001 ses=22051 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=13072 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRED_ACQ msg=audit(1446966264.441:685582): pid=13072 uid=0 auid=1001 ses=22051 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446966264.443:685583): pid=13068 uid=0 auid=1001 ses=22051 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1001 exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=USER_START msg=audit(1446966264.443:685584): pid=13068 uid=0 auid=1001 ses=22051 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1001 exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446966264.444:685585): pid=13068 uid=0 auid=1001 ses=22051 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=13073 suid=1001  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_END msg=audit(1446966264.462:685586): pid=13068 uid=0 auid=1001 ses=22051 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1001 exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446966264.462:685587): pid=13068 uid=0 auid=1001 ses=22051 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1001 exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446966264.462:685588): pid=13068 uid=0 auid=1001 ses=22051 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13072 suid=1001 rport=48812 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446966264.462:685589): pid=13068 uid=0 auid=1001 ses=22051 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=13072 suid=1001  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_END msg=audit(1446966264.465:685590): pid=13068 uid=0 auid=1001 ses=22051 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446966264.465:685591): pid=13068 uid=0 auid=1001 ses=22051 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446966264.465:685592): pid=13068 uid=0 auid=1001 ses=22051 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=13068 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446966264.465:685593): pid=13068 uid=0 auid=1001 ses=22051 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=13068 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446966264.465:685594): pid=13068 uid=0 auid=1001 ses=22051 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=13068 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446966264.479:685595): pid=13083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=13083 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446966264.480:685596): pid=13083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=13083 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446966264.480:685597): pid=13083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=13083 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446966264.480:685598): pid=13082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-cbc ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=13083 suid=74 rport=48813 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446966264.481:685599): pid=13082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-cbc ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=13083 suid=74 rport=48813 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_AUTH msg=audit(1446966264.534:685600): pid=13082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=48813 acct="svnadm" exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_AUTH msg=audit(1446966264.534:685601): pid=13082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-dss size=1024 fp=41:85:f9:50:1a:0f:bb:e4:07:e8:23:7a:13:fa:b2:e5 rport=48813 acct="svnadm" exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_ACCT msg=audit(1446966264.538:685602): pid=13082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446966264.538:685603): pid=13082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13083 suid=74 rport=48813 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_AUTH msg=audit(1446966264.539:685604): pid=13082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="svnadm" exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446966264.540:685605): pid=13082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=LOGIN msg=audit(1446966264.540:685606): pid=13082 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1001 old-ses=4294967295 ses=22052 res=1
type=USER_ROLE_CHANGE msg=audit(1446966264.602:685607): pid=13082 uid=0 auid=1001 ses=22052 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=USER_START msg=audit(1446966264.619:685608): pid=13082 uid=0 auid=1001 ses=22052 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446966264.620:685609): pid=13082 uid=0 auid=1001 ses=22052 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13082 suid=0 rport=48813 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446966264.620:685610): pid=13085 uid=0 auid=1001 ses=22052 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=13085 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446966264.620:685611): pid=13085 uid=0 auid=1001 ses=22052 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=13085 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446966264.620:685612): pid=13085 uid=0 auid=1001 ses=22052 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=13085 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRED_ACQ msg=audit(1446966264.620:685613): pid=13085 uid=0 auid=1001 ses=22052 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446966264.623:685614): pid=13082 uid=0 auid=1001 ses=22052 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1001 exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=USER_START msg=audit(1446966264.623:685615): pid=13082 uid=0 auid=1001 ses=22052 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1001 exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446966264.624:685616): pid=13082 uid=0 auid=1001 ses=22052 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=13086 suid=1001  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_END msg=audit(1446966264.639:685617): pid=13082 uid=0 auid=1001 ses=22052 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1001 exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446966264.640:685618): pid=13082 uid=0 auid=1001 ses=22052 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1001 exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446966264.640:685619): pid=13082 uid=0 auid=1001 ses=22052 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13085 suid=1001 rport=48813 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446966264.640:685620): pid=13082 uid=0 auid=1001 ses=22052 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=13085 suid=1001  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_END msg=audit(1446966264.642:685621): pid=13082 uid=0 auid=1001 ses=22052 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446966264.643:685622): pid=13082 uid=0 auid=1001 ses=22052 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446966264.643:685623): pid=13082 uid=0 auid=1001 ses=22052 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=13082 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446966264.643:685624): pid=13082 uid=0 auid=1001 ses=22052 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=13082 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446966264.643:685625): pid=13082 uid=0 auid=1001 ses=22052 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=13082 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=SYSCALL msg=audit(1446966485.758:685626): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1446966601.748:685627): pid=14161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446966601.748:685628): pid=14162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446966601.748:685629): pid=14162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446966601.748:685630): pid=14161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446966601.749:685631): pid=14161 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22053 res=1
type=LOGIN msg=audit(1446966601.749:685632): pid=14162 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22054 res=1
type=USER_START msg=audit(1446966601.770:685633): pid=14161 uid=0 auid=0 ses=22053 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446966601.770:685634): pid=14161 uid=0 auid=0 ses=22053 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1446966601.771:685635): pid=14162 uid=0 auid=0 ses=22054 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446966601.771:685636): pid=14162 uid=0 auid=0 ses=22054 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1446966601.787:685637): arch=c000003e syscall=59 success=yes exit=0 a0=2210600 a1=220ffd0 a2=2219430 a3=7fffad693b80 items=2 ppid=14169 pid=14179 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22054 comm="systemctl" exe="/usr/bin/systemctl" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key="privileged"
type=EXECVE msg=audit(1446966601.787:685637): argc=3 a0="/usr/bin/systemctl" a1="stop" a2="titan"
type=CWD msg=audit(1446966601.787:685637):  cwd="/usr/local/test/titan"
type=PATH msg=audit(1446966601.787:685637): item=0 name="/usr/bin/systemctl" inode=25275302 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:systemd_systemctl_exec_t:s0 objtype=NORMAL
type=PATH msg=audit(1446966601.787:685637): item=1 name=(null) inode=2292 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=CRED_DISP msg=audit(1446966601.790:685638): pid=14161 uid=0 auid=0 ses=22053 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446966601.792:685639): pid=14161 uid=0 auid=0 ses=22053 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SERVICE_STOP msg=audit(1446966606.834:685640): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="titan" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=SYSCALL msg=audit(1446966610.318:685641): arch=c000003e syscall=59 success=yes exit=0 a0=18b72d0 a1=18b6290 a2=18b5c70 a3=7ffffa652a50 items=2 ppid=14266 pid=14267 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22054 comm="systemctl" exe="/usr/bin/systemctl" subj=unconfined_u:unconfined_r:rpm_script_t:s0-s0:c0.c1023 key="privileged"
type=EXECVE msg=audit(1446966610.318:685641): argc=3 a0="systemctl" a1="disable" a2="titan"
type=CWD msg=audit(1446966610.318:685641):  cwd="/"
type=PATH msg=audit(1446966610.318:685641): item=0 name="/bin/systemctl" inode=25275302 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:systemd_systemctl_exec_t:s0 objtype=NORMAL
type=PATH msg=audit(1446966610.318:685641): item=1 name=(null) inode=2292 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=SYSCALL msg=audit(1446966610.374:685642): arch=c000003e syscall=59 success=yes exit=0 a0=18b5d80 a1=18b70b0 a2=18b7b30 a3=7ffffa652a50 items=2 ppid=14266 pid=14277 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22054 comm="systemctl" exe="/usr/bin/systemctl" subj=unconfined_u:unconfined_r:rpm_script_t:s0-s0:c0.c1023 key="privileged"
type=EXECVE msg=audit(1446966610.374:685642): argc=2 a0="systemctl" a1="daemon-reload"
type=CWD msg=audit(1446966610.374:685642):  cwd="/"
type=PATH msg=audit(1446966610.374:685642): item=0 name="/bin/systemctl" inode=25275302 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:systemd_systemctl_exec_t:s0 objtype=NORMAL
type=PATH msg=audit(1446966610.374:685642): item=1 name=(null) inode=2292 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=SYSCALL msg=audit(1446966628.129:685643): arch=c000003e syscall=59 success=yes exit=0 a0=f3a3e0 a1=f39fe0 a2=f3a0b0 a3=7fff25d11c20 items=2 ppid=14318 pid=14321 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22054 comm="systemctl" exe="/usr/bin/systemctl" subj=unconfined_u:unconfined_r:rpm_script_t:s0-s0:c0.c1023 key="privileged"
type=EXECVE msg=audit(1446966628.129:685643): argc=2 a0="systemctl" a1="daemon-reload"
type=CWD msg=audit(1446966628.129:685643):  cwd="/"
type=PATH msg=audit(1446966628.129:685643): item=0 name="/bin/systemctl" inode=25275302 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:systemd_systemctl_exec_t:s0 objtype=NORMAL
type=PATH msg=audit(1446966628.129:685643): item=1 name=(null) inode=2292 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=SYSCALL msg=audit(1446966628.168:685644): arch=c000003e syscall=59 success=yes exit=0 a0=f3a690 a1=f3a4d0 a2=f3a0b0 a3=7fff25d11c20 items=2 ppid=14318 pid=14330 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22054 comm="systemctl" exe="/usr/bin/systemctl" subj=unconfined_u:unconfined_r:rpm_script_t:s0-s0:c0.c1023 key="privileged"
type=EXECVE msg=audit(1446966628.168:685644): argc=3 a0="systemctl" a1="enable" a2="titan"
type=CWD msg=audit(1446966628.168:685644):  cwd="/"
type=PATH msg=audit(1446966628.168:685644): item=0 name="/bin/systemctl" inode=25275302 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:systemd_systemctl_exec_t:s0 objtype=NORMAL
type=PATH msg=audit(1446966628.168:685644): item=1 name=(null) inode=2292 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=SYSCALL msg=audit(1446966770.468:685645): arch=c000003e syscall=59 success=yes exit=0 a0=22106f0 a1=220c0c0 a2=2219430 a3=7fffad693eb0 items=2 ppid=14169 pid=14774 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22054 comm="systemctl" exe="/usr/bin/systemctl" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key="privileged"
type=EXECVE msg=audit(1446966770.468:685645): argc=3 a0="/usr/bin/systemctl" a1="start" a2="titan"
type=CWD msg=audit(1446966770.468:685645):  cwd="/usr/local/test/titan"
type=PATH msg=audit(1446966770.468:685645): item=0 name="/usr/bin/systemctl" inode=25275302 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:systemd_systemctl_exec_t:s0 objtype=NORMAL
type=PATH msg=audit(1446966770.468:685645): item=1 name=(null) inode=2292 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=SERVICE_START msg=audit(1446966771.512:685646): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="titan" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446966782.529:685647): pid=14929 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=14929 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446966782.529:685648): pid=14929 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=14929 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446966782.529:685649): pid=14929 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=14929 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446966782.574:685650): pid=14928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=14929 suid=74 rport=52804 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446966782.574:685651): pid=14928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=14929 suid=74 rport=52804 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446966782.701:685652): pid=14928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52804 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446966782.701:685653): pid=14928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=52804 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446966782.707:685654): pid=14928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446966782.708:685655): pid=14928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14929 suid=74 rport=52804 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446966782.710:685656): pid=14928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446966782.710:685657): pid=14928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446966782.710:685658): pid=14928 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22055 res=1
type=USER_ROLE_CHANGE msg=audit(1446966782.779:685659): pid=14928 uid=0 auid=0 ses=22055 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446966782.798:685660): pid=14928 uid=0 auid=0 ses=22055 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446966782.801:685661): pid=14928 uid=0 auid=0 ses=22055 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446966782.801:685662): pid=14928 uid=0 auid=0 ses=22055 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446966782.802:685663): pid=14931 uid=0 auid=0 ses=22055 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=14931 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446966782.802:685664): pid=14931 uid=0 auid=0 ses=22055 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=14931 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446966782.802:685665): pid=14931 uid=0 auid=0 ses=22055 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=14931 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446966782.803:685666): pid=14931 uid=0 auid=0 ses=22055 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446966782.822:685667): pid=14928 uid=0 auid=0 ses=22055 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446966782.822:685668): pid=14928 uid=0 auid=0 ses=22055 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446966782.825:685669): pid=14928 uid=0 auid=0 ses=22055 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446966782.825:685670): pid=14928 uid=0 auid=0 ses=22055 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446966782.825:685671): pid=14928 uid=0 auid=0 ses=22055 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14928 suid=0 rport=52804 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446966782.825:685672): pid=14928 uid=0 auid=0 ses=22055 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=14928 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446966782.826:685673): pid=14928 uid=0 auid=0 ses=22055 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=14928 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446966782.826:685674): pid=14928 uid=0 auid=0 ses=22055 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=14928 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446966782.847:685675): pid=14938 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=14938 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446966782.848:685676): pid=14938 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=14938 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446966782.848:685677): pid=14938 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=14938 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446966782.892:685678): pid=14937 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=14938 suid=74 rport=52805 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446966782.892:685679): pid=14937 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=14938 suid=74 rport=52805 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446966783.016:685680): pid=14937 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52805 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446966783.016:685681): pid=14937 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=52805 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446966783.023:685682): pid=14937 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446966783.025:685683): pid=14937 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14938 suid=74 rport=52805 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446966783.026:685684): pid=14937 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446966783.026:685685): pid=14937 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446966783.026:685686): pid=14937 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22056 res=1
type=USER_ROLE_CHANGE msg=audit(1446966783.089:685687): pid=14937 uid=0 auid=0 ses=22056 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446966783.114:685688): pid=14937 uid=0 auid=0 ses=22056 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446966783.118:685689): pid=14937 uid=0 auid=0 ses=22056 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446966783.118:685690): pid=14937 uid=0 auid=0 ses=22056 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446966783.120:685691): pid=14940 uid=0 auid=0 ses=22056 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=14940 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446966783.120:685692): pid=14940 uid=0 auid=0 ses=22056 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=14940 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446966783.120:685693): pid=14940 uid=0 auid=0 ses=22056 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=14940 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446966783.122:685694): pid=14940 uid=0 auid=0 ses=22056 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446966784.387:685695): pid=14937 uid=0 auid=0 ses=22056 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446966784.387:685696): pid=14937 uid=0 auid=0 ses=22056 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446966784.391:685697): pid=14937 uid=0 auid=0 ses=22056 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446966784.391:685698): pid=14937 uid=0 auid=0 ses=22056 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446966784.392:685699): pid=14937 uid=0 auid=0 ses=22056 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14937 suid=0 rport=52805 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446966784.392:685700): pid=14937 uid=0 auid=0 ses=22056 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=14937 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446966784.392:685701): pid=14937 uid=0 auid=0 ses=22056 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=14937 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446966784.392:685702): pid=14937 uid=0 auid=0 ses=22056 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=14937 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446966784.421:685703): pid=15011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=15011 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446966784.421:685704): pid=15011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=15011 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446966784.421:685705): pid=15011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=15011 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446966784.465:685706): pid=15010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=15011 suid=74 rport=52809 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446966784.465:685707): pid=15010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=15011 suid=74 rport=52809 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446966784.591:685708): pid=15010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52809 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446966784.591:685709): pid=15010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=52809 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446966784.596:685710): pid=15010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446966784.599:685711): pid=15010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15011 suid=74 rport=52809 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446966784.604:685712): pid=15010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446966784.604:685713): pid=15010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446966784.604:685714): pid=15010 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22057 res=1
type=USER_ROLE_CHANGE msg=audit(1446966784.670:685715): pid=15010 uid=0 auid=0 ses=22057 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446966784.690:685716): pid=15010 uid=0 auid=0 ses=22057 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446966784.693:685717): pid=15010 uid=0 auid=0 ses=22057 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446966784.693:685718): pid=15010 uid=0 auid=0 ses=22057 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446966784.694:685719): pid=15017 uid=0 auid=0 ses=22057 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=15017 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446966784.694:685720): pid=15017 uid=0 auid=0 ses=22057 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=15017 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446966784.694:685721): pid=15017 uid=0 auid=0 ses=22057 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=15017 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446966784.695:685722): pid=15017 uid=0 auid=0 ses=22057 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446966784.713:685723): pid=15010 uid=0 auid=0 ses=22057 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446966784.713:685724): pid=15010 uid=0 auid=0 ses=22057 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446966784.717:685725): pid=15010 uid=0 auid=0 ses=22057 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446966784.717:685726): pid=15010 uid=0 auid=0 ses=22057 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446966784.718:685727): pid=15010 uid=0 auid=0 ses=22057 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15010 suid=0 rport=52809 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446966784.718:685728): pid=15010 uid=0 auid=0 ses=22057 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=15010 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446966784.718:685729): pid=15010 uid=0 auid=0 ses=22057 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=15010 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446966784.718:685730): pid=15010 uid=0 auid=0 ses=22057 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=15010 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_DISP msg=audit(1446966891.529:685731): pid=14162 uid=0 auid=0 ses=22054 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446966891.536:685732): pid=14162 uid=0 auid=0 ses=22054 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446967201.555:685733): pid=16346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446967201.555:685734): pid=16347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446967201.555:685735): pid=16346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446967201.555:685736): pid=16347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446967201.556:685737): pid=16346 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22058 res=1
type=LOGIN msg=audit(1446967201.556:685738): pid=16347 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22059 res=1
type=USER_START msg=audit(1446967201.572:685739): pid=16347 uid=0 auid=0 ses=22059 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1446967201.572:685740): pid=16346 uid=0 auid=0 ses=22058 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446967201.572:685741): pid=16346 uid=0 auid=0 ses=22058 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446967201.572:685742): pid=16347 uid=0 auid=0 ses=22059 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446967201.584:685743): pid=16347 uid=0 auid=0 ses=22059 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446967201.585:685744): pid=16347 uid=0 auid=0 ses=22059 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446967201.586:685745): pid=16346 uid=0 auid=0 ses=22058 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446967201.589:685746): pid=16346 uid=0 auid=0 ses=22058 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446967801.607:685747): pid=18193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446967801.607:685748): pid=18194 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446967801.607:685749): pid=18193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446967801.607:685750): pid=18194 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446967801.607:685751): pid=18194 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22060 res=1
type=LOGIN msg=audit(1446967801.607:685752): pid=18193 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22061 res=1
type=USER_START msg=audit(1446967801.625:685753): pid=18193 uid=0 auid=0 ses=22061 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446967801.625:685754): pid=18193 uid=0 auid=0 ses=22061 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1446967801.627:685755): pid=18194 uid=0 auid=0 ses=22060 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446967801.627:685756): pid=18194 uid=0 auid=0 ses=22060 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446967801.634:685757): pid=18194 uid=0 auid=0 ses=22060 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446967801.636:685758): pid=18194 uid=0 auid=0 ses=22060 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446967801.639:685759): pid=18193 uid=0 auid=0 ses=22061 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446967801.640:685760): pid=18193 uid=0 auid=0 ses=22061 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1446967982.690:685761): pid=18759 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=18759 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446967982.690:685762): pid=18759 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=18759 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446967982.690:685763): pid=18759 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=18759 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446967982.736:685764): pid=18758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=18759 suid=74 rport=54785 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446967982.736:685765): pid=18758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=18759 suid=74 rport=54785 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446967982.865:685766): pid=18758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=54785 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446967982.865:685767): pid=18758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=54785 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446967982.870:685768): pid=18758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446967982.872:685769): pid=18758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18759 suid=74 rport=54785 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446967982.873:685770): pid=18758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446967982.874:685771): pid=18758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446967982.874:685772): pid=18758 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22062 res=1
type=USER_ROLE_CHANGE msg=audit(1446967982.943:685773): pid=18758 uid=0 auid=0 ses=22062 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446967982.963:685774): pid=18758 uid=0 auid=0 ses=22062 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446967982.967:685775): pid=18758 uid=0 auid=0 ses=22062 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446967982.967:685776): pid=18758 uid=0 auid=0 ses=22062 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446967982.968:685777): pid=18761 uid=0 auid=0 ses=22062 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=18761 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446967982.969:685778): pid=18761 uid=0 auid=0 ses=22062 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=18761 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446967982.969:685779): pid=18761 uid=0 auid=0 ses=22062 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=18761 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446967982.969:685780): pid=18761 uid=0 auid=0 ses=22062 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446967982.991:685781): pid=18758 uid=0 auid=0 ses=22062 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446967982.991:685782): pid=18758 uid=0 auid=0 ses=22062 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446967982.995:685783): pid=18758 uid=0 auid=0 ses=22062 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446967982.995:685784): pid=18758 uid=0 auid=0 ses=22062 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446967982.996:685785): pid=18758 uid=0 auid=0 ses=22062 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18758 suid=0 rport=54785 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446967982.996:685786): pid=18758 uid=0 auid=0 ses=22062 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=18758 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446967982.996:685787): pid=18758 uid=0 auid=0 ses=22062 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=18758 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446967982.996:685788): pid=18758 uid=0 auid=0 ses=22062 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=18758 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446967983.018:685789): pid=18769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=18769 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446967983.018:685790): pid=18769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=18769 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446967983.018:685791): pid=18769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=18769 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446967983.063:685792): pid=18768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=18769 suid=74 rport=54786 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446967983.063:685793): pid=18768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=18769 suid=74 rport=54786 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446967983.191:685794): pid=18768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=54786 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446967983.191:685795): pid=18768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=54786 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446967983.199:685796): pid=18768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446967983.201:685797): pid=18768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18769 suid=74 rport=54786 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446967983.202:685798): pid=18768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446967983.203:685799): pid=18768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446967983.203:685800): pid=18768 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22063 res=1
type=USER_ROLE_CHANGE msg=audit(1446967983.272:685801): pid=18768 uid=0 auid=0 ses=22063 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446967983.295:685802): pid=18768 uid=0 auid=0 ses=22063 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446967983.298:685803): pid=18768 uid=0 auid=0 ses=22063 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446967983.298:685804): pid=18768 uid=0 auid=0 ses=22063 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446967983.299:685805): pid=18771 uid=0 auid=0 ses=22063 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=18771 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446967983.299:685806): pid=18771 uid=0 auid=0 ses=22063 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=18771 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446967983.299:685807): pid=18771 uid=0 auid=0 ses=22063 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=18771 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446967983.300:685808): pid=18771 uid=0 auid=0 ses=22063 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446967984.564:685809): pid=18768 uid=0 auid=0 ses=22063 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446967984.564:685810): pid=18768 uid=0 auid=0 ses=22063 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446967984.570:685811): pid=18768 uid=0 auid=0 ses=22063 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446967984.570:685812): pid=18768 uid=0 auid=0 ses=22063 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446967984.571:685813): pid=18768 uid=0 auid=0 ses=22063 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18768 suid=0 rport=54786 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446967984.571:685814): pid=18768 uid=0 auid=0 ses=22063 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=18768 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446967984.571:685815): pid=18768 uid=0 auid=0 ses=22063 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=18768 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446967984.571:685816): pid=18768 uid=0 auid=0 ses=22063 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=18768 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446967984.605:685817): pid=18824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=18824 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446967984.605:685818): pid=18824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=18824 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446967984.605:685819): pid=18824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=18824 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446967984.649:685820): pid=18823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=18824 suid=74 rport=54787 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446967984.649:685821): pid=18823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=18824 suid=74 rport=54787 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446967984.776:685822): pid=18823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=54787 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446967984.776:685823): pid=18823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=54787 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446967984.785:685824): pid=18823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446967984.786:685825): pid=18823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18824 suid=74 rport=54787 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446967984.788:685826): pid=18823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446967984.788:685827): pid=18823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446967984.788:685828): pid=18823 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22064 res=1
type=USER_ROLE_CHANGE msg=audit(1446967984.853:685829): pid=18823 uid=0 auid=0 ses=22064 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446967984.880:685830): pid=18823 uid=0 auid=0 ses=22064 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446967984.883:685831): pid=18823 uid=0 auid=0 ses=22064 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446967984.883:685832): pid=18823 uid=0 auid=0 ses=22064 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446967984.885:685833): pid=18826 uid=0 auid=0 ses=22064 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=18826 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446967984.885:685834): pid=18826 uid=0 auid=0 ses=22064 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=18826 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446967984.885:685835): pid=18826 uid=0 auid=0 ses=22064 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=18826 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446967984.886:685836): pid=18826 uid=0 auid=0 ses=22064 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446967984.903:685837): pid=18823 uid=0 auid=0 ses=22064 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446967984.903:685838): pid=18823 uid=0 auid=0 ses=22064 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446967984.907:685839): pid=18823 uid=0 auid=0 ses=22064 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446967984.907:685840): pid=18823 uid=0 auid=0 ses=22064 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446967984.908:685841): pid=18823 uid=0 auid=0 ses=22064 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18823 suid=0 rport=54787 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446967984.908:685842): pid=18823 uid=0 auid=0 ses=22064 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=18823 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446967984.908:685843): pid=18823 uid=0 auid=0 ses=22064 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=18823 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446967984.908:685844): pid=18823 uid=0 auid=0 ses=22064 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=18823 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446968401.663:685845): pid=20109 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446968401.663:685846): pid=20110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446968401.663:685847): pid=20109 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446968401.663:685848): pid=20110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446968401.664:685849): pid=20109 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22065 res=1
type=LOGIN msg=audit(1446968401.664:685850): pid=20110 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22066 res=1
type=USER_START msg=audit(1446968401.681:685851): pid=20109 uid=0 auid=0 ses=22065 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446968401.682:685852): pid=20109 uid=0 auid=0 ses=22065 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1446968401.683:685853): pid=20110 uid=0 auid=0 ses=22066 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446968401.683:685854): pid=20110 uid=0 auid=0 ses=22066 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446968401.693:685855): pid=20110 uid=0 auid=0 ses=22066 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446968401.695:685856): pid=20110 uid=0 auid=0 ses=22066 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446968401.698:685857): pid=20109 uid=0 auid=0 ses=22065 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446968426.725:685858): pid=20109 uid=0 auid=0 ses=22065 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=SYSCALL msg=audit(1446968566.759:685859): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1446969001.739:685861): pid=21955 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446969001.739:685860): pid=21956 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446969001.739:685862): pid=21955 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446969001.739:685863): pid=21956 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446969001.739:685864): pid=21956 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22067 res=1
type=LOGIN msg=audit(1446969001.739:685865): pid=21955 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22068 res=1
type=USER_START msg=audit(1446969001.755:685866): pid=21956 uid=0 auid=0 ses=22067 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1446969001.755:685867): pid=21955 uid=0 auid=0 ses=22068 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446969001.756:685868): pid=21956 uid=0 auid=0 ses=22067 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446969001.756:685869): pid=21955 uid=0 auid=0 ses=22068 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446969001.764:685870): pid=21956 uid=0 auid=0 ses=22067 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446969001.766:685871): pid=21956 uid=0 auid=0 ses=22067 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446969001.769:685872): pid=21955 uid=0 auid=0 ses=22068 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446969026.796:685873): pid=21955 uid=0 auid=0 ses=22068 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=CRYPTO_KEY_USER msg=audit(1446969182.558:685874): pid=22521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=22521 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446969182.558:685875): pid=22521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=22521 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446969182.558:685876): pid=22521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=22521 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446969182.601:685877): pid=22520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=22521 suid=74 rport=56761 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446969182.602:685878): pid=22520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=22521 suid=74 rport=56761 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446969182.729:685879): pid=22520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=56761 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446969182.729:685880): pid=22520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=56761 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446969182.739:685881): pid=22520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446969182.740:685882): pid=22520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22521 suid=74 rport=56761 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446969182.741:685883): pid=22520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446969182.741:685884): pid=22520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446969182.741:685885): pid=22520 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22069 res=1
type=USER_ROLE_CHANGE msg=audit(1446969182.814:685886): pid=22520 uid=0 auid=0 ses=22069 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446969182.835:685887): pid=22520 uid=0 auid=0 ses=22069 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446969182.839:685888): pid=22520 uid=0 auid=0 ses=22069 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446969182.839:685889): pid=22520 uid=0 auid=0 ses=22069 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446969182.841:685890): pid=22523 uid=0 auid=0 ses=22069 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=22523 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446969182.841:685891): pid=22523 uid=0 auid=0 ses=22069 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=22523 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446969182.841:685892): pid=22523 uid=0 auid=0 ses=22069 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=22523 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446969182.842:685893): pid=22523 uid=0 auid=0 ses=22069 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446969182.861:685894): pid=22520 uid=0 auid=0 ses=22069 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446969182.861:685895): pid=22520 uid=0 auid=0 ses=22069 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446969182.864:685896): pid=22520 uid=0 auid=0 ses=22069 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446969182.864:685897): pid=22520 uid=0 auid=0 ses=22069 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446969182.864:685898): pid=22520 uid=0 auid=0 ses=22069 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22520 suid=0 rport=56761 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446969182.864:685899): pid=22520 uid=0 auid=0 ses=22069 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=22520 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446969182.864:685900): pid=22520 uid=0 auid=0 ses=22069 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=22520 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446969182.864:685901): pid=22520 uid=0 auid=0 ses=22069 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=22520 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446969182.887:685902): pid=22531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=22531 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446969182.887:685903): pid=22531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=22531 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446969182.888:685904): pid=22531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=22531 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446969182.931:685905): pid=22530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=22531 suid=74 rport=56762 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446969182.931:685906): pid=22530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=22531 suid=74 rport=56762 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446969183.062:685907): pid=22530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=56762 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446969183.062:685908): pid=22530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=56762 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446969183.070:685909): pid=22530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446969183.071:685910): pid=22530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22531 suid=74 rport=56762 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446969183.072:685911): pid=22530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446969183.073:685912): pid=22530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446969183.073:685913): pid=22530 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22070 res=1
type=USER_ROLE_CHANGE msg=audit(1446969183.136:685914): pid=22530 uid=0 auid=0 ses=22070 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446969183.161:685915): pid=22530 uid=0 auid=0 ses=22070 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446969183.163:685916): pid=22530 uid=0 auid=0 ses=22070 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446969183.163:685917): pid=22530 uid=0 auid=0 ses=22070 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446969183.165:685918): pid=22533 uid=0 auid=0 ses=22070 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=22533 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446969183.165:685919): pid=22533 uid=0 auid=0 ses=22070 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=22533 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446969183.165:685920): pid=22533 uid=0 auid=0 ses=22070 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=22533 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446969183.166:685921): pid=22533 uid=0 auid=0 ses=22070 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446969184.447:685922): pid=22530 uid=0 auid=0 ses=22070 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446969184.447:685923): pid=22530 uid=0 auid=0 ses=22070 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446969184.453:685924): pid=22530 uid=0 auid=0 ses=22070 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446969184.453:685925): pid=22530 uid=0 auid=0 ses=22070 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446969184.454:685926): pid=22530 uid=0 auid=0 ses=22070 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22530 suid=0 rport=56762 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446969184.454:685927): pid=22530 uid=0 auid=0 ses=22070 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=22530 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446969184.454:685928): pid=22530 uid=0 auid=0 ses=22070 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=22530 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446969184.454:685929): pid=22530 uid=0 auid=0 ses=22070 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=22530 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446969184.488:685930): pid=22586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=22586 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446969184.488:685931): pid=22586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=22586 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446969184.488:685932): pid=22586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=22586 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446969184.531:685933): pid=22585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=22586 suid=74 rport=56767 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446969184.532:685934): pid=22585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=22586 suid=74 rport=56767 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446969184.660:685935): pid=22585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=56767 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446969184.660:685936): pid=22585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=56767 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446969184.667:685937): pid=22585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446969184.668:685938): pid=22585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22586 suid=74 rport=56767 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446969184.669:685939): pid=22585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446969184.670:685940): pid=22585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446969184.670:685941): pid=22585 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22071 res=1
type=USER_ROLE_CHANGE msg=audit(1446969184.738:685942): pid=22585 uid=0 auid=0 ses=22071 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446969184.761:685943): pid=22585 uid=0 auid=0 ses=22071 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446969184.765:685944): pid=22585 uid=0 auid=0 ses=22071 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446969184.765:685945): pid=22585 uid=0 auid=0 ses=22071 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446969184.766:685946): pid=22588 uid=0 auid=0 ses=22071 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=22588 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446969184.766:685947): pid=22588 uid=0 auid=0 ses=22071 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=22588 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446969184.766:685948): pid=22588 uid=0 auid=0 ses=22071 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=22588 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446969184.767:685949): pid=22588 uid=0 auid=0 ses=22071 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446969184.782:685950): pid=22585 uid=0 auid=0 ses=22071 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446969184.782:685951): pid=22585 uid=0 auid=0 ses=22071 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446969184.787:685952): pid=22585 uid=0 auid=0 ses=22071 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446969184.787:685953): pid=22585 uid=0 auid=0 ses=22071 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446969184.789:685954): pid=22585 uid=0 auid=0 ses=22071 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22585 suid=0 rport=56767 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446969184.789:685955): pid=22585 uid=0 auid=0 ses=22071 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=22585 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446969184.789:685956): pid=22585 uid=0 auid=0 ses=22071 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=22585 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446969184.789:685957): pid=22585 uid=0 auid=0 ses=22071 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=22585 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446969601.820:685959): pid=23874 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446969601.820:685958): pid=23873 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446969601.820:685960): pid=23873 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446969601.820:685961): pid=23874 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446969601.821:685962): pid=23874 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22072 res=1
type=LOGIN msg=audit(1446969601.821:685963): pid=23873 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22073 res=1
type=USER_START msg=audit(1446969601.837:685964): pid=23873 uid=0 auid=0 ses=22073 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1446969601.838:685965): pid=23874 uid=0 auid=0 ses=22072 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446969601.838:685966): pid=23873 uid=0 auid=0 ses=22073 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446969601.838:685967): pid=23874 uid=0 auid=0 ses=22072 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446969601.845:685968): pid=23874 uid=0 auid=0 ses=22072 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446969601.846:685969): pid=23874 uid=0 auid=0 ses=22072 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446969601.854:685970): pid=23873 uid=0 auid=0 ses=22073 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446969601.855:685971): pid=23873 uid=0 auid=0 ses=22073 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1446969605.740:685972): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1446969661.870:685973): pid=24109 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446969661.871:685974): pid=24109 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446969661.873:685975): pid=24109 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22074 res=1
type=USER_START msg=audit(1446969661.883:685976): pid=24109 uid=0 auid=0 ses=22074 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446969661.884:685977): pid=24109 uid=0 auid=0 ses=22074 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446969661.907:685978): pid=24109 uid=0 auid=0 ses=22074 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446969661.908:685979): pid=24109 uid=0 auid=0 ses=22074 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446970201.922:685980): pid=25778 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446970201.922:685981): pid=25779 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446970201.922:685983): pid=25779 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446970201.922:685982): pid=25778 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446970201.922:685984): pid=25779 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22075 res=1
type=LOGIN msg=audit(1446970201.922:685985): pid=25778 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22076 res=1
type=USER_START msg=audit(1446970201.938:685986): pid=25778 uid=0 auid=0 ses=22076 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446970201.939:685987): pid=25778 uid=0 auid=0 ses=22076 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1446970201.940:685988): pid=25779 uid=0 auid=0 ses=22075 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446970201.940:685989): pid=25779 uid=0 auid=0 ses=22075 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446970201.947:685990): pid=25779 uid=0 auid=0 ses=22075 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446970201.952:685991): pid=25778 uid=0 auid=0 ses=22076 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446970201.953:685992): pid=25779 uid=0 auid=0 ses=22075 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446970201.958:685993): pid=25778 uid=0 auid=0 ses=22076 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1446970383.096:685994): pid=26348 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=26348 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446970383.096:685995): pid=26348 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=26348 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446970383.097:685996): pid=26348 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=26348 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446970383.140:685997): pid=26347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=26348 suid=74 rport=58743 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446970383.140:685998): pid=26347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=26348 suid=74 rport=58743 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446970383.269:685999): pid=26347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=58743 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446970383.270:686000): pid=26347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=58743 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446970383.278:686001): pid=26347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446970383.279:686002): pid=26347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26348 suid=74 rport=58743 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446970383.284:686003): pid=26347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446970383.284:686004): pid=26347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446970383.284:686005): pid=26347 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22077 res=1
type=USER_ROLE_CHANGE msg=audit(1446970383.354:686006): pid=26347 uid=0 auid=0 ses=22077 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446970383.377:686007): pid=26347 uid=0 auid=0 ses=22077 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446970383.380:686008): pid=26347 uid=0 auid=0 ses=22077 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446970383.380:686009): pid=26347 uid=0 auid=0 ses=22077 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446970383.381:686010): pid=26350 uid=0 auid=0 ses=22077 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=26350 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446970383.382:686011): pid=26350 uid=0 auid=0 ses=22077 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=26350 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446970383.382:686012): pid=26350 uid=0 auid=0 ses=22077 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=26350 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446970383.382:686013): pid=26350 uid=0 auid=0 ses=22077 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446970383.401:686014): pid=26347 uid=0 auid=0 ses=22077 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446970383.401:686015): pid=26347 uid=0 auid=0 ses=22077 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446970383.406:686016): pid=26347 uid=0 auid=0 ses=22077 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446970383.406:686017): pid=26347 uid=0 auid=0 ses=22077 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446970383.407:686018): pid=26347 uid=0 auid=0 ses=22077 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26347 suid=0 rport=58743 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446970383.407:686019): pid=26347 uid=0 auid=0 ses=22077 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=26347 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446970383.407:686020): pid=26347 uid=0 auid=0 ses=22077 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=26347 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446970383.407:686021): pid=26347 uid=0 auid=0 ses=22077 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=26347 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446970383.427:686022): pid=26358 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=26358 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446970383.427:686023): pid=26358 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=26358 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446970383.427:686024): pid=26358 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=26358 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446970383.473:686025): pid=26357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=26358 suid=74 rport=58744 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446970383.473:686026): pid=26357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=26358 suid=74 rport=58744 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446970383.602:686027): pid=26357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=58744 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446970383.602:686028): pid=26357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=58744 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446970383.609:686029): pid=26357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446970383.610:686030): pid=26357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26358 suid=74 rport=58744 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446970383.611:686031): pid=26357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446970383.612:686032): pid=26357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446970383.612:686033): pid=26357 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22078 res=1
type=USER_ROLE_CHANGE msg=audit(1446970383.679:686034): pid=26357 uid=0 auid=0 ses=22078 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446970383.700:686035): pid=26357 uid=0 auid=0 ses=22078 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446970383.703:686036): pid=26357 uid=0 auid=0 ses=22078 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446970383.703:686037): pid=26357 uid=0 auid=0 ses=22078 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446970383.704:686038): pid=26360 uid=0 auid=0 ses=22078 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=26360 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446970383.704:686039): pid=26360 uid=0 auid=0 ses=22078 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=26360 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446970383.704:686040): pid=26360 uid=0 auid=0 ses=22078 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=26360 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446970383.705:686041): pid=26360 uid=0 auid=0 ses=22078 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446970384.977:686042): pid=26357 uid=0 auid=0 ses=22078 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446970384.977:686043): pid=26357 uid=0 auid=0 ses=22078 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446970384.983:686044): pid=26357 uid=0 auid=0 ses=22078 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446970384.983:686045): pid=26357 uid=0 auid=0 ses=22078 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446970384.984:686046): pid=26357 uid=0 auid=0 ses=22078 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26357 suid=0 rport=58744 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446970384.985:686047): pid=26357 uid=0 auid=0 ses=22078 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=26357 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446970384.985:686048): pid=26357 uid=0 auid=0 ses=22078 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=26357 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446970384.985:686049): pid=26357 uid=0 auid=0 ses=22078 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=26357 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446970385.018:686050): pid=26413 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=26413 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446970385.018:686051): pid=26413 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=26413 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446970385.018:686052): pid=26413 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=26413 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446970385.064:686053): pid=26412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=26413 suid=74 rport=58749 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446970385.064:686054): pid=26412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=26413 suid=74 rport=58749 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446970385.194:686055): pid=26412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=58749 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446970385.194:686056): pid=26412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=58749 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446970385.201:686057): pid=26412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446970385.202:686058): pid=26412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26413 suid=74 rport=58749 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446970385.203:686059): pid=26412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446970385.204:686060): pid=26412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446970385.204:686061): pid=26412 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22079 res=1
type=USER_ROLE_CHANGE msg=audit(1446970385.269:686062): pid=26412 uid=0 auid=0 ses=22079 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446970385.289:686063): pid=26412 uid=0 auid=0 ses=22079 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446970385.291:686064): pid=26412 uid=0 auid=0 ses=22079 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446970385.291:686065): pid=26412 uid=0 auid=0 ses=22079 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446970385.293:686066): pid=26415 uid=0 auid=0 ses=22079 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=26415 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446970385.293:686067): pid=26415 uid=0 auid=0 ses=22079 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=26415 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446970385.293:686068): pid=26415 uid=0 auid=0 ses=22079 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=26415 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446970385.294:686069): pid=26415 uid=0 auid=0 ses=22079 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446970385.311:686070): pid=26412 uid=0 auid=0 ses=22079 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446970385.311:686071): pid=26412 uid=0 auid=0 ses=22079 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446970385.315:686072): pid=26412 uid=0 auid=0 ses=22079 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446970385.315:686073): pid=26412 uid=0 auid=0 ses=22079 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446970385.315:686074): pid=26412 uid=0 auid=0 ses=22079 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26412 suid=0 rport=58749 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446970385.315:686075): pid=26412 uid=0 auid=0 ses=22079 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=26412 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446970385.315:686076): pid=26412 uid=0 auid=0 ses=22079 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=26412 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446970385.315:686077): pid=26412 uid=0 auid=0 ses=22079 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=26412 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=SYSCALL msg=audit(1446970678.759:686078): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1446970801.984:686079): pid=27701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446970801.984:686080): pid=27700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446970801.984:686081): pid=27701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446970801.984:686082): pid=27700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446970801.985:686083): pid=27701 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22080 res=1
type=LOGIN msg=audit(1446970801.985:686084): pid=27700 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22081 res=1
type=USER_START msg=audit(1446970802.005:686085): pid=27701 uid=0 auid=0 ses=22080 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1446970802.005:686086): pid=27700 uid=0 auid=0 ses=22081 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446970802.005:686087): pid=27701 uid=0 auid=0 ses=22080 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446970802.005:686088): pid=27700 uid=0 auid=0 ses=22081 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446970802.015:686089): pid=27701 uid=0 auid=0 ses=22080 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446970802.021:686090): pid=27701 uid=0 auid=0 ses=22080 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446970802.021:686091): pid=27700 uid=0 auid=0 ses=22081 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446970802.025:686092): pid=27700 uid=0 auid=0 ses=22081 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446971401.042:686093): pid=29543 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446971401.042:686094): pid=29542 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446971401.042:686095): pid=29543 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446971401.042:686096): pid=29542 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446971401.043:686097): pid=29543 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22082 res=1
type=LOGIN msg=audit(1446971401.043:686098): pid=29542 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22083 res=1
type=USER_START msg=audit(1446971401.057:686099): pid=29543 uid=0 auid=0 ses=22082 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1446971401.057:686100): pid=29542 uid=0 auid=0 ses=22083 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446971401.058:686101): pid=29542 uid=0 auid=0 ses=22083 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446971401.058:686102): pid=29543 uid=0 auid=0 ses=22082 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446971401.064:686103): pid=29543 uid=0 auid=0 ses=22082 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446971401.066:686104): pid=29543 uid=0 auid=0 ses=22082 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446971401.069:686105): pid=29542 uid=0 auid=0 ses=22083 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446971426.096:686106): pid=29542 uid=0 auid=0 ses=22083 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=CRYPTO_KEY_USER msg=audit(1446971583.026:686107): pid=30109 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=30109 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446971583.027:686108): pid=30109 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=30109 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446971583.027:686109): pid=30109 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=30109 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446971583.070:686110): pid=30108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=30109 suid=74 rport=60723 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446971583.071:686111): pid=30108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=30109 suid=74 rport=60723 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446971583.197:686112): pid=30108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60723 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446971583.197:686113): pid=30108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=60723 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446971583.206:686114): pid=30108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446971583.207:686115): pid=30108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=30109 suid=74 rport=60723 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446971583.209:686116): pid=30108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446971583.209:686117): pid=30108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446971583.209:686118): pid=30108 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22084 res=1
type=USER_ROLE_CHANGE msg=audit(1446971583.282:686119): pid=30108 uid=0 auid=0 ses=22084 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446971583.306:686120): pid=30108 uid=0 auid=0 ses=22084 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446971583.308:686121): pid=30108 uid=0 auid=0 ses=22084 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446971583.308:686122): pid=30108 uid=0 auid=0 ses=22084 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446971583.310:686123): pid=30111 uid=0 auid=0 ses=22084 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=30111 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446971583.310:686124): pid=30111 uid=0 auid=0 ses=22084 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=30111 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446971583.310:686125): pid=30111 uid=0 auid=0 ses=22084 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=30111 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446971583.310:686126): pid=30111 uid=0 auid=0 ses=22084 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446971583.330:686127): pid=30108 uid=0 auid=0 ses=22084 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446971583.330:686128): pid=30108 uid=0 auid=0 ses=22084 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446971583.333:686129): pid=30108 uid=0 auid=0 ses=22084 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446971583.333:686130): pid=30108 uid=0 auid=0 ses=22084 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446971583.334:686131): pid=30108 uid=0 auid=0 ses=22084 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=30108 suid=0 rport=60723 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446971583.334:686132): pid=30108 uid=0 auid=0 ses=22084 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=30108 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446971583.334:686133): pid=30108 uid=0 auid=0 ses=22084 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=30108 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446971583.334:686134): pid=30108 uid=0 auid=0 ses=22084 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=30108 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446971583.357:686135): pid=30119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=30119 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446971583.358:686136): pid=30119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=30119 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446971583.358:686137): pid=30119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=30119 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446971583.402:686138): pid=30118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=30119 suid=74 rport=60725 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446971583.403:686139): pid=30118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=30119 suid=74 rport=60725 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446971583.532:686140): pid=30118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60725 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446971583.532:686141): pid=30118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=60725 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446971583.541:686142): pid=30118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446971583.542:686143): pid=30118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=30119 suid=74 rport=60725 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446971583.544:686144): pid=30118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446971583.544:686145): pid=30118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446971583.544:686146): pid=30118 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22085 res=1
type=USER_ROLE_CHANGE msg=audit(1446971583.619:686147): pid=30118 uid=0 auid=0 ses=22085 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446971583.646:686148): pid=30118 uid=0 auid=0 ses=22085 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446971583.649:686149): pid=30118 uid=0 auid=0 ses=22085 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446971583.649:686150): pid=30118 uid=0 auid=0 ses=22085 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446971583.650:686151): pid=30121 uid=0 auid=0 ses=22085 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=30121 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446971583.650:686152): pid=30121 uid=0 auid=0 ses=22085 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=30121 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446971583.650:686153): pid=30121 uid=0 auid=0 ses=22085 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=30121 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446971583.651:686154): pid=30121 uid=0 auid=0 ses=22085 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446971584.933:686155): pid=30118 uid=0 auid=0 ses=22085 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446971584.933:686156): pid=30118 uid=0 auid=0 ses=22085 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446971584.937:686157): pid=30118 uid=0 auid=0 ses=22085 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446971584.937:686158): pid=30118 uid=0 auid=0 ses=22085 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446971584.938:686159): pid=30118 uid=0 auid=0 ses=22085 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=30118 suid=0 rport=60725 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446971584.938:686160): pid=30118 uid=0 auid=0 ses=22085 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=30118 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446971584.938:686161): pid=30118 uid=0 auid=0 ses=22085 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=30118 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446971584.938:686162): pid=30118 uid=0 auid=0 ses=22085 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=30118 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446971584.976:686163): pid=30174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=30174 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446971584.977:686164): pid=30174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=30174 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446971584.977:686165): pid=30174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=30174 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446971585.021:686166): pid=30173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=30174 suid=74 rport=60730 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446971585.021:686167): pid=30173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=30174 suid=74 rport=60730 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446971585.149:686168): pid=30173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60730 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446971585.149:686169): pid=30173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=60730 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446971585.158:686170): pid=30173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446971585.159:686171): pid=30173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=30174 suid=74 rport=60730 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446971585.161:686172): pid=30173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446971585.162:686173): pid=30173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446971585.162:686174): pid=30173 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22086 res=1
type=USER_ROLE_CHANGE msg=audit(1446971585.234:686175): pid=30173 uid=0 auid=0 ses=22086 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446971585.253:686176): pid=30173 uid=0 auid=0 ses=22086 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446971585.256:686177): pid=30173 uid=0 auid=0 ses=22086 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446971585.256:686178): pid=30173 uid=0 auid=0 ses=22086 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446971585.257:686179): pid=30176 uid=0 auid=0 ses=22086 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=30176 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446971585.257:686180): pid=30176 uid=0 auid=0 ses=22086 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=30176 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446971585.257:686181): pid=30176 uid=0 auid=0 ses=22086 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=30176 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446971585.258:686182): pid=30176 uid=0 auid=0 ses=22086 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446971585.275:686183): pid=30173 uid=0 auid=0 ses=22086 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446971585.275:686184): pid=30173 uid=0 auid=0 ses=22086 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446971585.278:686185): pid=30173 uid=0 auid=0 ses=22086 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446971585.278:686186): pid=30173 uid=0 auid=0 ses=22086 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446971585.278:686187): pid=30173 uid=0 auid=0 ses=22086 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=30173 suid=0 rport=60730 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446971585.278:686188): pid=30173 uid=0 auid=0 ses=22086 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=30173 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446971585.278:686189): pid=30173 uid=0 auid=0 ses=22086 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=30173 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446971585.278:686190): pid=30173 uid=0 auid=0 ses=22086 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=30173 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=SYSCALL msg=audit(1446971722.757:686191): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1446972001.124:686192): pid=31460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446972001.124:686193): pid=31459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446972001.124:686194): pid=31460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446972001.124:686195): pid=31459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446972001.125:686196): pid=31460 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22087 res=1
type=LOGIN msg=audit(1446972001.125:686197): pid=31459 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22088 res=1
type=USER_START msg=audit(1446972001.143:686198): pid=31460 uid=0 auid=0 ses=22087 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1446972001.143:686199): pid=31459 uid=0 auid=0 ses=22088 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446972001.144:686200): pid=31459 uid=0 auid=0 ses=22088 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446972001.144:686201): pid=31460 uid=0 auid=0 ses=22087 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446972001.153:686202): pid=31460 uid=0 auid=0 ses=22087 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446972001.156:686203): pid=31460 uid=0 auid=0 ses=22087 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446972001.160:686204): pid=31459 uid=0 auid=0 ses=22088 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446972001.163:686205): pid=31459 uid=0 auid=0 ses=22088 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446972601.178:686206): pid=953 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446972601.178:686207): pid=952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446972601.178:686208): pid=952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446972601.178:686209): pid=953 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446972601.178:686210): pid=953 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22089 res=1
type=LOGIN msg=audit(1446972601.178:686211): pid=952 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22090 res=1
type=USER_START msg=audit(1446972601.195:686212): pid=952 uid=0 auid=0 ses=22090 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446972601.195:686213): pid=952 uid=0 auid=0 ses=22090 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1446972601.196:686214): pid=953 uid=0 auid=0 ses=22089 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446972601.196:686215): pid=953 uid=0 auid=0 ses=22089 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446972601.204:686216): pid=953 uid=0 auid=0 ses=22089 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446972601.207:686217): pid=953 uid=0 auid=0 ses=22089 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446972601.211:686218): pid=952 uid=0 auid=0 ses=22090 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446972601.215:686219): pid=952 uid=0 auid=0 ses=22090 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1446972783.040:686220): pid=1521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=1521 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446972783.040:686221): pid=1521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=1521 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446972783.040:686222): pid=1521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=1521 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446972783.085:686223): pid=1520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=1521 suid=74 rport=62704 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446972783.086:686224): pid=1520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=1521 suid=74 rport=62704 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446972783.210:686225): pid=1520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=62704 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446972783.211:686226): pid=1520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=62704 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446972783.215:686227): pid=1520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446972783.216:686228): pid=1520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1521 suid=74 rport=62704 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446972783.217:686229): pid=1520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446972783.217:686230): pid=1520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446972783.217:686231): pid=1520 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22091 res=1
type=USER_ROLE_CHANGE msg=audit(1446972783.285:686232): pid=1520 uid=0 auid=0 ses=22091 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446972783.305:686233): pid=1520 uid=0 auid=0 ses=22091 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446972783.308:686234): pid=1520 uid=0 auid=0 ses=22091 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446972783.308:686235): pid=1520 uid=0 auid=0 ses=22091 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446972783.310:686236): pid=1527 uid=0 auid=0 ses=22091 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=1527 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446972783.310:686237): pid=1527 uid=0 auid=0 ses=22091 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=1527 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446972783.310:686238): pid=1527 uid=0 auid=0 ses=22091 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=1527 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446972783.311:686239): pid=1527 uid=0 auid=0 ses=22091 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446972783.328:686240): pid=1520 uid=0 auid=0 ses=22091 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446972783.329:686241): pid=1520 uid=0 auid=0 ses=22091 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446972783.332:686242): pid=1520 uid=0 auid=0 ses=22091 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446972783.332:686243): pid=1520 uid=0 auid=0 ses=22091 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446972783.332:686244): pid=1520 uid=0 auid=0 ses=22091 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1520 suid=0 rport=62704 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446972783.332:686245): pid=1520 uid=0 auid=0 ses=22091 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=1520 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446972783.333:686246): pid=1520 uid=0 auid=0 ses=22091 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=1520 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446972783.333:686247): pid=1520 uid=0 auid=0 ses=22091 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=1520 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446972783.358:686248): pid=1535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=1535 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446972783.358:686249): pid=1535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=1535 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446972783.358:686250): pid=1535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=1535 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446972783.403:686251): pid=1534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=1535 suid=74 rport=62705 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446972783.403:686252): pid=1534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=1535 suid=74 rport=62705 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446972783.532:686253): pid=1534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=62705 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446972783.532:686254): pid=1534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=62705 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446972783.541:686255): pid=1534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446972783.542:686256): pid=1534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1535 suid=74 rport=62705 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446972783.545:686257): pid=1534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446972783.545:686258): pid=1534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446972783.545:686259): pid=1534 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22092 res=1
type=USER_ROLE_CHANGE msg=audit(1446972783.610:686260): pid=1534 uid=0 auid=0 ses=22092 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446972783.639:686261): pid=1534 uid=0 auid=0 ses=22092 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446972783.643:686262): pid=1534 uid=0 auid=0 ses=22092 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446972783.643:686263): pid=1534 uid=0 auid=0 ses=22092 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446972783.644:686264): pid=1537 uid=0 auid=0 ses=22092 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=1537 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446972783.644:686265): pid=1537 uid=0 auid=0 ses=22092 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=1537 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446972783.644:686266): pid=1537 uid=0 auid=0 ses=22092 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=1537 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446972783.645:686267): pid=1537 uid=0 auid=0 ses=22092 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446972784.923:686268): pid=1534 uid=0 auid=0 ses=22092 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446972784.923:686269): pid=1534 uid=0 auid=0 ses=22092 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446972784.928:686270): pid=1534 uid=0 auid=0 ses=22092 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446972784.928:686271): pid=1534 uid=0 auid=0 ses=22092 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446972784.929:686272): pid=1534 uid=0 auid=0 ses=22092 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1534 suid=0 rport=62705 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446972784.929:686273): pid=1534 uid=0 auid=0 ses=22092 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=1534 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446972784.929:686274): pid=1534 uid=0 auid=0 ses=22092 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=1534 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446972784.929:686275): pid=1534 uid=0 auid=0 ses=22092 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=1534 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446972784.963:686276): pid=1591 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=1591 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446972784.963:686277): pid=1591 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=1591 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446972784.963:686278): pid=1591 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=1591 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446972785.008:686279): pid=1590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=1591 suid=74 rport=62711 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446972785.008:686280): pid=1590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=1591 suid=74 rport=62711 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446972785.135:686281): pid=1590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=62711 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446972785.135:686282): pid=1590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=62711 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446972785.145:686283): pid=1590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446972785.146:686284): pid=1590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1591 suid=74 rport=62711 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446972785.147:686285): pid=1590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446972785.148:686286): pid=1590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446972785.148:686287): pid=1590 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22093 res=1
type=USER_ROLE_CHANGE msg=audit(1446972785.214:686288): pid=1590 uid=0 auid=0 ses=22093 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446972785.237:686289): pid=1590 uid=0 auid=0 ses=22093 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446972785.239:686290): pid=1590 uid=0 auid=0 ses=22093 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446972785.239:686291): pid=1590 uid=0 auid=0 ses=22093 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446972785.241:686292): pid=1593 uid=0 auid=0 ses=22093 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=1593 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446972785.241:686293): pid=1593 uid=0 auid=0 ses=22093 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=1593 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446972785.241:686294): pid=1593 uid=0 auid=0 ses=22093 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=1593 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446972785.242:686295): pid=1593 uid=0 auid=0 ses=22093 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446972785.262:686296): pid=1590 uid=0 auid=0 ses=22093 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446972785.262:686297): pid=1590 uid=0 auid=0 ses=22093 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446972785.269:686298): pid=1590 uid=0 auid=0 ses=22093 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446972785.269:686299): pid=1590 uid=0 auid=0 ses=22093 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446972785.270:686300): pid=1590 uid=0 auid=0 ses=22093 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1590 suid=0 rport=62711 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446972785.270:686301): pid=1590 uid=0 auid=0 ses=22093 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=1590 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446972785.270:686302): pid=1590 uid=0 auid=0 ses=22093 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=1590 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446972785.270:686303): pid=1590 uid=0 auid=0 ses=22093 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=1590 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446973201.239:686305): pid=2878 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446973201.239:686304): pid=2879 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446973201.239:686306): pid=2879 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446973201.239:686307): pid=2878 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446973201.240:686308): pid=2878 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22094 res=1
type=LOGIN msg=audit(1446973201.240:686309): pid=2879 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22095 res=1
type=USER_START msg=audit(1446973201.260:686310): pid=2879 uid=0 auid=0 ses=22095 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1446973201.260:686311): pid=2878 uid=0 auid=0 ses=22094 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446973201.260:686312): pid=2879 uid=0 auid=0 ses=22095 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446973201.260:686313): pid=2878 uid=0 auid=0 ses=22094 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446973201.272:686314): pid=2879 uid=0 auid=0 ses=22095 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446973201.274:686315): pid=2879 uid=0 auid=0 ses=22095 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446973201.277:686316): pid=2878 uid=0 auid=0 ses=22094 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446973201.280:686317): pid=2878 uid=0 auid=0 ses=22094 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446973261.291:686318): pid=3104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446973261.291:686319): pid=3104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446973261.291:686320): pid=3104 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22096 res=1
type=USER_START msg=audit(1446973261.307:686321): pid=3104 uid=0 auid=0 ses=22096 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446973261.307:686322): pid=3104 uid=0 auid=0 ses=22096 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446973261.332:686323): pid=3104 uid=0 auid=0 ses=22096 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446973261.333:686324): pid=3104 uid=0 auid=0 ses=22096 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446973801.343:686325): pid=4720 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446973801.343:686326): pid=4719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446973801.343:686327): pid=4720 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446973801.343:686328): pid=4719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446973801.344:686329): pid=4719 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22097 res=1
type=LOGIN msg=audit(1446973801.344:686330): pid=4720 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22098 res=1
type=USER_START msg=audit(1446973801.357:686331): pid=4720 uid=0 auid=0 ses=22098 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446973801.357:686332): pid=4720 uid=0 auid=0 ses=22098 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1446973801.358:686333): pid=4719 uid=0 auid=0 ses=22097 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446973801.358:686334): pid=4719 uid=0 auid=0 ses=22097 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446973801.363:686335): pid=4720 uid=0 auid=0 ses=22098 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446973801.364:686336): pid=4720 uid=0 auid=0 ses=22098 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446973801.370:686337): pid=4719 uid=0 auid=0 ses=22097 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446973801.372:686338): pid=4719 uid=0 auid=0 ses=22097 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1446973877.758:686339): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=CRYPTO_KEY_USER msg=audit(1446973982.870:686340): pid=5324 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=5324 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446973982.870:686341): pid=5324 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=5324 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446973982.870:686342): pid=5324 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=5324 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446973982.915:686343): pid=5323 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=5324 suid=74 rport=64684 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446973982.915:686344): pid=5323 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=5324 suid=74 rport=64684 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446973983.045:686345): pid=5323 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=64684 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446973983.045:686346): pid=5323 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=64684 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446973983.055:686347): pid=5323 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446973983.057:686348): pid=5323 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5324 suid=74 rport=64684 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446973983.058:686349): pid=5323 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446973983.059:686350): pid=5323 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446973983.059:686351): pid=5323 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22099 res=1
type=USER_ROLE_CHANGE msg=audit(1446973983.127:686352): pid=5323 uid=0 auid=0 ses=22099 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446973983.154:686353): pid=5323 uid=0 auid=0 ses=22099 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446973983.155:686354): pid=5323 uid=0 auid=0 ses=22099 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446973983.155:686355): pid=5323 uid=0 auid=0 ses=22099 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446973983.158:686356): pid=5326 uid=0 auid=0 ses=22099 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=5326 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446973983.158:686357): pid=5326 uid=0 auid=0 ses=22099 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=5326 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446973983.158:686358): pid=5326 uid=0 auid=0 ses=22099 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=5326 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446973983.159:686359): pid=5326 uid=0 auid=0 ses=22099 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446973983.179:686360): pid=5323 uid=0 auid=0 ses=22099 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446973983.179:686361): pid=5323 uid=0 auid=0 ses=22099 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446973983.182:686362): pid=5323 uid=0 auid=0 ses=22099 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446973983.182:686363): pid=5323 uid=0 auid=0 ses=22099 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446973983.183:686364): pid=5323 uid=0 auid=0 ses=22099 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5323 suid=0 rport=64684 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446973983.183:686365): pid=5323 uid=0 auid=0 ses=22099 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=5323 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446973983.183:686366): pid=5323 uid=0 auid=0 ses=22099 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=5323 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446973983.183:686367): pid=5323 uid=0 auid=0 ses=22099 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=5323 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446973983.205:686368): pid=5334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=5334 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446973983.206:686369): pid=5334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=5334 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446973983.206:686370): pid=5334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=5334 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446973983.251:686371): pid=5333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=5334 suid=74 rport=64686 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446973983.252:686372): pid=5333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=5334 suid=74 rport=64686 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446973983.374:686373): pid=5333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=64686 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446973983.374:686374): pid=5333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=64686 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446973983.379:686375): pid=5333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446973983.381:686376): pid=5333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5334 suid=74 rport=64686 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446973983.383:686377): pid=5333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446973983.384:686378): pid=5333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446973983.384:686379): pid=5333 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22100 res=1
type=USER_ROLE_CHANGE msg=audit(1446973983.447:686380): pid=5333 uid=0 auid=0 ses=22100 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446973983.465:686381): pid=5333 uid=0 auid=0 ses=22100 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446973983.468:686382): pid=5333 uid=0 auid=0 ses=22100 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446973983.468:686383): pid=5333 uid=0 auid=0 ses=22100 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446973983.469:686384): pid=5336 uid=0 auid=0 ses=22100 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=5336 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446973983.469:686385): pid=5336 uid=0 auid=0 ses=22100 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=5336 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446973983.469:686386): pid=5336 uid=0 auid=0 ses=22100 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=5336 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446973983.470:686387): pid=5336 uid=0 auid=0 ses=22100 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446973984.759:686388): pid=5333 uid=0 auid=0 ses=22100 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446973984.759:686389): pid=5333 uid=0 auid=0 ses=22100 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446973984.764:686390): pid=5333 uid=0 auid=0 ses=22100 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446973984.764:686391): pid=5333 uid=0 auid=0 ses=22100 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446973984.764:686392): pid=5333 uid=0 auid=0 ses=22100 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5333 suid=0 rport=64686 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446973984.764:686393): pid=5333 uid=0 auid=0 ses=22100 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=5333 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446973984.764:686394): pid=5333 uid=0 auid=0 ses=22100 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=5333 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446973984.764:686395): pid=5333 uid=0 auid=0 ses=22100 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=5333 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446973984.801:686396): pid=5417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=5417 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446973984.801:686397): pid=5417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=5417 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446973984.801:686398): pid=5417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=5417 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446973984.845:686399): pid=5416 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=5417 suid=74 rport=64688 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446973984.845:686400): pid=5416 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=5417 suid=74 rport=64688 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446973984.974:686401): pid=5416 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=64688 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446973984.974:686402): pid=5416 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=64688 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446973984.983:686403): pid=5416 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446973984.984:686404): pid=5416 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5417 suid=74 rport=64688 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446973984.986:686405): pid=5416 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446973984.986:686406): pid=5416 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446973984.986:686407): pid=5416 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22101 res=1
type=USER_ROLE_CHANGE msg=audit(1446973985.057:686408): pid=5416 uid=0 auid=0 ses=22101 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446973985.080:686409): pid=5416 uid=0 auid=0 ses=22101 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446973985.082:686410): pid=5416 uid=0 auid=0 ses=22101 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446973985.082:686411): pid=5416 uid=0 auid=0 ses=22101 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446973985.083:686412): pid=5419 uid=0 auid=0 ses=22101 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=5419 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446973985.084:686413): pid=5419 uid=0 auid=0 ses=22101 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=5419 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446973985.084:686414): pid=5419 uid=0 auid=0 ses=22101 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=5419 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446973985.084:686415): pid=5419 uid=0 auid=0 ses=22101 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446973985.102:686416): pid=5416 uid=0 auid=0 ses=22101 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446973985.102:686417): pid=5416 uid=0 auid=0 ses=22101 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446973985.106:686418): pid=5416 uid=0 auid=0 ses=22101 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446973985.106:686419): pid=5416 uid=0 auid=0 ses=22101 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446973985.106:686420): pid=5416 uid=0 auid=0 ses=22101 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5416 suid=0 rport=64688 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446973985.106:686421): pid=5416 uid=0 auid=0 ses=22101 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=5416 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446973985.106:686422): pid=5416 uid=0 auid=0 ses=22101 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=5416 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446973985.106:686423): pid=5416 uid=0 auid=0 ses=22101 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=5416 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446974401.392:686424): pid=6642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446974401.392:686425): pid=6643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446974401.392:686426): pid=6643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446974401.392:686427): pid=6642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446974401.394:686428): pid=6643 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22102 res=1
type=LOGIN msg=audit(1446974401.394:686429): pid=6642 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22103 res=1
type=USER_START msg=audit(1446974401.415:686430): pid=6643 uid=0 auid=0 ses=22102 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1446974401.415:686431): pid=6642 uid=0 auid=0 ses=22103 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446974401.416:686432): pid=6643 uid=0 auid=0 ses=22102 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446974401.416:686433): pid=6642 uid=0 auid=0 ses=22103 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446974401.428:686434): pid=6643 uid=0 auid=0 ses=22102 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446974401.429:686435): pid=6643 uid=0 auid=0 ses=22102 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446974401.431:686436): pid=6642 uid=0 auid=0 ses=22103 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446974401.436:686437): pid=6642 uid=0 auid=0 ses=22103 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446975001.447:686438): pid=8490 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446975001.447:686439): pid=8491 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446975001.447:686440): pid=8490 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446975001.447:686441): pid=8491 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446975001.447:686442): pid=8490 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22104 res=1
type=LOGIN msg=audit(1446975001.447:686443): pid=8491 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22105 res=1
type=USER_START msg=audit(1446975001.462:686444): pid=8490 uid=0 auid=0 ses=22104 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1446975001.462:686445): pid=8491 uid=0 auid=0 ses=22105 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446975001.462:686446): pid=8491 uid=0 auid=0 ses=22105 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446975001.462:686447): pid=8490 uid=0 auid=0 ses=22104 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446975001.470:686448): pid=8491 uid=0 auid=0 ses=22105 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446975001.472:686449): pid=8491 uid=0 auid=0 ses=22105 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446975001.474:686450): pid=8490 uid=0 auid=0 ses=22104 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446975026.500:686451): pid=8490 uid=0 auid=0 ses=22104 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=CRYPTO_KEY_USER msg=audit(1446975182.467:686452): pid=9050 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=9050 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446975182.468:686453): pid=9050 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=9050 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446975182.468:686454): pid=9050 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=9050 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446975182.511:686455): pid=9049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=9050 suid=74 rport=33892 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446975182.511:686456): pid=9049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=9050 suid=74 rport=33892 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446975182.639:686457): pid=9049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33892 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446975182.639:686458): pid=9049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=33892 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446975182.648:686459): pid=9049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446975182.650:686460): pid=9049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9050 suid=74 rport=33892 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446975182.652:686461): pid=9049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446975182.652:686462): pid=9049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446975182.652:686463): pid=9049 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22106 res=1
type=USER_ROLE_CHANGE msg=audit(1446975182.723:686464): pid=9049 uid=0 auid=0 ses=22106 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446975182.747:686465): pid=9049 uid=0 auid=0 ses=22106 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446975182.750:686466): pid=9049 uid=0 auid=0 ses=22106 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446975182.750:686467): pid=9049 uid=0 auid=0 ses=22106 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446975182.752:686468): pid=9052 uid=0 auid=0 ses=22106 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=9052 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446975182.752:686469): pid=9052 uid=0 auid=0 ses=22106 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=9052 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446975182.752:686470): pid=9052 uid=0 auid=0 ses=22106 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=9052 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446975182.753:686471): pid=9052 uid=0 auid=0 ses=22106 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446975182.771:686472): pid=9049 uid=0 auid=0 ses=22106 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446975182.771:686473): pid=9049 uid=0 auid=0 ses=22106 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446975182.776:686474): pid=9049 uid=0 auid=0 ses=22106 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446975182.776:686475): pid=9049 uid=0 auid=0 ses=22106 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446975182.776:686476): pid=9049 uid=0 auid=0 ses=22106 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9049 suid=0 rport=33892 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446975182.776:686477): pid=9049 uid=0 auid=0 ses=22106 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=9049 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446975182.776:686478): pid=9049 uid=0 auid=0 ses=22106 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=9049 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446975182.777:686479): pid=9049 uid=0 auid=0 ses=22106 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=9049 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446975182.791:686480): pid=9060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=9060 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446975182.791:686481): pid=9060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=9060 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446975182.791:686482): pid=9060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=9060 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446975182.823:686483): pid=9059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=9060 suid=74 rport=33896 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446975182.824:686484): pid=9059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=9060 suid=74 rport=33896 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446975182.934:686485): pid=9059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33896 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446975182.934:686486): pid=9059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=33896 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446975182.939:686487): pid=9059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446975182.941:686488): pid=9059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9060 suid=74 rport=33896 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446975182.942:686489): pid=9059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446975182.943:686490): pid=9059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446975182.943:686491): pid=9059 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22107 res=1
type=USER_ROLE_CHANGE msg=audit(1446975183.010:686492): pid=9059 uid=0 auid=0 ses=22107 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446975183.031:686493): pid=9059 uid=0 auid=0 ses=22107 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446975183.033:686494): pid=9059 uid=0 auid=0 ses=22107 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446975183.033:686495): pid=9059 uid=0 auid=0 ses=22107 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446975183.035:686496): pid=9062 uid=0 auid=0 ses=22107 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=9062 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446975183.035:686497): pid=9062 uid=0 auid=0 ses=22107 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=9062 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446975183.035:686498): pid=9062 uid=0 auid=0 ses=22107 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=9062 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446975183.036:686499): pid=9062 uid=0 auid=0 ses=22107 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446975184.319:686500): pid=9059 uid=0 auid=0 ses=22107 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446975184.319:686501): pid=9059 uid=0 auid=0 ses=22107 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446975184.326:686502): pid=9059 uid=0 auid=0 ses=22107 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446975184.327:686503): pid=9059 uid=0 auid=0 ses=22107 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446975184.327:686504): pid=9059 uid=0 auid=0 ses=22107 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9059 suid=0 rport=33896 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446975184.328:686505): pid=9059 uid=0 auid=0 ses=22107 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=9059 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446975184.328:686506): pid=9059 uid=0 auid=0 ses=22107 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=9059 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446975184.328:686507): pid=9059 uid=0 auid=0 ses=22107 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=9059 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446975184.349:686508): pid=9119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=9119 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446975184.350:686509): pid=9119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=9119 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446975184.350:686510): pid=9119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=9119 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446975184.375:686511): pid=9118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=9119 suid=74 rport=33901 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446975184.375:686512): pid=9118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=9119 suid=74 rport=33901 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446975184.484:686513): pid=9118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33901 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446975184.484:686514): pid=9118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=33901 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446975184.488:686515): pid=9118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446975184.489:686516): pid=9118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9119 suid=74 rport=33901 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446975184.490:686517): pid=9118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446975184.491:686518): pid=9118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446975184.491:686519): pid=9118 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22108 res=1
type=USER_ROLE_CHANGE msg=audit(1446975184.559:686520): pid=9118 uid=0 auid=0 ses=22108 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446975184.583:686521): pid=9118 uid=0 auid=0 ses=22108 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446975184.586:686522): pid=9118 uid=0 auid=0 ses=22108 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446975184.586:686523): pid=9118 uid=0 auid=0 ses=22108 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446975184.588:686524): pid=9121 uid=0 auid=0 ses=22108 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=9121 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446975184.588:686525): pid=9121 uid=0 auid=0 ses=22108 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=9121 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446975184.588:686526): pid=9121 uid=0 auid=0 ses=22108 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=9121 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446975184.589:686527): pid=9121 uid=0 auid=0 ses=22108 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446975184.605:686528): pid=9118 uid=0 auid=0 ses=22108 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446975184.605:686529): pid=9118 uid=0 auid=0 ses=22108 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446975184.610:686530): pid=9118 uid=0 auid=0 ses=22108 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446975184.610:686531): pid=9118 uid=0 auid=0 ses=22108 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446975184.611:686532): pid=9118 uid=0 auid=0 ses=22108 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9118 suid=0 rport=33901 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446975184.611:686533): pid=9118 uid=0 auid=0 ses=22108 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=9118 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446975184.611:686534): pid=9118 uid=0 auid=0 ses=22108 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=9118 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446975184.611:686535): pid=9118 uid=0 auid=0 ses=22108 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=9118 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446975601.526:686536): pid=10405 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446975601.526:686537): pid=10406 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446975601.526:686538): pid=10405 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446975601.526:686539): pid=10406 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446975601.527:686540): pid=10405 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22109 res=1
type=LOGIN msg=audit(1446975601.527:686541): pid=10406 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22110 res=1
type=USER_START msg=audit(1446975601.547:686542): pid=10405 uid=0 auid=0 ses=22109 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1446975601.547:686543): pid=10406 uid=0 auid=0 ses=22110 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446975601.548:686545): pid=10406 uid=0 auid=0 ses=22110 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446975601.548:686544): pid=10405 uid=0 auid=0 ses=22109 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446975601.560:686546): pid=10406 uid=0 auid=0 ses=22110 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446975601.562:686547): pid=10406 uid=0 auid=0 ses=22110 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446975601.565:686548): pid=10405 uid=0 auid=0 ses=22109 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446975601.567:686549): pid=10405 uid=0 auid=0 ses=22109 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1446975997.751:686550): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1446976201.580:686551): pid=12253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446976201.580:686552): pid=12253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446976201.580:686553): pid=12252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446976201.580:686554): pid=12252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446976201.581:686555): pid=12253 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22111 res=1
type=LOGIN msg=audit(1446976201.581:686556): pid=12252 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22112 res=1
type=USER_START msg=audit(1446976201.595:686557): pid=12252 uid=0 auid=0 ses=22112 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446976201.596:686558): pid=12252 uid=0 auid=0 ses=22112 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1446976201.596:686559): pid=12253 uid=0 auid=0 ses=22111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446976201.596:686560): pid=12253 uid=0 auid=0 ses=22111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446976201.603:686561): pid=12253 uid=0 auid=0 ses=22111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446976201.610:686562): pid=12253 uid=0 auid=0 ses=22111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446976201.610:686563): pid=12252 uid=0 auid=0 ses=22112 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446976201.614:686564): pid=12252 uid=0 auid=0 ses=22112 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1446976382.518:686565): pid=12813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12813 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446976382.518:686566): pid=12813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12813 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446976382.518:686567): pid=12813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12813 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446976382.562:686568): pid=12812 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=12813 suid=74 rport=35873 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446976382.563:686569): pid=12812 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=12813 suid=74 rport=35873 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446976382.687:686570): pid=12812 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=35873 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446976382.687:686571): pid=12812 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=35873 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446976382.695:686572): pid=12812 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446976382.697:686573): pid=12812 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12813 suid=74 rport=35873 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446976382.698:686574): pid=12812 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446976382.699:686575): pid=12812 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446976382.699:686576): pid=12812 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22113 res=1
type=USER_ROLE_CHANGE msg=audit(1446976382.773:686577): pid=12812 uid=0 auid=0 ses=22113 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446976382.793:686578): pid=12812 uid=0 auid=0 ses=22113 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446976382.796:686579): pid=12812 uid=0 auid=0 ses=22113 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446976382.796:686580): pid=12812 uid=0 auid=0 ses=22113 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446976382.797:686581): pid=12815 uid=0 auid=0 ses=22113 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12815 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446976382.797:686582): pid=12815 uid=0 auid=0 ses=22113 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12815 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446976382.797:686583): pid=12815 uid=0 auid=0 ses=22113 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12815 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446976382.798:686584): pid=12815 uid=0 auid=0 ses=22113 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446976382.817:686585): pid=12812 uid=0 auid=0 ses=22113 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446976382.817:686586): pid=12812 uid=0 auid=0 ses=22113 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446976382.821:686587): pid=12812 uid=0 auid=0 ses=22113 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446976382.821:686588): pid=12812 uid=0 auid=0 ses=22113 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446976382.823:686589): pid=12812 uid=0 auid=0 ses=22113 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12812 suid=0 rport=35873 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446976382.823:686590): pid=12812 uid=0 auid=0 ses=22113 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12812 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446976382.823:686591): pid=12812 uid=0 auid=0 ses=22113 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12812 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446976382.823:686592): pid=12812 uid=0 auid=0 ses=22113 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12812 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446976382.842:686593): pid=12823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12823 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446976382.843:686594): pid=12823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12823 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446976382.843:686595): pid=12823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12823 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446976382.888:686596): pid=12822 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=12823 suid=74 rport=35874 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446976382.889:686597): pid=12822 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=12823 suid=74 rport=35874 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446976383.011:686598): pid=12822 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=35874 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446976383.011:686599): pid=12822 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=35874 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446976383.017:686600): pid=12822 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446976383.017:686601): pid=12822 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12823 suid=74 rport=35874 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446976383.019:686602): pid=12822 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446976383.019:686603): pid=12822 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446976383.019:686604): pid=12822 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22114 res=1
type=USER_ROLE_CHANGE msg=audit(1446976383.083:686605): pid=12822 uid=0 auid=0 ses=22114 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446976383.111:686606): pid=12822 uid=0 auid=0 ses=22114 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446976383.114:686607): pid=12822 uid=0 auid=0 ses=22114 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446976383.115:686608): pid=12822 uid=0 auid=0 ses=22114 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446976383.116:686609): pid=12825 uid=0 auid=0 ses=22114 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12825 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446976383.116:686610): pid=12825 uid=0 auid=0 ses=22114 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12825 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446976383.116:686611): pid=12825 uid=0 auid=0 ses=22114 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12825 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446976383.117:686612): pid=12825 uid=0 auid=0 ses=22114 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446976384.379:686613): pid=12822 uid=0 auid=0 ses=22114 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446976384.379:686614): pid=12822 uid=0 auid=0 ses=22114 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446976384.385:686615): pid=12822 uid=0 auid=0 ses=22114 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446976384.385:686616): pid=12822 uid=0 auid=0 ses=22114 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446976384.385:686617): pid=12822 uid=0 auid=0 ses=22114 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12822 suid=0 rport=35874 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446976384.385:686618): pid=12822 uid=0 auid=0 ses=22114 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12822 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446976384.386:686619): pid=12822 uid=0 auid=0 ses=22114 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12822 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446976384.386:686620): pid=12822 uid=0 auid=0 ses=22114 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12822 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446976384.418:686621): pid=12878 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12878 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446976384.419:686622): pid=12878 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12878 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446976384.419:686623): pid=12878 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12878 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446976384.463:686624): pid=12877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=12878 suid=74 rport=35882 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446976384.464:686625): pid=12877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=12878 suid=74 rport=35882 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446976384.594:686626): pid=12877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=35882 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446976384.594:686627): pid=12877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=35882 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446976384.598:686628): pid=12877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446976384.599:686629): pid=12877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12878 suid=74 rport=35882 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446976384.599:686630): pid=12877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446976384.599:686631): pid=12877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446976384.600:686632): pid=12877 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22115 res=1
type=USER_ROLE_CHANGE msg=audit(1446976384.665:686633): pid=12877 uid=0 auid=0 ses=22115 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446976384.687:686634): pid=12877 uid=0 auid=0 ses=22115 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446976384.690:686635): pid=12877 uid=0 auid=0 ses=22115 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446976384.690:686636): pid=12877 uid=0 auid=0 ses=22115 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446976384.691:686637): pid=12884 uid=0 auid=0 ses=22115 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12884 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446976384.691:686638): pid=12884 uid=0 auid=0 ses=22115 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12884 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446976384.692:686639): pid=12884 uid=0 auid=0 ses=22115 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12884 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446976384.692:686640): pid=12884 uid=0 auid=0 ses=22115 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446976384.711:686641): pid=12877 uid=0 auid=0 ses=22115 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446976384.711:686642): pid=12877 uid=0 auid=0 ses=22115 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446976384.714:686643): pid=12877 uid=0 auid=0 ses=22115 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446976384.715:686644): pid=12877 uid=0 auid=0 ses=22115 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446976384.715:686645): pid=12877 uid=0 auid=0 ses=22115 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12877 suid=0 rport=35882 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446976384.715:686646): pid=12877 uid=0 auid=0 ses=22115 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12877 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446976384.715:686647): pid=12877 uid=0 auid=0 ses=22115 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12877 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446976384.715:686648): pid=12877 uid=0 auid=0 ses=22115 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12877 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446976801.634:686649): pid=14170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446976801.634:686650): pid=14170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446976801.636:686651): pid=14170 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22116 res=1
type=USER_ACCT msg=audit(1446976801.637:686652): pid=14169 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446976801.637:686653): pid=14169 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446976801.638:686654): pid=14169 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22117 res=1
type=USER_START msg=audit(1446976801.656:686655): pid=14169 uid=0 auid=0 ses=22117 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446976801.656:686656): pid=14169 uid=0 auid=0 ses=22117 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1446976801.657:686657): pid=14170 uid=0 auid=0 ses=22116 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446976801.657:686658): pid=14170 uid=0 auid=0 ses=22116 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446976801.669:686659): pid=14170 uid=0 auid=0 ses=22116 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446976801.671:686660): pid=14170 uid=0 auid=0 ses=22116 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446976801.673:686661): pid=14169 uid=0 auid=0 ses=22117 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446976801.676:686662): pid=14169 uid=0 auid=0 ses=22117 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446976861.689:686663): pid=14405 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446976861.689:686664): pid=14405 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446976861.690:686665): pid=14405 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22118 res=1
type=USER_START msg=audit(1446976861.701:686666): pid=14405 uid=0 auid=0 ses=22118 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446976861.701:686667): pid=14405 uid=0 auid=0 ses=22118 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446976861.725:686668): pid=14405 uid=0 auid=0 ses=22118 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446976861.726:686669): pid=14405 uid=0 auid=0 ses=22118 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446977401.741:686670): pid=16192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446977401.741:686671): pid=16192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446977401.741:686672): pid=16193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446977401.741:686673): pid=16193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446977401.742:686674): pid=16192 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22119 res=1
type=LOGIN msg=audit(1446977401.742:686675): pid=16193 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22120 res=1
type=USER_START msg=audit(1446977401.759:686676): pid=16192 uid=0 auid=0 ses=22119 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446977401.759:686677): pid=16192 uid=0 auid=0 ses=22119 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1446977401.759:686678): pid=16193 uid=0 auid=0 ses=22120 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446977401.759:686679): pid=16193 uid=0 auid=0 ses=22120 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446977401.771:686680): pid=16193 uid=0 auid=0 ses=22120 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446977401.771:686681): pid=16192 uid=0 auid=0 ses=22119 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446977401.773:686682): pid=16192 uid=0 auid=0 ses=22119 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446977401.773:686683): pid=16193 uid=0 auid=0 ses=22120 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1446977582.828:686684): pid=16756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16756 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446977582.828:686685): pid=16756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16756 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446977582.828:686686): pid=16756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16756 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446977582.872:686687): pid=16755 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=16756 suid=74 rport=37854 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446977582.873:686688): pid=16755 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=16756 suid=74 rport=37854 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446977583.002:686689): pid=16755 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=37854 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446977583.002:686690): pid=16755 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=37854 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446977583.011:686691): pid=16755 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446977583.011:686692): pid=16755 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16756 suid=74 rport=37854 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446977583.016:686693): pid=16755 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446977583.016:686694): pid=16755 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446977583.017:686695): pid=16755 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22121 res=1
type=USER_ROLE_CHANGE msg=audit(1446977583.087:686696): pid=16755 uid=0 auid=0 ses=22121 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446977583.109:686697): pid=16755 uid=0 auid=0 ses=22121 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446977583.112:686698): pid=16755 uid=0 auid=0 ses=22121 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446977583.112:686699): pid=16755 uid=0 auid=0 ses=22121 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446977583.114:686700): pid=16758 uid=0 auid=0 ses=22121 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16758 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446977583.114:686701): pid=16758 uid=0 auid=0 ses=22121 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16758 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446977583.114:686702): pid=16758 uid=0 auid=0 ses=22121 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16758 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446977583.115:686703): pid=16758 uid=0 auid=0 ses=22121 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446977583.136:686704): pid=16755 uid=0 auid=0 ses=22121 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446977583.136:686705): pid=16755 uid=0 auid=0 ses=22121 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446977583.141:686706): pid=16755 uid=0 auid=0 ses=22121 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446977583.141:686707): pid=16755 uid=0 auid=0 ses=22121 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446977583.141:686708): pid=16755 uid=0 auid=0 ses=22121 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16755 suid=0 rport=37854 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446977583.141:686709): pid=16755 uid=0 auid=0 ses=22121 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16755 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446977583.141:686710): pid=16755 uid=0 auid=0 ses=22121 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16755 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446977583.141:686711): pid=16755 uid=0 auid=0 ses=22121 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16755 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446977583.167:686712): pid=16766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16766 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446977583.167:686713): pid=16766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16766 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446977583.167:686714): pid=16766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16766 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446977583.212:686715): pid=16765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=16766 suid=74 rport=37855 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446977583.213:686716): pid=16765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=16766 suid=74 rport=37855 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446977583.341:686717): pid=16765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=37855 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446977583.341:686718): pid=16765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=37855 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446977583.351:686719): pid=16765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446977583.352:686720): pid=16765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16766 suid=74 rport=37855 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446977583.353:686721): pid=16765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446977583.353:686722): pid=16765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446977583.354:686723): pid=16765 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22122 res=1
type=USER_ROLE_CHANGE msg=audit(1446977583.418:686724): pid=16765 uid=0 auid=0 ses=22122 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446977583.441:686725): pid=16765 uid=0 auid=0 ses=22122 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446977583.443:686726): pid=16765 uid=0 auid=0 ses=22122 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446977583.443:686727): pid=16765 uid=0 auid=0 ses=22122 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446977583.445:686728): pid=16768 uid=0 auid=0 ses=22122 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16768 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446977583.445:686729): pid=16768 uid=0 auid=0 ses=22122 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16768 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446977583.445:686730): pid=16768 uid=0 auid=0 ses=22122 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16768 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446977583.445:686731): pid=16768 uid=0 auid=0 ses=22122 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446977584.720:686732): pid=16765 uid=0 auid=0 ses=22122 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446977584.720:686733): pid=16765 uid=0 auid=0 ses=22122 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446977584.724:686734): pid=16765 uid=0 auid=0 ses=22122 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446977584.724:686735): pid=16765 uid=0 auid=0 ses=22122 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446977584.724:686736): pid=16765 uid=0 auid=0 ses=22122 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16765 suid=0 rport=37855 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446977584.724:686737): pid=16765 uid=0 auid=0 ses=22122 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16765 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446977584.724:686738): pid=16765 uid=0 auid=0 ses=22122 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16765 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446977584.724:686739): pid=16765 uid=0 auid=0 ses=22122 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16765 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446977584.759:686740): pid=16821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16821 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446977584.759:686741): pid=16821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16821 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446977584.759:686742): pid=16821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16821 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446977584.804:686743): pid=16820 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=16821 suid=74 rport=37861 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446977584.805:686744): pid=16820 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=16821 suid=74 rport=37861 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446977584.929:686745): pid=16820 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=37861 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446977584.929:686746): pid=16820 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=37861 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446977584.936:686747): pid=16820 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446977584.936:686748): pid=16820 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16821 suid=74 rport=37861 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446977584.937:686749): pid=16820 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446977584.937:686750): pid=16820 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446977584.938:686751): pid=16820 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22123 res=1
type=USER_ROLE_CHANGE msg=audit(1446977585.003:686752): pid=16820 uid=0 auid=0 ses=22123 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446977585.024:686753): pid=16820 uid=0 auid=0 ses=22123 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446977585.027:686754): pid=16820 uid=0 auid=0 ses=22123 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446977585.027:686755): pid=16820 uid=0 auid=0 ses=22123 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446977585.028:686756): pid=16823 uid=0 auid=0 ses=22123 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16823 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446977585.029:686757): pid=16823 uid=0 auid=0 ses=22123 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16823 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446977585.029:686758): pid=16823 uid=0 auid=0 ses=22123 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16823 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446977585.029:686759): pid=16823 uid=0 auid=0 ses=22123 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446977585.044:686760): pid=16820 uid=0 auid=0 ses=22123 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446977585.044:686761): pid=16820 uid=0 auid=0 ses=22123 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446977585.048:686762): pid=16820 uid=0 auid=0 ses=22123 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446977585.048:686763): pid=16820 uid=0 auid=0 ses=22123 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446977585.049:686764): pid=16820 uid=0 auid=0 ses=22123 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16820 suid=0 rport=37861 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446977585.049:686765): pid=16820 uid=0 auid=0 ses=22123 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16820 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446977585.049:686766): pid=16820 uid=0 auid=0 ses=22123 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16820 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446977585.049:686767): pid=16820 uid=0 auid=0 ses=22123 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16820 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446978001.792:686768): pid=18116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446978001.792:686769): pid=18115 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446978001.792:686770): pid=18116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446978001.792:686771): pid=18115 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446978001.794:686772): pid=18116 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22124 res=1
type=LOGIN msg=audit(1446978001.794:686773): pid=18115 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22125 res=1
type=USER_START msg=audit(1446978001.814:686774): pid=18116 uid=0 auid=0 ses=22124 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1446978001.814:686775): pid=18115 uid=0 auid=0 ses=22125 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446978001.814:686776): pid=18116 uid=0 auid=0 ses=22124 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446978001.814:686777): pid=18115 uid=0 auid=0 ses=22125 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446978001.824:686778): pid=18116 uid=0 auid=0 ses=22124 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446978001.826:686779): pid=18116 uid=0 auid=0 ses=22124 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446978001.829:686780): pid=18115 uid=0 auid=0 ses=22125 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446978026.858:686781): pid=18115 uid=0 auid=0 ses=22125 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=SYSCALL msg=audit(1446978155.758:686782): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1446978601.874:686783): pid=19959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446978601.874:686784): pid=19960 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446978601.874:686785): pid=19959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446978601.874:686786): pid=19960 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446978601.874:686787): pid=19959 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22126 res=1
type=LOGIN msg=audit(1446978601.874:686788): pid=19960 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22127 res=1
type=USER_START msg=audit(1446978601.889:686789): pid=19960 uid=0 auid=0 ses=22127 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446978601.889:686790): pid=19960 uid=0 auid=0 ses=22127 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1446978601.890:686791): pid=19959 uid=0 auid=0 ses=22126 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446978601.891:686792): pid=19959 uid=0 auid=0 ses=22126 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446978601.895:686793): pid=19960 uid=0 auid=0 ses=22127 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446978601.896:686794): pid=19960 uid=0 auid=0 ses=22127 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446978601.904:686795): pid=19959 uid=0 auid=0 ses=22126 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446978601.906:686796): pid=19959 uid=0 auid=0 ses=22126 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1446978783.082:686797): pid=20522 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=20522 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446978783.082:686798): pid=20522 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=20522 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446978783.082:686799): pid=20522 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=20522 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446978783.126:686800): pid=20521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=20522 suid=74 rport=39835 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446978783.126:686801): pid=20521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=20522 suid=74 rport=39835 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446978783.247:686802): pid=20521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=39835 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446978783.247:686803): pid=20521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=39835 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446978783.252:686804): pid=20521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446978783.253:686805): pid=20521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20522 suid=74 rport=39835 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446978783.255:686806): pid=20521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446978783.256:686807): pid=20521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446978783.256:686808): pid=20521 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22128 res=1
type=USER_ROLE_CHANGE msg=audit(1446978783.336:686809): pid=20521 uid=0 auid=0 ses=22128 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446978783.356:686810): pid=20521 uid=0 auid=0 ses=22128 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446978783.359:686811): pid=20521 uid=0 auid=0 ses=22128 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446978783.359:686812): pid=20521 uid=0 auid=0 ses=22128 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446978783.360:686813): pid=20524 uid=0 auid=0 ses=22128 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=20524 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446978783.360:686814): pid=20524 uid=0 auid=0 ses=22128 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=20524 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446978783.360:686815): pid=20524 uid=0 auid=0 ses=22128 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=20524 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446978783.361:686816): pid=20524 uid=0 auid=0 ses=22128 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446978783.380:686817): pid=20521 uid=0 auid=0 ses=22128 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446978783.380:686818): pid=20521 uid=0 auid=0 ses=22128 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446978783.384:686819): pid=20521 uid=0 auid=0 ses=22128 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446978783.384:686820): pid=20521 uid=0 auid=0 ses=22128 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446978783.385:686821): pid=20521 uid=0 auid=0 ses=22128 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20521 suid=0 rport=39835 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446978783.385:686822): pid=20521 uid=0 auid=0 ses=22128 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=20521 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446978783.385:686823): pid=20521 uid=0 auid=0 ses=22128 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=20521 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446978783.385:686824): pid=20521 uid=0 auid=0 ses=22128 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=20521 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446978783.409:686825): pid=20532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=20532 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446978783.409:686826): pid=20532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=20532 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446978783.409:686827): pid=20532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=20532 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446978783.455:686828): pid=20531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=20532 suid=74 rport=39836 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446978783.455:686829): pid=20531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=20532 suid=74 rport=39836 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446978783.583:686830): pid=20531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=39836 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446978783.583:686831): pid=20531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=39836 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446978783.591:686832): pid=20531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446978783.592:686833): pid=20531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20532 suid=74 rport=39836 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446978783.594:686834): pid=20531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446978783.595:686835): pid=20531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446978783.595:686836): pid=20531 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22129 res=1
type=USER_ROLE_CHANGE msg=audit(1446978783.663:686837): pid=20531 uid=0 auid=0 ses=22129 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446978783.688:686838): pid=20531 uid=0 auid=0 ses=22129 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446978783.690:686839): pid=20531 uid=0 auid=0 ses=22129 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446978783.690:686840): pid=20531 uid=0 auid=0 ses=22129 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446978783.692:686841): pid=20534 uid=0 auid=0 ses=22129 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=20534 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446978783.692:686842): pid=20534 uid=0 auid=0 ses=22129 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=20534 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446978783.692:686843): pid=20534 uid=0 auid=0 ses=22129 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=20534 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446978783.694:686844): pid=20534 uid=0 auid=0 ses=22129 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446978784.978:686845): pid=20531 uid=0 auid=0 ses=22129 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446978784.978:686846): pid=20531 uid=0 auid=0 ses=22129 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446978784.982:686847): pid=20531 uid=0 auid=0 ses=22129 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446978784.982:686848): pid=20531 uid=0 auid=0 ses=22129 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446978784.982:686849): pid=20531 uid=0 auid=0 ses=22129 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20531 suid=0 rport=39836 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446978784.983:686850): pid=20531 uid=0 auid=0 ses=22129 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=20531 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446978784.983:686851): pid=20531 uid=0 auid=0 ses=22129 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=20531 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446978784.983:686852): pid=20531 uid=0 auid=0 ses=22129 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=20531 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446978785.016:686853): pid=20587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=20587 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446978785.016:686854): pid=20587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=20587 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446978785.016:686855): pid=20587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=20587 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446978785.060:686856): pid=20586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=20587 suid=74 rport=39841 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446978785.061:686857): pid=20586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=20587 suid=74 rport=39841 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446978785.191:686858): pid=20586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=39841 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446978785.191:686859): pid=20586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=39841 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446978785.200:686860): pid=20586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446978785.201:686861): pid=20586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20587 suid=74 rport=39841 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446978785.202:686862): pid=20586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446978785.202:686863): pid=20586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446978785.202:686864): pid=20586 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22130 res=1
type=USER_ROLE_CHANGE msg=audit(1446978785.270:686865): pid=20586 uid=0 auid=0 ses=22130 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446978785.291:686866): pid=20586 uid=0 auid=0 ses=22130 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446978785.295:686867): pid=20586 uid=0 auid=0 ses=22130 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446978785.295:686868): pid=20586 uid=0 auid=0 ses=22130 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446978785.296:686869): pid=20589 uid=0 auid=0 ses=22130 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=20589 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446978785.296:686870): pid=20589 uid=0 auid=0 ses=22130 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=20589 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446978785.296:686871): pid=20589 uid=0 auid=0 ses=22130 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=20589 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446978785.297:686872): pid=20589 uid=0 auid=0 ses=22130 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446978785.314:686873): pid=20586 uid=0 auid=0 ses=22130 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446978785.314:686874): pid=20586 uid=0 auid=0 ses=22130 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446978785.318:686875): pid=20586 uid=0 auid=0 ses=22130 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446978785.318:686876): pid=20586 uid=0 auid=0 ses=22130 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446978785.319:686877): pid=20586 uid=0 auid=0 ses=22130 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20586 suid=0 rport=39841 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446978785.319:686878): pid=20586 uid=0 auid=0 ses=22130 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=20586 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446978785.319:686879): pid=20586 uid=0 auid=0 ses=22130 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=20586 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446978785.319:686880): pid=20586 uid=0 auid=0 ses=22130 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=20586 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=SYSCALL msg=audit(1446979183.717:686881): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1446979201.925:686883): pid=21876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446979201.925:686882): pid=21877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446979201.925:686884): pid=21876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446979201.925:686885): pid=21877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446979201.926:686886): pid=21877 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22131 res=1
type=LOGIN msg=audit(1446979201.926:686887): pid=21876 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22132 res=1
type=USER_START msg=audit(1446979201.949:686888): pid=21877 uid=0 auid=0 ses=22131 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446979201.950:686889): pid=21877 uid=0 auid=0 ses=22131 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1446979201.951:686890): pid=21876 uid=0 auid=0 ses=22132 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446979201.951:686891): pid=21876 uid=0 auid=0 ses=22132 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446979201.962:686892): pid=21877 uid=0 auid=0 ses=22131 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446979201.967:686893): pid=21876 uid=0 auid=0 ses=22132 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446979201.968:686894): pid=21876 uid=0 auid=0 ses=22132 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446979201.968:686895): pid=21877 uid=0 auid=0 ses=22131 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446979801.982:686896): pid=23722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446979801.982:686897): pid=23722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446979801.982:686898): pid=23721 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446979801.982:686899): pid=23721 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446979801.982:686900): pid=23722 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22133 res=1
type=LOGIN msg=audit(1446979801.982:686901): pid=23721 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22134 res=1
type=USER_START msg=audit(1446979801.997:686902): pid=23721 uid=0 auid=0 ses=22134 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446979801.997:686903): pid=23721 uid=0 auid=0 ses=22134 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1446979801.999:686904): pid=23722 uid=0 auid=0 ses=22133 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446979801.999:686905): pid=23722 uid=0 auid=0 ses=22133 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446979802.004:686906): pid=23722 uid=0 auid=0 ses=22133 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446979802.006:686907): pid=23722 uid=0 auid=0 ses=22133 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446979802.010:686908): pid=23721 uid=0 auid=0 ses=22134 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446979802.012:686909): pid=23721 uid=0 auid=0 ses=22134 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1446979983.134:686910): pid=24281 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=24281 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446979983.134:686911): pid=24281 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=24281 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446979983.135:686912): pid=24281 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=24281 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446979983.180:686913): pid=24280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=24281 suid=74 rport=41816 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446979983.180:686914): pid=24280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=24281 suid=74 rport=41816 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446979983.306:686915): pid=24280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=41816 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446979983.306:686916): pid=24280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=41816 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446979983.313:686917): pid=24280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446979983.314:686918): pid=24280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24281 suid=74 rport=41816 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446979983.317:686919): pid=24280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446979983.318:686920): pid=24280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446979983.318:686921): pid=24280 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22135 res=1
type=USER_ROLE_CHANGE msg=audit(1446979983.386:686922): pid=24280 uid=0 auid=0 ses=22135 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446979983.413:686923): pid=24280 uid=0 auid=0 ses=22135 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446979983.416:686924): pid=24280 uid=0 auid=0 ses=22135 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446979983.416:686925): pid=24280 uid=0 auid=0 ses=22135 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446979983.417:686926): pid=24283 uid=0 auid=0 ses=22135 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=24283 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446979983.418:686927): pid=24283 uid=0 auid=0 ses=22135 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=24283 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446979983.418:686928): pid=24283 uid=0 auid=0 ses=22135 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=24283 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446979983.418:686929): pid=24283 uid=0 auid=0 ses=22135 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446979983.437:686930): pid=24280 uid=0 auid=0 ses=22135 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446979983.438:686931): pid=24280 uid=0 auid=0 ses=22135 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446979983.442:686932): pid=24280 uid=0 auid=0 ses=22135 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446979983.443:686933): pid=24280 uid=0 auid=0 ses=22135 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446979983.443:686934): pid=24280 uid=0 auid=0 ses=22135 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24280 suid=0 rport=41816 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446979983.443:686935): pid=24280 uid=0 auid=0 ses=22135 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=24280 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446979983.443:686936): pid=24280 uid=0 auid=0 ses=22135 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=24280 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446979983.443:686937): pid=24280 uid=0 auid=0 ses=22135 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=24280 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446979983.466:686938): pid=24291 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=24291 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446979983.466:686939): pid=24291 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=24291 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446979983.466:686940): pid=24291 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=24291 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446979983.512:686941): pid=24290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=24291 suid=74 rport=41817 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446979983.512:686942): pid=24290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=24291 suid=74 rport=41817 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446979983.641:686943): pid=24290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=41817 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446979983.641:686944): pid=24290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=41817 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446979983.651:686945): pid=24290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446979983.652:686946): pid=24290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24291 suid=74 rport=41817 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446979983.653:686947): pid=24290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446979983.654:686948): pid=24290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446979983.654:686949): pid=24290 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22136 res=1
type=USER_ROLE_CHANGE msg=audit(1446979983.722:686950): pid=24290 uid=0 auid=0 ses=22136 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446979983.740:686951): pid=24290 uid=0 auid=0 ses=22136 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446979983.743:686952): pid=24290 uid=0 auid=0 ses=22136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446979983.743:686953): pid=24290 uid=0 auid=0 ses=22136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446979983.744:686954): pid=24293 uid=0 auid=0 ses=22136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=24293 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446979983.744:686955): pid=24293 uid=0 auid=0 ses=22136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=24293 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446979983.744:686956): pid=24293 uid=0 auid=0 ses=22136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=24293 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446979983.745:686957): pid=24293 uid=0 auid=0 ses=22136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446979985.011:686958): pid=24290 uid=0 auid=0 ses=22136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446979985.011:686959): pid=24290 uid=0 auid=0 ses=22136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446979985.014:686960): pid=24290 uid=0 auid=0 ses=22136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446979985.015:686961): pid=24290 uid=0 auid=0 ses=22136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446979985.015:686962): pid=24290 uid=0 auid=0 ses=22136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24290 suid=0 rport=41817 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446979985.015:686963): pid=24290 uid=0 auid=0 ses=22136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=24290 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446979985.015:686964): pid=24290 uid=0 auid=0 ses=22136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=24290 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446979985.015:686965): pid=24290 uid=0 auid=0 ses=22136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=24290 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446979985.048:686966): pid=24346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=24346 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446979985.049:686967): pid=24346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=24346 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446979985.049:686968): pid=24346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=24346 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446979985.093:686969): pid=24345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=24346 suid=74 rport=41821 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446979985.093:686970): pid=24345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=24346 suid=74 rport=41821 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446979985.222:686971): pid=24345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=41821 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446979985.222:686972): pid=24345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=41821 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446979985.232:686973): pid=24345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446979985.234:686974): pid=24345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24346 suid=74 rport=41821 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446979985.238:686975): pid=24345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446979985.239:686976): pid=24345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446979985.239:686977): pid=24345 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22137 res=1
type=USER_ROLE_CHANGE msg=audit(1446979985.305:686978): pid=24345 uid=0 auid=0 ses=22137 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446979985.328:686979): pid=24345 uid=0 auid=0 ses=22137 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446979985.332:686980): pid=24345 uid=0 auid=0 ses=22137 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446979985.332:686981): pid=24345 uid=0 auid=0 ses=22137 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446979985.333:686982): pid=24348 uid=0 auid=0 ses=22137 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=24348 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446979985.334:686983): pid=24348 uid=0 auid=0 ses=22137 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=24348 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446979985.334:686984): pid=24348 uid=0 auid=0 ses=22137 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=24348 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446979985.334:686985): pid=24348 uid=0 auid=0 ses=22137 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446979985.352:686986): pid=24345 uid=0 auid=0 ses=22137 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446979985.352:686987): pid=24345 uid=0 auid=0 ses=22137 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446979985.356:686988): pid=24345 uid=0 auid=0 ses=22137 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446979985.356:686989): pid=24345 uid=0 auid=0 ses=22137 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446979985.356:686990): pid=24345 uid=0 auid=0 ses=22137 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24345 suid=0 rport=41821 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446979985.356:686991): pid=24345 uid=0 auid=0 ses=22137 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=24345 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446979985.356:686992): pid=24345 uid=0 auid=0 ses=22137 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=24345 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446979985.356:686993): pid=24345 uid=0 auid=0 ses=22137 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=24345 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446980401.037:686994): pid=25628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446980401.037:686995): pid=25628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446980401.037:686996): pid=25627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446980401.037:686997): pid=25627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446980401.038:686998): pid=25628 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22138 res=1
type=LOGIN msg=audit(1446980401.038:686999): pid=25627 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22139 res=1
type=USER_START msg=audit(1446980401.058:687000): pid=25627 uid=0 auid=0 ses=22139 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1446980401.058:687001): pid=25628 uid=0 auid=0 ses=22138 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446980401.059:687002): pid=25627 uid=0 auid=0 ses=22139 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446980401.059:687003): pid=25628 uid=0 auid=0 ses=22138 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446980401.067:687004): pid=25628 uid=0 auid=0 ses=22138 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446980401.069:687005): pid=25628 uid=0 auid=0 ses=22138 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446980401.079:687006): pid=25627 uid=0 auid=0 ses=22139 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446980401.080:687007): pid=25627 uid=0 auid=0 ses=22139 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446980461.090:687008): pid=25852 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446980461.090:687009): pid=25852 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446980461.091:687010): pid=25852 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22140 res=1
type=USER_START msg=audit(1446980461.101:687011): pid=25852 uid=0 auid=0 ses=22140 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446980461.102:687012): pid=25852 uid=0 auid=0 ses=22140 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446980461.126:687013): pid=25852 uid=0 auid=0 ses=22140 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446980461.127:687014): pid=25852 uid=0 auid=0 ses=22140 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446981001.143:687015): pid=27479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446981001.143:687016): pid=27480 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446981001.143:687017): pid=27480 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446981001.143:687018): pid=27479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446981001.143:687019): pid=27480 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22141 res=1
type=LOGIN msg=audit(1446981001.143:687020): pid=27479 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22142 res=1
type=USER_START msg=audit(1446981001.158:687021): pid=27480 uid=0 auid=0 ses=22141 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1446981001.158:687022): pid=27479 uid=0 auid=0 ses=22142 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446981001.158:687023): pid=27480 uid=0 auid=0 ses=22141 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446981001.159:687024): pid=27479 uid=0 auid=0 ses=22142 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446981001.167:687025): pid=27480 uid=0 auid=0 ses=22141 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446981001.169:687026): pid=27479 uid=0 auid=0 ses=22142 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446981001.170:687027): pid=27480 uid=0 auid=0 ses=22141 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446981001.174:687028): pid=27479 uid=0 auid=0 ses=22142 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1446981182.914:687029): pid=28079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=28079 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446981182.915:687030): pid=28079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=28079 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446981182.915:687031): pid=28079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=28079 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446981182.958:687032): pid=28076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=28079 suid=74 rport=43796 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446981182.958:687033): pid=28076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=28079 suid=74 rport=43796 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446981183.087:687034): pid=28076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=43796 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446981183.087:687035): pid=28076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=43796 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446981183.097:687036): pid=28076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446981183.098:687037): pid=28076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=28079 suid=74 rport=43796 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446981183.099:687038): pid=28076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446981183.099:687039): pid=28076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446981183.099:687040): pid=28076 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22143 res=1
type=USER_ROLE_CHANGE msg=audit(1446981183.168:687041): pid=28076 uid=0 auid=0 ses=22143 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446981183.195:687042): pid=28076 uid=0 auid=0 ses=22143 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446981183.197:687043): pid=28076 uid=0 auid=0 ses=22143 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446981183.197:687044): pid=28076 uid=0 auid=0 ses=22143 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446981183.199:687045): pid=28082 uid=0 auid=0 ses=22143 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=28082 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446981183.199:687046): pid=28082 uid=0 auid=0 ses=22143 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=28082 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446981183.199:687047): pid=28082 uid=0 auid=0 ses=22143 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=28082 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446981183.200:687048): pid=28082 uid=0 auid=0 ses=22143 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446981183.219:687049): pid=28076 uid=0 auid=0 ses=22143 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446981183.219:687050): pid=28076 uid=0 auid=0 ses=22143 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446981183.222:687051): pid=28076 uid=0 auid=0 ses=22143 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446981183.223:687052): pid=28076 uid=0 auid=0 ses=22143 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446981183.223:687053): pid=28076 uid=0 auid=0 ses=22143 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=28076 suid=0 rport=43796 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446981183.223:687054): pid=28076 uid=0 auid=0 ses=22143 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=28076 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446981183.223:687055): pid=28076 uid=0 auid=0 ses=22143 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=28076 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446981183.224:687056): pid=28076 uid=0 auid=0 ses=22143 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=28076 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446981183.246:687057): pid=28090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=28090 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446981183.246:687058): pid=28090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=28090 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446981183.246:687059): pid=28090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=28090 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446981183.290:687060): pid=28089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=28090 suid=74 rport=43797 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446981183.290:687061): pid=28089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=28090 suid=74 rport=43797 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446981183.419:687062): pid=28089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=43797 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446981183.419:687063): pid=28089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=43797 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446981183.428:687064): pid=28089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446981183.429:687065): pid=28089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=28090 suid=74 rport=43797 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446981183.430:687066): pid=28089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446981183.430:687067): pid=28089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446981183.430:687068): pid=28089 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22144 res=1
type=USER_ROLE_CHANGE msg=audit(1446981183.497:687069): pid=28089 uid=0 auid=0 ses=22144 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446981183.519:687070): pid=28089 uid=0 auid=0 ses=22144 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446981183.521:687071): pid=28089 uid=0 auid=0 ses=22144 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446981183.521:687072): pid=28089 uid=0 auid=0 ses=22144 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446981183.523:687073): pid=28096 uid=0 auid=0 ses=22144 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=28096 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446981183.523:687074): pid=28096 uid=0 auid=0 ses=22144 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=28096 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446981183.523:687075): pid=28096 uid=0 auid=0 ses=22144 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=28096 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446981183.524:687076): pid=28096 uid=0 auid=0 ses=22144 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446981184.818:687077): pid=28089 uid=0 auid=0 ses=22144 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446981184.818:687078): pid=28089 uid=0 auid=0 ses=22144 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446981184.823:687079): pid=28089 uid=0 auid=0 ses=22144 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446981184.823:687080): pid=28089 uid=0 auid=0 ses=22144 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446981184.823:687081): pid=28089 uid=0 auid=0 ses=22144 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=28089 suid=0 rport=43797 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446981184.823:687082): pid=28089 uid=0 auid=0 ses=22144 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=28089 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446981184.823:687083): pid=28089 uid=0 auid=0 ses=22144 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=28089 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446981184.823:687084): pid=28089 uid=0 auid=0 ses=22144 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=28089 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446981184.852:687085): pid=28162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=28162 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446981184.852:687086): pid=28162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=28162 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446981184.852:687087): pid=28162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=28162 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446981184.897:687088): pid=28160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=28162 suid=74 rport=43798 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446981184.897:687089): pid=28160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=28162 suid=74 rport=43798 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446981185.021:687090): pid=28160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=43798 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446981185.022:687091): pid=28160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=43798 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446981185.028:687092): pid=28160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446981185.028:687093): pid=28160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=28162 suid=74 rport=43798 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446981185.030:687094): pid=28160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446981185.030:687095): pid=28160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446981185.031:687096): pid=28160 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22145 res=1
type=USER_ROLE_CHANGE msg=audit(1446981185.101:687097): pid=28160 uid=0 auid=0 ses=22145 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446981185.119:687098): pid=28160 uid=0 auid=0 ses=22145 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446981185.121:687099): pid=28160 uid=0 auid=0 ses=22145 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446981185.121:687100): pid=28160 uid=0 auid=0 ses=22145 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446981185.122:687101): pid=28173 uid=0 auid=0 ses=22145 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=28173 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446981185.122:687102): pid=28173 uid=0 auid=0 ses=22145 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=28173 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446981185.122:687103): pid=28173 uid=0 auid=0 ses=22145 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=28173 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446981185.123:687104): pid=28173 uid=0 auid=0 ses=22145 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446981185.140:687105): pid=28160 uid=0 auid=0 ses=22145 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446981185.140:687106): pid=28160 uid=0 auid=0 ses=22145 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446981185.144:687107): pid=28160 uid=0 auid=0 ses=22145 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446981185.144:687108): pid=28160 uid=0 auid=0 ses=22145 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446981185.144:687109): pid=28160 uid=0 auid=0 ses=22145 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=28160 suid=0 rport=43798 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446981185.144:687110): pid=28160 uid=0 auid=0 ses=22145 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=28160 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446981185.144:687111): pid=28160 uid=0 auid=0 ses=22145 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=28160 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446981185.144:687112): pid=28160 uid=0 auid=0 ses=22145 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=28160 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=SYSCALL msg=audit(1446981316.751:687113): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1446981601.198:687114): pid=29402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446981601.198:687115): pid=29403 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446981601.198:687116): pid=29402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446981601.198:687117): pid=29403 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446981601.199:687118): pid=29403 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22146 res=1
type=LOGIN msg=audit(1446981601.199:687119): pid=29402 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22147 res=1
type=USER_START msg=audit(1446981601.220:687120): pid=29402 uid=0 auid=0 ses=22147 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446981601.220:687121): pid=29402 uid=0 auid=0 ses=22147 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1446981601.223:687122): pid=29403 uid=0 auid=0 ses=22146 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446981601.223:687123): pid=29403 uid=0 auid=0 ses=22146 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446981601.231:687124): pid=29403 uid=0 auid=0 ses=22146 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446981601.232:687125): pid=29403 uid=0 auid=0 ses=22146 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446981601.237:687126): pid=29402 uid=0 auid=0 ses=22147 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446981601.239:687127): pid=29402 uid=0 auid=0 ses=22147 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446982201.251:687128): pid=31250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446982201.251:687129): pid=31249 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446982201.251:687130): pid=31250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446982201.251:687131): pid=31249 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446982201.252:687132): pid=31249 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22148 res=1
type=LOGIN msg=audit(1446982201.252:687133): pid=31250 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22149 res=1
type=USER_START msg=audit(1446982201.266:687134): pid=31249 uid=0 auid=0 ses=22148 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446982201.266:687135): pid=31249 uid=0 auid=0 ses=22148 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1446982201.266:687136): pid=31250 uid=0 auid=0 ses=22149 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446982201.267:687137): pid=31250 uid=0 auid=0 ses=22149 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446982201.274:687138): pid=31250 uid=0 auid=0 ses=22149 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446982201.279:687139): pid=31250 uid=0 auid=0 ses=22149 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446982201.279:687140): pid=31249 uid=0 auid=0 ses=22148 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446982201.283:687141): pid=31249 uid=0 auid=0 ses=22148 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1446982382.921:687142): pid=31808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=31808 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446982382.922:687143): pid=31808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=31808 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446982382.922:687144): pid=31808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=31808 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446982382.966:687145): pid=31807 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=31808 suid=74 rport=45776 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446982382.966:687146): pid=31807 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=31808 suid=74 rport=45776 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446982383.094:687147): pid=31807 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=45776 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446982383.094:687148): pid=31807 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=45776 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446982383.103:687149): pid=31807 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446982383.104:687150): pid=31807 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=31808 suid=74 rport=45776 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446982383.105:687151): pid=31807 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446982383.105:687152): pid=31807 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446982383.105:687153): pid=31807 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22150 res=1
type=USER_ROLE_CHANGE msg=audit(1446982383.175:687154): pid=31807 uid=0 auid=0 ses=22150 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446982383.196:687155): pid=31807 uid=0 auid=0 ses=22150 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446982383.200:687156): pid=31807 uid=0 auid=0 ses=22150 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446982383.200:687157): pid=31807 uid=0 auid=0 ses=22150 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446982383.202:687158): pid=31810 uid=0 auid=0 ses=22150 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=31810 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446982383.202:687159): pid=31810 uid=0 auid=0 ses=22150 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=31810 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446982383.202:687160): pid=31810 uid=0 auid=0 ses=22150 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=31810 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446982383.203:687161): pid=31810 uid=0 auid=0 ses=22150 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446982383.221:687162): pid=31807 uid=0 auid=0 ses=22150 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446982383.221:687163): pid=31807 uid=0 auid=0 ses=22150 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446982383.225:687164): pid=31807 uid=0 auid=0 ses=22150 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446982383.225:687165): pid=31807 uid=0 auid=0 ses=22150 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446982383.226:687166): pid=31807 uid=0 auid=0 ses=22150 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=31807 suid=0 rport=45776 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446982383.226:687167): pid=31807 uid=0 auid=0 ses=22150 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=31807 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446982383.226:687168): pid=31807 uid=0 auid=0 ses=22150 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=31807 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446982383.226:687169): pid=31807 uid=0 auid=0 ses=22150 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=31807 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446982383.249:687170): pid=31818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=31818 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446982383.249:687171): pid=31818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=31818 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446982383.249:687172): pid=31818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=31818 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446982383.293:687173): pid=31817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=31818 suid=74 rport=45777 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446982383.293:687174): pid=31817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=31818 suid=74 rport=45777 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446982383.422:687175): pid=31817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=45777 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446982383.422:687176): pid=31817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=45777 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446982383.429:687177): pid=31817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446982383.430:687178): pid=31817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=31818 suid=74 rport=45777 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446982383.432:687179): pid=31817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446982383.432:687180): pid=31817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446982383.433:687181): pid=31817 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22151 res=1
type=USER_ROLE_CHANGE msg=audit(1446982383.500:687182): pid=31817 uid=0 auid=0 ses=22151 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446982383.525:687183): pid=31817 uid=0 auid=0 ses=22151 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446982383.528:687184): pid=31817 uid=0 auid=0 ses=22151 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446982383.528:687185): pid=31817 uid=0 auid=0 ses=22151 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446982383.530:687186): pid=31820 uid=0 auid=0 ses=22151 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=31820 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446982383.530:687187): pid=31820 uid=0 auid=0 ses=22151 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=31820 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446982383.530:687188): pid=31820 uid=0 auid=0 ses=22151 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=31820 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446982383.531:687189): pid=31820 uid=0 auid=0 ses=22151 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446982384.840:687190): pid=31817 uid=0 auid=0 ses=22151 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446982384.840:687191): pid=31817 uid=0 auid=0 ses=22151 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446982384.845:687192): pid=31817 uid=0 auid=0 ses=22151 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446982384.845:687193): pid=31817 uid=0 auid=0 ses=22151 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446982384.845:687194): pid=31817 uid=0 auid=0 ses=22151 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=31817 suid=0 rport=45777 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446982384.846:687195): pid=31817 uid=0 auid=0 ses=22151 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=31817 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446982384.846:687196): pid=31817 uid=0 auid=0 ses=22151 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=31817 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446982384.846:687197): pid=31817 uid=0 auid=0 ses=22151 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=31817 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446982384.879:687198): pid=31873 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=31873 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446982384.880:687199): pid=31873 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=31873 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446982384.880:687200): pid=31873 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=31873 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446982384.924:687201): pid=31872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=31873 suid=74 rport=45779 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446982384.924:687202): pid=31872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=31873 suid=74 rport=45779 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446982385.052:687203): pid=31872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=45779 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446982385.052:687204): pid=31872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=45779 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446982385.061:687205): pid=31872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446982385.064:687206): pid=31872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=31873 suid=74 rport=45779 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446982385.064:687207): pid=31872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446982385.065:687208): pid=31872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446982385.065:687209): pid=31872 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22152 res=1
type=USER_ROLE_CHANGE msg=audit(1446982385.134:687210): pid=31872 uid=0 auid=0 ses=22152 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446982385.162:687211): pid=31872 uid=0 auid=0 ses=22152 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446982385.165:687212): pid=31872 uid=0 auid=0 ses=22152 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446982385.165:687213): pid=31872 uid=0 auid=0 ses=22152 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446982385.167:687214): pid=31875 uid=0 auid=0 ses=22152 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=31875 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446982385.167:687215): pid=31875 uid=0 auid=0 ses=22152 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=31875 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446982385.167:687216): pid=31875 uid=0 auid=0 ses=22152 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=31875 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446982385.168:687217): pid=31875 uid=0 auid=0 ses=22152 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446982385.192:687218): pid=31872 uid=0 auid=0 ses=22152 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446982385.192:687219): pid=31872 uid=0 auid=0 ses=22152 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446982385.195:687220): pid=31872 uid=0 auid=0 ses=22152 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446982385.195:687221): pid=31872 uid=0 auid=0 ses=22152 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446982385.196:687222): pid=31872 uid=0 auid=0 ses=22152 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=31872 suid=0 rport=45779 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446982385.196:687223): pid=31872 uid=0 auid=0 ses=22152 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=31872 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446982385.196:687224): pid=31872 uid=0 auid=0 ses=22152 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=31872 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446982385.196:687225): pid=31872 uid=0 auid=0 ses=22152 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=31872 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=SYSCALL msg=audit(1446982389.759:687226): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1446982801.302:687227): pid=808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446982801.302:687228): pid=809 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446982801.302:687229): pid=808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446982801.302:687230): pid=809 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446982801.303:687231): pid=808 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22153 res=1
type=LOGIN msg=audit(1446982801.303:687232): pid=809 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22154 res=1
type=USER_START msg=audit(1446982801.322:687233): pid=809 uid=0 auid=0 ses=22154 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446982801.322:687234): pid=809 uid=0 auid=0 ses=22154 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1446982801.323:687235): pid=808 uid=0 auid=0 ses=22153 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446982801.324:687236): pid=808 uid=0 auid=0 ses=22153 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446982801.333:687237): pid=809 uid=0 auid=0 ses=22154 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446982801.335:687238): pid=809 uid=0 auid=0 ses=22154 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446982801.341:687239): pid=808 uid=0 auid=0 ses=22153 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446982826.368:687240): pid=808 uid=0 auid=0 ses=22153 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=USER_ACCT msg=audit(1446983401.384:687241): pid=2665 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446983401.384:687242): pid=2665 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446983401.384:687243): pid=2664 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446983401.384:687244): pid=2665 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22155 res=1
type=CRED_ACQ msg=audit(1446983401.384:687245): pid=2664 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446983401.384:687246): pid=2664 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22156 res=1
type=USER_START msg=audit(1446983401.400:687247): pid=2664 uid=0 auid=0 ses=22156 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446983401.400:687248): pid=2664 uid=0 auid=0 ses=22156 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1446983401.401:687249): pid=2665 uid=0 auid=0 ses=22155 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446983401.401:687250): pid=2665 uid=0 auid=0 ses=22155 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446983401.406:687251): pid=2665 uid=0 auid=0 ses=22155 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446983401.407:687252): pid=2665 uid=0 auid=0 ses=22155 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446983401.416:687253): pid=2664 uid=0 auid=0 ses=22156 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446983401.417:687254): pid=2664 uid=0 auid=0 ses=22156 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1446983582.839:687255): pid=3225 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=3225 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446983582.840:687256): pid=3225 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=3225 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446983582.840:687257): pid=3225 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=3225 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446983582.884:687258): pid=3224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=3225 suid=74 rport=47756 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446983582.884:687259): pid=3224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=3225 suid=74 rport=47756 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446983583.013:687260): pid=3224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=47756 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446983583.014:687261): pid=3224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=47756 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446983583.023:687262): pid=3224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446983583.024:687263): pid=3224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3225 suid=74 rport=47756 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446983583.025:687264): pid=3224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446983583.026:687265): pid=3224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446983583.026:687266): pid=3224 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22157 res=1
type=USER_ROLE_CHANGE msg=audit(1446983583.095:687267): pid=3224 uid=0 auid=0 ses=22157 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446983583.116:687268): pid=3224 uid=0 auid=0 ses=22157 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446983583.119:687269): pid=3224 uid=0 auid=0 ses=22157 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446983583.119:687270): pid=3224 uid=0 auid=0 ses=22157 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446983583.120:687271): pid=3227 uid=0 auid=0 ses=22157 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=3227 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446983583.121:687272): pid=3227 uid=0 auid=0 ses=22157 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=3227 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446983583.121:687273): pid=3227 uid=0 auid=0 ses=22157 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=3227 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446983583.122:687274): pid=3227 uid=0 auid=0 ses=22157 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446983583.140:687275): pid=3224 uid=0 auid=0 ses=22157 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446983583.140:687276): pid=3224 uid=0 auid=0 ses=22157 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446983583.145:687277): pid=3224 uid=0 auid=0 ses=22157 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446983583.145:687278): pid=3224 uid=0 auid=0 ses=22157 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446983583.146:687279): pid=3224 uid=0 auid=0 ses=22157 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3224 suid=0 rport=47756 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446983583.146:687280): pid=3224 uid=0 auid=0 ses=22157 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=3224 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446983583.146:687281): pid=3224 uid=0 auid=0 ses=22157 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=3224 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446983583.146:687282): pid=3224 uid=0 auid=0 ses=22157 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=3224 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446983583.167:687283): pid=3235 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=3235 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446983583.167:687284): pid=3235 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=3235 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446983583.167:687285): pid=3235 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=3235 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446983583.211:687286): pid=3234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=3235 suid=74 rport=47758 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446983583.211:687287): pid=3234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=3235 suid=74 rport=47758 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446983583.340:687288): pid=3234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=47758 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446983583.340:687289): pid=3234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=47758 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446983583.344:687290): pid=3234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446983583.344:687291): pid=3234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3235 suid=74 rport=47758 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446983583.346:687292): pid=3234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446983583.347:687293): pid=3234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446983583.347:687294): pid=3234 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22158 res=1
type=USER_ROLE_CHANGE msg=audit(1446983583.411:687295): pid=3234 uid=0 auid=0 ses=22158 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446983583.434:687296): pid=3234 uid=0 auid=0 ses=22158 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446983583.438:687297): pid=3234 uid=0 auid=0 ses=22158 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446983583.438:687298): pid=3234 uid=0 auid=0 ses=22158 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446983583.440:687299): pid=3237 uid=0 auid=0 ses=22158 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=3237 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446983583.440:687300): pid=3237 uid=0 auid=0 ses=22158 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=3237 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446983583.440:687301): pid=3237 uid=0 auid=0 ses=22158 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=3237 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446983583.441:687302): pid=3237 uid=0 auid=0 ses=22158 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446983584.730:687303): pid=3234 uid=0 auid=0 ses=22158 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446983584.730:687304): pid=3234 uid=0 auid=0 ses=22158 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446983584.734:687305): pid=3234 uid=0 auid=0 ses=22158 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446983584.734:687306): pid=3234 uid=0 auid=0 ses=22158 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446983584.735:687307): pid=3234 uid=0 auid=0 ses=22158 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3234 suid=0 rport=47758 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446983584.735:687308): pid=3234 uid=0 auid=0 ses=22158 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=3234 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446983584.735:687309): pid=3234 uid=0 auid=0 ses=22158 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=3234 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446983584.735:687310): pid=3234 uid=0 auid=0 ses=22158 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=3234 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446983584.766:687311): pid=3290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=3290 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446983584.766:687312): pid=3290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=3290 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446983584.766:687313): pid=3290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=3290 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446983584.810:687314): pid=3289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=3290 suid=74 rport=47760 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446983584.810:687315): pid=3289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=3290 suid=74 rport=47760 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446983584.932:687316): pid=3289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=47760 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446983584.932:687317): pid=3289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=47760 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446983584.937:687318): pid=3289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446983584.937:687319): pid=3289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3290 suid=74 rport=47760 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446983584.940:687320): pid=3289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446983584.940:687321): pid=3289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446983584.940:687322): pid=3289 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22159 res=1
type=USER_ROLE_CHANGE msg=audit(1446983585.006:687323): pid=3289 uid=0 auid=0 ses=22159 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446983585.028:687324): pid=3289 uid=0 auid=0 ses=22159 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446983585.030:687325): pid=3289 uid=0 auid=0 ses=22159 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446983585.030:687326): pid=3289 uid=0 auid=0 ses=22159 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446983585.032:687327): pid=3292 uid=0 auid=0 ses=22159 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=3292 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446983585.032:687328): pid=3292 uid=0 auid=0 ses=22159 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=3292 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446983585.032:687329): pid=3292 uid=0 auid=0 ses=22159 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=3292 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446983585.032:687330): pid=3292 uid=0 auid=0 ses=22159 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446983585.048:687331): pid=3289 uid=0 auid=0 ses=22159 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446983585.048:687332): pid=3289 uid=0 auid=0 ses=22159 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446983585.051:687333): pid=3289 uid=0 auid=0 ses=22159 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446983585.051:687334): pid=3289 uid=0 auid=0 ses=22159 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446983585.052:687335): pid=3289 uid=0 auid=0 ses=22159 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3289 suid=0 rport=47760 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446983585.052:687336): pid=3289 uid=0 auid=0 ses=22159 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=3289 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446983585.052:687337): pid=3289 uid=0 auid=0 ses=22159 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=3289 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446983585.052:687338): pid=3289 uid=0 auid=0 ses=22159 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=3289 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446984001.436:687339): pid=4581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446984001.436:687340): pid=4582 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446984001.436:687341): pid=4581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446984001.436:687342): pid=4582 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446984001.438:687343): pid=4581 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22160 res=1
type=LOGIN msg=audit(1446984001.438:687344): pid=4582 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22161 res=1
type=USER_START msg=audit(1446984001.455:687345): pid=4581 uid=0 auid=0 ses=22160 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1446984001.455:687346): pid=4582 uid=0 auid=0 ses=22161 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446984001.456:687347): pid=4582 uid=0 auid=0 ses=22161 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446984001.456:687348): pid=4581 uid=0 auid=0 ses=22160 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446984001.464:687349): pid=4582 uid=0 auid=0 ses=22161 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446984001.465:687350): pid=4582 uid=0 auid=0 ses=22161 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446984001.475:687351): pid=4581 uid=0 auid=0 ses=22160 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446984001.476:687352): pid=4581 uid=0 auid=0 ses=22160 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446984061.482:687353): pid=4817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446984061.482:687354): pid=4817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446984061.482:687355): pid=4817 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22162 res=1
type=USER_START msg=audit(1446984061.494:687356): pid=4817 uid=0 auid=0 ses=22162 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446984061.494:687357): pid=4817 uid=0 auid=0 ses=22162 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446984061.519:687358): pid=4817 uid=0 auid=0 ses=22162 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446984061.521:687359): pid=4817 uid=0 auid=0 ses=22162 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1446984526.659:687360): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1446984601.533:687361): pid=6486 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446984601.533:687362): pid=6486 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446984601.533:687363): pid=6486 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22163 res=1
type=USER_ACCT msg=audit(1446984601.533:687364): pid=6485 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446984601.534:687365): pid=6485 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446984601.534:687366): pid=6485 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22164 res=1
type=USER_START msg=audit(1446984601.548:687367): pid=6485 uid=0 auid=0 ses=22164 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446984601.548:687368): pid=6485 uid=0 auid=0 ses=22164 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1446984601.550:687369): pid=6486 uid=0 auid=0 ses=22163 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446984601.550:687370): pid=6486 uid=0 auid=0 ses=22163 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446984601.558:687371): pid=6486 uid=0 auid=0 ses=22163 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446984601.560:687372): pid=6486 uid=0 auid=0 ses=22163 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446984601.563:687373): pid=6485 uid=0 auid=0 ses=22164 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446984626.592:687374): pid=6485 uid=0 auid=0 ses=22164 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=CRYPTO_KEY_USER msg=audit(1446984782.694:687375): pid=7045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=7045 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446984782.695:687376): pid=7045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=7045 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446984782.695:687377): pid=7045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=7045 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446984782.738:687378): pid=7044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=7045 suid=74 rport=49737 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446984782.738:687379): pid=7044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=7045 suid=74 rport=49737 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446984782.868:687380): pid=7044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=49737 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446984782.868:687381): pid=7044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=49737 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446984782.877:687382): pid=7044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446984782.878:687383): pid=7044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7045 suid=74 rport=49737 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446984782.879:687384): pid=7044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446984782.880:687385): pid=7044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446984782.880:687386): pid=7044 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22165 res=1
type=USER_ROLE_CHANGE msg=audit(1446984782.951:687387): pid=7044 uid=0 auid=0 ses=22165 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446984782.973:687388): pid=7044 uid=0 auid=0 ses=22165 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446984782.976:687389): pid=7044 uid=0 auid=0 ses=22165 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446984782.976:687390): pid=7044 uid=0 auid=0 ses=22165 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446984782.977:687391): pid=7047 uid=0 auid=0 ses=22165 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=7047 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446984782.977:687392): pid=7047 uid=0 auid=0 ses=22165 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=7047 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446984782.977:687393): pid=7047 uid=0 auid=0 ses=22165 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=7047 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446984782.978:687394): pid=7047 uid=0 auid=0 ses=22165 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446984782.996:687395): pid=7044 uid=0 auid=0 ses=22165 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446984782.997:687396): pid=7044 uid=0 auid=0 ses=22165 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446984783.002:687397): pid=7044 uid=0 auid=0 ses=22165 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446984783.003:687398): pid=7044 uid=0 auid=0 ses=22165 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446984783.003:687399): pid=7044 uid=0 auid=0 ses=22165 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7044 suid=0 rport=49737 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446984783.003:687400): pid=7044 uid=0 auid=0 ses=22165 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=7044 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446984783.004:687401): pid=7044 uid=0 auid=0 ses=22165 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=7044 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446984783.004:687402): pid=7044 uid=0 auid=0 ses=22165 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=7044 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446984783.022:687403): pid=7055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=7055 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446984783.023:687404): pid=7055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=7055 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446984783.023:687405): pid=7055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=7055 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446984783.067:687406): pid=7054 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=7055 suid=74 rport=49738 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446984783.067:687407): pid=7054 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=7055 suid=74 rport=49738 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446984783.197:687408): pid=7054 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=49738 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446984783.197:687409): pid=7054 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=49738 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446984783.204:687410): pid=7054 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446984783.205:687411): pid=7054 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7055 suid=74 rport=49738 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446984783.208:687412): pid=7054 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446984783.209:687413): pid=7054 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446984783.209:687414): pid=7054 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22166 res=1
type=USER_ROLE_CHANGE msg=audit(1446984783.274:687415): pid=7054 uid=0 auid=0 ses=22166 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446984783.293:687416): pid=7054 uid=0 auid=0 ses=22166 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446984783.296:687417): pid=7054 uid=0 auid=0 ses=22166 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446984783.296:687418): pid=7054 uid=0 auid=0 ses=22166 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446984783.297:687419): pid=7057 uid=0 auid=0 ses=22166 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=7057 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446984783.298:687420): pid=7057 uid=0 auid=0 ses=22166 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=7057 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446984783.298:687421): pid=7057 uid=0 auid=0 ses=22166 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=7057 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446984783.299:687422): pid=7057 uid=0 auid=0 ses=22166 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446984784.589:687423): pid=7054 uid=0 auid=0 ses=22166 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446984784.589:687424): pid=7054 uid=0 auid=0 ses=22166 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446984784.592:687425): pid=7054 uid=0 auid=0 ses=22166 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446984784.592:687426): pid=7054 uid=0 auid=0 ses=22166 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446984784.593:687427): pid=7054 uid=0 auid=0 ses=22166 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7054 suid=0 rport=49738 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446984784.593:687428): pid=7054 uid=0 auid=0 ses=22166 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=7054 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446984784.593:687429): pid=7054 uid=0 auid=0 ses=22166 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=7054 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446984784.593:687430): pid=7054 uid=0 auid=0 ses=22166 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=7054 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446984784.629:687431): pid=7110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=7110 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446984784.629:687432): pid=7110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=7110 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446984784.629:687433): pid=7110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=7110 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446984784.674:687434): pid=7109 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=7110 suid=74 rport=49741 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446984784.675:687435): pid=7109 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=7110 suid=74 rport=49741 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446984784.801:687436): pid=7109 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=49741 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446984784.801:687437): pid=7109 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=49741 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446984784.809:687438): pid=7109 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446984784.810:687439): pid=7109 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7110 suid=74 rport=49741 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446984784.812:687440): pid=7109 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446984784.812:687441): pid=7109 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446984784.812:687442): pid=7109 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22167 res=1
type=USER_ROLE_CHANGE msg=audit(1446984784.880:687443): pid=7109 uid=0 auid=0 ses=22167 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446984784.901:687444): pid=7109 uid=0 auid=0 ses=22167 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446984784.904:687445): pid=7109 uid=0 auid=0 ses=22167 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446984784.904:687446): pid=7109 uid=0 auid=0 ses=22167 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446984784.905:687447): pid=7112 uid=0 auid=0 ses=22167 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=7112 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446984784.905:687448): pid=7112 uid=0 auid=0 ses=22167 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=7112 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446984784.905:687449): pid=7112 uid=0 auid=0 ses=22167 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=7112 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446984784.906:687450): pid=7112 uid=0 auid=0 ses=22167 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446984784.923:687451): pid=7109 uid=0 auid=0 ses=22167 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446984784.923:687452): pid=7109 uid=0 auid=0 ses=22167 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446984784.927:687453): pid=7109 uid=0 auid=0 ses=22167 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446984784.927:687454): pid=7109 uid=0 auid=0 ses=22167 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446984784.928:687455): pid=7109 uid=0 auid=0 ses=22167 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7109 suid=0 rport=49741 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446984784.928:687456): pid=7109 uid=0 auid=0 ses=22167 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=7109 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446984784.928:687457): pid=7109 uid=0 auid=0 ses=22167 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=7109 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446984784.928:687458): pid=7109 uid=0 auid=0 ses=22167 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=7109 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446985201.612:687459): pid=8407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446985201.612:687460): pid=8408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446985201.612:687462): pid=8407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446985201.612:687461): pid=8408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446985201.613:687463): pid=8407 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22168 res=1
type=LOGIN msg=audit(1446985201.613:687464): pid=8408 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22169 res=1
type=USER_START msg=audit(1446985201.632:687465): pid=8408 uid=0 auid=0 ses=22169 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1446985201.632:687466): pid=8407 uid=0 auid=0 ses=22168 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446985201.633:687467): pid=8408 uid=0 auid=0 ses=22169 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446985201.633:687468): pid=8407 uid=0 auid=0 ses=22168 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446985201.642:687469): pid=8408 uid=0 auid=0 ses=22169 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446985201.643:687470): pid=8408 uid=0 auid=0 ses=22169 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446985201.649:687471): pid=8407 uid=0 auid=0 ses=22168 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446985226.678:687472): pid=8407 uid=0 auid=0 ses=22168 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=USER_ACCT msg=audit(1446985801.699:687473): pid=10252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446985801.699:687474): pid=10251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446985801.699:687475): pid=10252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446985801.699:687476): pid=10251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446985801.700:687477): pid=10252 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22171 res=1
type=LOGIN msg=audit(1446985801.700:687478): pid=10251 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22170 res=1
type=USER_START msg=audit(1446985801.718:687479): pid=10251 uid=0 auid=0 ses=22170 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1446985801.718:687480): pid=10252 uid=0 auid=0 ses=22171 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446985801.718:687481): pid=10251 uid=0 auid=0 ses=22170 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446985801.718:687482): pid=10252 uid=0 auid=0 ses=22171 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446985801.726:687483): pid=10252 uid=0 auid=0 ses=22171 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446985801.728:687484): pid=10252 uid=0 auid=0 ses=22171 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446985801.730:687485): pid=10251 uid=0 auid=0 ses=22170 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446985826.751:687486): pid=10251 uid=0 auid=0 ses=22170 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=CRYPTO_KEY_USER msg=audit(1446985982.676:687487): pid=10814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=10814 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446985982.676:687488): pid=10814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=10814 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446985982.676:687489): pid=10814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=10814 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446985982.721:687490): pid=10813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=10814 suid=74 rport=51718 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446985982.721:687491): pid=10813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=10814 suid=74 rport=51718 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446985982.848:687492): pid=10813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=51718 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446985982.848:687493): pid=10813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=51718 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446985982.856:687494): pid=10813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446985982.858:687495): pid=10813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10814 suid=74 rport=51718 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446985982.859:687496): pid=10813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446985982.859:687497): pid=10813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446985982.860:687498): pid=10813 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22172 res=1
type=USER_ROLE_CHANGE msg=audit(1446985982.928:687499): pid=10813 uid=0 auid=0 ses=22172 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446985982.953:687500): pid=10813 uid=0 auid=0 ses=22172 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446985982.956:687501): pid=10813 uid=0 auid=0 ses=22172 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446985982.956:687502): pid=10813 uid=0 auid=0 ses=22172 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446985982.959:687503): pid=10816 uid=0 auid=0 ses=22172 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=10816 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446985982.959:687504): pid=10816 uid=0 auid=0 ses=22172 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=10816 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446985982.959:687505): pid=10816 uid=0 auid=0 ses=22172 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=10816 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446985982.959:687506): pid=10816 uid=0 auid=0 ses=22172 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446985982.979:687507): pid=10813 uid=0 auid=0 ses=22172 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446985982.979:687508): pid=10813 uid=0 auid=0 ses=22172 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446985982.983:687509): pid=10813 uid=0 auid=0 ses=22172 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446985982.983:687510): pid=10813 uid=0 auid=0 ses=22172 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446985982.984:687511): pid=10813 uid=0 auid=0 ses=22172 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10813 suid=0 rport=51718 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446985982.984:687512): pid=10813 uid=0 auid=0 ses=22172 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=10813 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446985982.984:687513): pid=10813 uid=0 auid=0 ses=22172 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=10813 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446985982.984:687514): pid=10813 uid=0 auid=0 ses=22172 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=10813 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446985983.005:687515): pid=10824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=10824 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446985983.005:687516): pid=10824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=10824 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446985983.005:687517): pid=10824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=10824 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446985983.050:687518): pid=10823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=10824 suid=74 rport=51719 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446985983.051:687519): pid=10823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=10824 suid=74 rport=51719 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446985983.179:687520): pid=10823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=51719 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446985983.179:687521): pid=10823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=51719 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446985983.188:687522): pid=10823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446985983.190:687523): pid=10823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10824 suid=74 rport=51719 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446985983.192:687524): pid=10823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446985983.192:687525): pid=10823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446985983.192:687526): pid=10823 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22173 res=1
type=USER_ROLE_CHANGE msg=audit(1446985983.256:687527): pid=10823 uid=0 auid=0 ses=22173 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446985983.277:687528): pid=10823 uid=0 auid=0 ses=22173 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446985983.280:687529): pid=10823 uid=0 auid=0 ses=22173 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446985983.280:687530): pid=10823 uid=0 auid=0 ses=22173 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446985983.282:687531): pid=10826 uid=0 auid=0 ses=22173 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=10826 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446985983.282:687532): pid=10826 uid=0 auid=0 ses=22173 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=10826 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446985983.282:687533): pid=10826 uid=0 auid=0 ses=22173 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=10826 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446985983.283:687534): pid=10826 uid=0 auid=0 ses=22173 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446985984.576:687535): pid=10823 uid=0 auid=0 ses=22173 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446985984.576:687536): pid=10823 uid=0 auid=0 ses=22173 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446985984.582:687537): pid=10823 uid=0 auid=0 ses=22173 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446985984.583:687538): pid=10823 uid=0 auid=0 ses=22173 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446985984.583:687539): pid=10823 uid=0 auid=0 ses=22173 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10823 suid=0 rport=51719 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446985984.583:687540): pid=10823 uid=0 auid=0 ses=22173 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=10823 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446985984.583:687541): pid=10823 uid=0 auid=0 ses=22173 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=10823 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446985984.583:687542): pid=10823 uid=0 auid=0 ses=22173 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=10823 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446985984.619:687543): pid=10879 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=10879 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446985984.620:687544): pid=10879 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=10879 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446985984.620:687545): pid=10879 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=10879 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446985984.664:687546): pid=10878 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=10879 suid=74 rport=51721 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446985984.664:687547): pid=10878 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=10879 suid=74 rport=51721 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446985984.792:687548): pid=10878 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=51721 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446985984.792:687549): pid=10878 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=51721 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446985984.802:687550): pid=10878 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446985984.802:687551): pid=10878 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10879 suid=74 rport=51721 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446985984.804:687552): pid=10878 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446985984.805:687553): pid=10878 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446985984.805:687554): pid=10878 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22174 res=1
type=USER_ROLE_CHANGE msg=audit(1446985984.869:687555): pid=10878 uid=0 auid=0 ses=22174 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446985984.889:687556): pid=10878 uid=0 auid=0 ses=22174 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446985984.892:687557): pid=10878 uid=0 auid=0 ses=22174 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446985984.892:687558): pid=10878 uid=0 auid=0 ses=22174 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446985984.893:687559): pid=10881 uid=0 auid=0 ses=22174 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=10881 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446985984.893:687560): pid=10881 uid=0 auid=0 ses=22174 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=10881 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446985984.893:687561): pid=10881 uid=0 auid=0 ses=22174 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=10881 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446985984.894:687562): pid=10881 uid=0 auid=0 ses=22174 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446985984.912:687563): pid=10878 uid=0 auid=0 ses=22174 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446985984.912:687564): pid=10878 uid=0 auid=0 ses=22174 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446985984.918:687565): pid=10878 uid=0 auid=0 ses=22174 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446985984.918:687566): pid=10878 uid=0 auid=0 ses=22174 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446985984.919:687567): pid=10878 uid=0 auid=0 ses=22174 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10878 suid=0 rport=51721 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446985984.919:687568): pid=10878 uid=0 auid=0 ses=22174 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=10878 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446985984.919:687569): pid=10878 uid=0 auid=0 ses=22174 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=10878 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446985984.919:687570): pid=10878 uid=0 auid=0 ses=22174 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=10878 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446986401.771:687571): pid=12169 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446986401.771:687572): pid=12169 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446986401.772:687573): pid=12170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446986401.772:687574): pid=12170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446986401.773:687575): pid=12169 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22175 res=1
type=LOGIN msg=audit(1446986401.773:687576): pid=12170 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22176 res=1
type=USER_START msg=audit(1446986401.791:687577): pid=12170 uid=0 auid=0 ses=22176 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446986401.792:687578): pid=12170 uid=0 auid=0 ses=22176 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1446986401.793:687579): pid=12169 uid=0 auid=0 ses=22175 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446986401.793:687580): pid=12169 uid=0 auid=0 ses=22175 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446986401.806:687581): pid=12170 uid=0 auid=0 ses=22176 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446986401.808:687582): pid=12170 uid=0 auid=0 ses=22176 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446986401.811:687583): pid=12169 uid=0 auid=0 ses=22175 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446986426.838:687584): pid=12169 uid=0 auid=0 ses=22175 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=SYSCALL msg=audit(1446986655.690:687585): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1446987001.862:687587): pid=14016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446987001.862:687586): pid=14017 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446987001.862:687588): pid=14016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446987001.862:687589): pid=14017 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446987001.862:687590): pid=14017 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22177 res=1
type=LOGIN msg=audit(1446987001.862:687591): pid=14016 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22178 res=1
type=USER_START msg=audit(1446987001.880:687592): pid=14017 uid=0 auid=0 ses=22177 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1446987001.881:687593): pid=14016 uid=0 auid=0 ses=22178 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446987001.881:687594): pid=14017 uid=0 auid=0 ses=22177 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446987001.881:687595): pid=14016 uid=0 auid=0 ses=22178 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446987001.886:687596): pid=14017 uid=0 auid=0 ses=22177 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446987001.887:687597): pid=14017 uid=0 auid=0 ses=22177 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446987001.900:687598): pid=14016 uid=0 auid=0 ses=22178 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446987001.901:687599): pid=14016 uid=0 auid=0 ses=22178 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1446987182.652:687600): pid=14577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=14577 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446987182.652:687601): pid=14577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=14577 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446987182.652:687602): pid=14577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=14577 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446987182.697:687603): pid=14576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=14577 suid=74 rport=53695 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446987182.697:687604): pid=14576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=14577 suid=74 rport=53695 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446987182.827:687605): pid=14576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=53695 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446987182.827:687606): pid=14576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=53695 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446987182.834:687607): pid=14576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446987182.836:687608): pid=14576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14577 suid=74 rport=53695 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446987182.841:687609): pid=14576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446987182.842:687610): pid=14576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446987182.842:687611): pid=14576 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22179 res=1
type=USER_ROLE_CHANGE msg=audit(1446987182.915:687612): pid=14576 uid=0 auid=0 ses=22179 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446987182.933:687613): pid=14576 uid=0 auid=0 ses=22179 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446987182.938:687614): pid=14576 uid=0 auid=0 ses=22179 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446987182.938:687615): pid=14576 uid=0 auid=0 ses=22179 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446987182.940:687616): pid=14579 uid=0 auid=0 ses=22179 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=14579 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446987182.940:687617): pid=14579 uid=0 auid=0 ses=22179 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=14579 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446987182.940:687618): pid=14579 uid=0 auid=0 ses=22179 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=14579 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446987182.941:687619): pid=14579 uid=0 auid=0 ses=22179 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446987182.961:687620): pid=14576 uid=0 auid=0 ses=22179 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446987182.961:687621): pid=14576 uid=0 auid=0 ses=22179 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446987182.964:687622): pid=14576 uid=0 auid=0 ses=22179 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446987182.964:687623): pid=14576 uid=0 auid=0 ses=22179 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446987182.964:687624): pid=14576 uid=0 auid=0 ses=22179 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14576 suid=0 rport=53695 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446987182.964:687625): pid=14576 uid=0 auid=0 ses=22179 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=14576 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446987182.964:687626): pid=14576 uid=0 auid=0 ses=22179 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=14576 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446987182.965:687627): pid=14576 uid=0 auid=0 ses=22179 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=14576 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446987182.992:687628): pid=14587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=14587 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446987182.992:687629): pid=14587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=14587 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446987182.992:687630): pid=14587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=14587 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446987183.036:687631): pid=14586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=14587 suid=74 rport=53699 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446987183.036:687632): pid=14586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=14587 suid=74 rport=53699 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446987183.163:687633): pid=14586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=53699 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446987183.163:687634): pid=14586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=53699 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446987183.169:687635): pid=14586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446987183.169:687636): pid=14586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14587 suid=74 rport=53699 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446987183.171:687637): pid=14586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446987183.172:687638): pid=14586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446987183.172:687639): pid=14586 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22180 res=1
type=USER_ROLE_CHANGE msg=audit(1446987183.236:687640): pid=14586 uid=0 auid=0 ses=22180 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446987183.258:687641): pid=14586 uid=0 auid=0 ses=22180 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446987183.262:687642): pid=14586 uid=0 auid=0 ses=22180 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446987183.262:687643): pid=14586 uid=0 auid=0 ses=22180 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446987183.263:687644): pid=14589 uid=0 auid=0 ses=22180 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=14589 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446987183.263:687645): pid=14589 uid=0 auid=0 ses=22180 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=14589 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446987183.264:687646): pid=14589 uid=0 auid=0 ses=22180 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=14589 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446987183.264:687647): pid=14589 uid=0 auid=0 ses=22180 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446987184.523:687648): pid=14586 uid=0 auid=0 ses=22180 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446987184.523:687649): pid=14586 uid=0 auid=0 ses=22180 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446987184.527:687650): pid=14586 uid=0 auid=0 ses=22180 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446987184.527:687651): pid=14586 uid=0 auid=0 ses=22180 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446987184.527:687652): pid=14586 uid=0 auid=0 ses=22180 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14586 suid=0 rport=53699 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446987184.527:687653): pid=14586 uid=0 auid=0 ses=22180 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=14586 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446987184.528:687654): pid=14586 uid=0 auid=0 ses=22180 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=14586 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446987184.528:687655): pid=14586 uid=0 auid=0 ses=22180 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=14586 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446987184.559:687656): pid=14642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=14642 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446987184.560:687657): pid=14642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=14642 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446987184.560:687658): pid=14642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=14642 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446987184.605:687659): pid=14641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=14642 suid=74 rport=53700 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446987184.606:687660): pid=14641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=14642 suid=74 rport=53700 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446987184.734:687661): pid=14641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=53700 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446987184.734:687662): pid=14641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=53700 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446987184.739:687663): pid=14641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446987184.740:687664): pid=14641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14642 suid=74 rport=53700 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446987184.744:687665): pid=14641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446987184.744:687666): pid=14641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446987184.744:687667): pid=14641 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22181 res=1
type=USER_ROLE_CHANGE msg=audit(1446987184.809:687668): pid=14641 uid=0 auid=0 ses=22181 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446987184.835:687669): pid=14641 uid=0 auid=0 ses=22181 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446987184.838:687670): pid=14641 uid=0 auid=0 ses=22181 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446987184.838:687671): pid=14641 uid=0 auid=0 ses=22181 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446987184.839:687672): pid=14644 uid=0 auid=0 ses=22181 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=14644 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446987184.839:687673): pid=14644 uid=0 auid=0 ses=22181 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=14644 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446987184.839:687674): pid=14644 uid=0 auid=0 ses=22181 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=14644 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446987184.840:687675): pid=14644 uid=0 auid=0 ses=22181 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446987184.857:687676): pid=14641 uid=0 auid=0 ses=22181 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446987184.857:687677): pid=14641 uid=0 auid=0 ses=22181 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446987184.861:687678): pid=14641 uid=0 auid=0 ses=22181 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446987184.861:687679): pid=14641 uid=0 auid=0 ses=22181 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446987184.862:687680): pid=14641 uid=0 auid=0 ses=22181 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14641 suid=0 rport=53700 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446987184.862:687681): pid=14641 uid=0 auid=0 ses=22181 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=14641 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446987184.862:687682): pid=14641 uid=0 auid=0 ses=22181 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=14641 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446987184.862:687683): pid=14641 uid=0 auid=0 ses=22181 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=14641 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446987601.925:687684): pid=16053 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446987601.925:687685): pid=16053 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446987601.926:687686): pid=16053 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22182 res=1
type=USER_ACCT msg=audit(1446987601.931:687687): pid=16052 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446987601.931:687688): pid=16052 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446987601.931:687689): pid=16052 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22183 res=1
type=USER_START msg=audit(1446987601.944:687690): pid=16053 uid=0 auid=0 ses=22182 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446987601.945:687691): pid=16053 uid=0 auid=0 ses=22182 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1446987601.946:687692): pid=16052 uid=0 auid=0 ses=22183 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446987601.946:687693): pid=16052 uid=0 auid=0 ses=22183 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446987601.952:687694): pid=16053 uid=0 auid=0 ses=22182 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446987601.954:687695): pid=16053 uid=0 auid=0 ses=22182 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446987601.961:687696): pid=16052 uid=0 auid=0 ses=22183 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446987601.963:687697): pid=16052 uid=0 auid=0 ses=22183 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446987661.971:687698): pid=16288 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446987661.972:687699): pid=16288 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446987661.972:687700): pid=16288 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22184 res=1
type=USER_START msg=audit(1446987661.982:687701): pid=16288 uid=0 auid=0 ses=22184 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446987661.982:687702): pid=16288 uid=0 auid=0 ses=22184 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446987662.007:687703): pid=16288 uid=0 auid=0 ses=22184 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446987662.009:687704): pid=16288 uid=0 auid=0 ses=22184 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446988201.027:687705): pid=17894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446988201.027:687706): pid=17895 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446988201.027:687707): pid=17894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446988201.027:687708): pid=17895 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446988201.028:687709): pid=17895 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22185 res=1
type=LOGIN msg=audit(1446988201.028:687710): pid=17894 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22186 res=1
type=USER_START msg=audit(1446988201.044:687711): pid=17894 uid=0 auid=0 ses=22186 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446988201.044:687712): pid=17894 uid=0 auid=0 ses=22186 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1446988201.045:687713): pid=17895 uid=0 auid=0 ses=22185 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446988201.046:687714): pid=17895 uid=0 auid=0 ses=22185 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446988201.053:687715): pid=17895 uid=0 auid=0 ses=22185 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446988201.054:687716): pid=17895 uid=0 auid=0 ses=22185 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446988201.059:687717): pid=17894 uid=0 auid=0 ses=22186 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446988226.084:687718): pid=17894 uid=0 auid=0 ses=22186 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=CRYPTO_KEY_USER msg=audit(1446988383.112:687719): pid=18495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=18495 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446988383.112:687720): pid=18495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=18495 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446988383.112:687721): pid=18495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=18495 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446988383.156:687722): pid=18494 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=18495 suid=74 rport=55676 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446988383.156:687723): pid=18494 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=18495 suid=74 rport=55676 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446988383.286:687724): pid=18494 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=55676 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446988383.286:687725): pid=18494 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=55676 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446988383.294:687726): pid=18494 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446988383.296:687727): pid=18494 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18495 suid=74 rport=55676 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446988383.296:687728): pid=18494 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446988383.297:687729): pid=18494 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446988383.297:687730): pid=18494 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22187 res=1
type=USER_ROLE_CHANGE msg=audit(1446988383.364:687731): pid=18494 uid=0 auid=0 ses=22187 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446988383.392:687732): pid=18494 uid=0 auid=0 ses=22187 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446988383.396:687733): pid=18494 uid=0 auid=0 ses=22187 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446988383.396:687734): pid=18494 uid=0 auid=0 ses=22187 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446988383.397:687735): pid=18497 uid=0 auid=0 ses=22187 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=18497 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446988383.398:687736): pid=18497 uid=0 auid=0 ses=22187 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=18497 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446988383.398:687737): pid=18497 uid=0 auid=0 ses=22187 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=18497 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446988383.399:687738): pid=18497 uid=0 auid=0 ses=22187 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446988383.417:687739): pid=18494 uid=0 auid=0 ses=22187 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446988383.417:687740): pid=18494 uid=0 auid=0 ses=22187 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446988383.420:687741): pid=18494 uid=0 auid=0 ses=22187 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446988383.420:687742): pid=18494 uid=0 auid=0 ses=22187 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446988383.420:687743): pid=18494 uid=0 auid=0 ses=22187 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18494 suid=0 rport=55676 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446988383.420:687744): pid=18494 uid=0 auid=0 ses=22187 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=18494 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446988383.420:687745): pid=18494 uid=0 auid=0 ses=22187 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=18494 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446988383.420:687746): pid=18494 uid=0 auid=0 ses=22187 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=18494 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446988383.447:687747): pid=18505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=18505 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446988383.448:687748): pid=18505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=18505 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446988383.448:687749): pid=18505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=18505 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446988383.496:687750): pid=18504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=18505 suid=74 rport=55680 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446988383.496:687751): pid=18504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=18505 suid=74 rport=55680 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446988383.620:687752): pid=18504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=55680 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446988383.620:687753): pid=18504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=55680 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446988383.629:687754): pid=18504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446988383.630:687755): pid=18504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18505 suid=74 rport=55680 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446988383.632:687756): pid=18504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446988383.632:687757): pid=18504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446988383.632:687758): pid=18504 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22188 res=1
type=USER_ROLE_CHANGE msg=audit(1446988383.694:687759): pid=18504 uid=0 auid=0 ses=22188 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446988383.716:687760): pid=18504 uid=0 auid=0 ses=22188 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446988383.720:687761): pid=18504 uid=0 auid=0 ses=22188 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446988383.720:687762): pid=18504 uid=0 auid=0 ses=22188 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446988383.721:687763): pid=18507 uid=0 auid=0 ses=22188 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=18507 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446988383.721:687764): pid=18507 uid=0 auid=0 ses=22188 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=18507 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446988383.721:687765): pid=18507 uid=0 auid=0 ses=22188 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=18507 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446988383.722:687766): pid=18507 uid=0 auid=0 ses=22188 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446988384.975:687767): pid=18504 uid=0 auid=0 ses=22188 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446988384.975:687768): pid=18504 uid=0 auid=0 ses=22188 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446988384.979:687769): pid=18504 uid=0 auid=0 ses=22188 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446988384.980:687770): pid=18504 uid=0 auid=0 ses=22188 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446988384.980:687771): pid=18504 uid=0 auid=0 ses=22188 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18504 suid=0 rport=55680 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446988384.980:687772): pid=18504 uid=0 auid=0 ses=22188 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=18504 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446988384.980:687773): pid=18504 uid=0 auid=0 ses=22188 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=18504 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446988384.980:687774): pid=18504 uid=0 auid=0 ses=22188 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=18504 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446988385.019:687775): pid=18582 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=18582 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446988385.020:687776): pid=18582 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=18582 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446988385.020:687777): pid=18582 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=18582 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446988385.064:687778): pid=18581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=18582 suid=74 rport=55682 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446988385.064:687779): pid=18581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=18582 suid=74 rport=55682 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446988385.193:687780): pid=18581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=55682 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446988385.193:687781): pid=18581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=55682 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446988385.201:687782): pid=18581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446988385.202:687783): pid=18581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18582 suid=74 rport=55682 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446988385.204:687784): pid=18581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446988385.204:687785): pid=18581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446988385.204:687786): pid=18581 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22189 res=1
type=USER_ROLE_CHANGE msg=audit(1446988385.275:687787): pid=18581 uid=0 auid=0 ses=22189 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446988385.295:687788): pid=18581 uid=0 auid=0 ses=22189 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446988385.297:687789): pid=18581 uid=0 auid=0 ses=22189 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446988385.298:687790): pid=18581 uid=0 auid=0 ses=22189 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446988385.299:687791): pid=18584 uid=0 auid=0 ses=22189 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=18584 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446988385.299:687792): pid=18584 uid=0 auid=0 ses=22189 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=18584 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446988385.299:687793): pid=18584 uid=0 auid=0 ses=22189 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=18584 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446988385.300:687794): pid=18584 uid=0 auid=0 ses=22189 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446988385.316:687795): pid=18581 uid=0 auid=0 ses=22189 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446988385.316:687796): pid=18581 uid=0 auid=0 ses=22189 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446988385.319:687797): pid=18581 uid=0 auid=0 ses=22189 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446988385.319:687798): pid=18581 uid=0 auid=0 ses=22189 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446988385.320:687799): pid=18581 uid=0 auid=0 ses=22189 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18581 suid=0 rport=55682 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446988385.320:687800): pid=18581 uid=0 auid=0 ses=22189 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=18581 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446988385.320:687801): pid=18581 uid=0 auid=0 ses=22189 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=18581 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446988385.320:687802): pid=18581 uid=0 auid=0 ses=22189 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=18581 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=SYSCALL msg=audit(1446988751.686:687803): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1446988801.108:687804): pid=19818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446988801.108:687805): pid=19817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446988801.108:687806): pid=19817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446988801.108:687807): pid=19818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446988801.109:687808): pid=19818 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22190 res=1
type=LOGIN msg=audit(1446988801.109:687809): pid=19817 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22191 res=1
type=USER_START msg=audit(1446988801.127:687810): pid=19818 uid=0 auid=0 ses=22190 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446988801.127:687811): pid=19818 uid=0 auid=0 ses=22190 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1446988801.128:687812): pid=19817 uid=0 auid=0 ses=22191 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446988801.128:687813): pid=19817 uid=0 auid=0 ses=22191 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446988801.137:687814): pid=19818 uid=0 auid=0 ses=22190 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446988801.143:687815): pid=19817 uid=0 auid=0 ses=22191 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446988801.144:687816): pid=19818 uid=0 auid=0 ses=22190 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446988801.148:687817): pid=19817 uid=0 auid=0 ses=22191 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446989401.168:687818): pid=21662 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446989401.168:687819): pid=21662 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446989401.168:687820): pid=21662 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22192 res=1
type=USER_ACCT msg=audit(1446989401.169:687821): pid=21663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446989401.169:687822): pid=21663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446989401.169:687823): pid=21663 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22193 res=1
type=USER_START msg=audit(1446989401.186:687824): pid=21662 uid=0 auid=0 ses=22192 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446989401.187:687825): pid=21662 uid=0 auid=0 ses=22192 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1446989401.187:687826): pid=21663 uid=0 auid=0 ses=22193 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446989401.187:687827): pid=21663 uid=0 auid=0 ses=22193 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446989401.193:687828): pid=21663 uid=0 auid=0 ses=22193 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446989401.194:687829): pid=21663 uid=0 auid=0 ses=22193 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446989401.197:687830): pid=21662 uid=0 auid=0 ses=22192 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446989426.199:687831): pid=21662 uid=0 auid=0 ses=22192 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=CRYPTO_KEY_USER msg=audit(1446989583.015:687832): pid=22224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=22224 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446989583.015:687833): pid=22224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=22224 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446989583.015:687834): pid=22224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=22224 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446989583.060:687835): pid=22223 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=22224 suid=74 rport=57657 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446989583.060:687836): pid=22223 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=22224 suid=74 rport=57657 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446989583.181:687837): pid=22223 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=57657 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446989583.181:687838): pid=22223 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=57657 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446989583.185:687839): pid=22223 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446989583.186:687840): pid=22223 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22224 suid=74 rport=57657 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446989583.187:687841): pid=22223 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446989583.187:687842): pid=22223 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446989583.187:687843): pid=22223 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22194 res=1
type=USER_ROLE_CHANGE msg=audit(1446989583.255:687844): pid=22223 uid=0 auid=0 ses=22194 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446989583.272:687845): pid=22223 uid=0 auid=0 ses=22194 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446989583.275:687846): pid=22223 uid=0 auid=0 ses=22194 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446989583.275:687847): pid=22223 uid=0 auid=0 ses=22194 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446989583.276:687848): pid=22226 uid=0 auid=0 ses=22194 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=22226 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446989583.276:687849): pid=22226 uid=0 auid=0 ses=22194 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=22226 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446989583.276:687850): pid=22226 uid=0 auid=0 ses=22194 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=22226 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446989583.277:687851): pid=22226 uid=0 auid=0 ses=22194 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446989583.294:687852): pid=22223 uid=0 auid=0 ses=22194 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446989583.294:687853): pid=22223 uid=0 auid=0 ses=22194 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446989583.297:687854): pid=22223 uid=0 auid=0 ses=22194 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446989583.297:687855): pid=22223 uid=0 auid=0 ses=22194 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446989583.298:687856): pid=22223 uid=0 auid=0 ses=22194 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22223 suid=0 rport=57657 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446989583.298:687857): pid=22223 uid=0 auid=0 ses=22194 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=22223 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446989583.298:687858): pid=22223 uid=0 auid=0 ses=22194 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=22223 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446989583.298:687859): pid=22223 uid=0 auid=0 ses=22194 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=22223 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446989583.320:687860): pid=22234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=22234 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446989583.320:687861): pid=22234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=22234 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446989583.320:687862): pid=22234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=22234 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446989583.364:687863): pid=22233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=22234 suid=74 rport=57658 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446989583.365:687864): pid=22233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=22234 suid=74 rport=57658 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446989583.484:687865): pid=22233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=57658 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446989583.484:687866): pid=22233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=57658 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446989583.489:687867): pid=22233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446989583.489:687868): pid=22233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22234 suid=74 rport=57658 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446989583.491:687869): pid=22233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446989583.491:687870): pid=22233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446989583.492:687871): pid=22233 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22195 res=1
type=USER_ROLE_CHANGE msg=audit(1446989583.554:687872): pid=22233 uid=0 auid=0 ses=22195 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446989583.572:687873): pid=22233 uid=0 auid=0 ses=22195 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446989583.575:687874): pid=22233 uid=0 auid=0 ses=22195 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446989583.575:687875): pid=22233 uid=0 auid=0 ses=22195 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446989583.576:687876): pid=22236 uid=0 auid=0 ses=22195 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=22236 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446989583.576:687877): pid=22236 uid=0 auid=0 ses=22195 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=22236 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446989583.576:687878): pid=22236 uid=0 auid=0 ses=22195 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=22236 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446989583.577:687879): pid=22236 uid=0 auid=0 ses=22195 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446989584.854:687880): pid=22233 uid=0 auid=0 ses=22195 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446989584.854:687881): pid=22233 uid=0 auid=0 ses=22195 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446989584.858:687882): pid=22233 uid=0 auid=0 ses=22195 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446989584.858:687883): pid=22233 uid=0 auid=0 ses=22195 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446989584.858:687884): pid=22233 uid=0 auid=0 ses=22195 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22233 suid=0 rport=57658 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446989584.858:687885): pid=22233 uid=0 auid=0 ses=22195 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=22233 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446989584.858:687886): pid=22233 uid=0 auid=0 ses=22195 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=22233 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446989584.859:687887): pid=22233 uid=0 auid=0 ses=22195 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=22233 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446989584.890:687888): pid=22289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=22289 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446989584.891:687889): pid=22289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=22289 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446989584.891:687890): pid=22289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=22289 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446989584.936:687891): pid=22288 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=22289 suid=74 rport=57662 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446989584.936:687892): pid=22288 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=22289 suid=74 rport=57662 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446989585.056:687893): pid=22288 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=57662 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446989585.056:687894): pid=22288 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=57662 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446989585.061:687895): pid=22288 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446989585.061:687896): pid=22288 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22289 suid=74 rport=57662 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446989585.062:687897): pid=22288 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446989585.062:687898): pid=22288 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446989585.062:687899): pid=22288 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22196 res=1
type=USER_ROLE_CHANGE msg=audit(1446989585.128:687900): pid=22288 uid=0 auid=0 ses=22196 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446989585.147:687901): pid=22288 uid=0 auid=0 ses=22196 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446989585.149:687902): pid=22288 uid=0 auid=0 ses=22196 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446989585.149:687903): pid=22288 uid=0 auid=0 ses=22196 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446989585.150:687904): pid=22291 uid=0 auid=0 ses=22196 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=22291 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446989585.150:687905): pid=22291 uid=0 auid=0 ses=22196 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=22291 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446989585.150:687906): pid=22291 uid=0 auid=0 ses=22196 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=22291 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446989585.151:687907): pid=22291 uid=0 auid=0 ses=22196 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446989585.166:687908): pid=22288 uid=0 auid=0 ses=22196 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446989585.166:687909): pid=22288 uid=0 auid=0 ses=22196 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446989585.169:687910): pid=22288 uid=0 auid=0 ses=22196 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446989585.169:687911): pid=22288 uid=0 auid=0 ses=22196 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446989585.170:687912): pid=22288 uid=0 auid=0 ses=22196 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22288 suid=0 rport=57662 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446989585.170:687913): pid=22288 uid=0 auid=0 ses=22196 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=22288 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446989585.170:687914): pid=22288 uid=0 auid=0 ses=22196 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=22288 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446989585.170:687915): pid=22288 uid=0 auid=0 ses=22196 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=22288 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=SYSCALL msg=audit(1446989785.759:687916): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1446990001.219:687917): pid=23580 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446990001.219:687918): pid=23580 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446990001.219:687919): pid=23579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446990001.220:687920): pid=23579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446990001.220:687921): pid=23580 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22197 res=1
type=LOGIN msg=audit(1446990001.220:687922): pid=23579 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22198 res=1
type=USER_START msg=audit(1446990001.240:687923): pid=23579 uid=0 auid=0 ses=22198 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446990001.241:687924): pid=23579 uid=0 auid=0 ses=22198 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1446990001.241:687925): pid=23580 uid=0 auid=0 ses=22197 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446990001.241:687926): pid=23580 uid=0 auid=0 ses=22197 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446990001.248:687927): pid=23580 uid=0 auid=0 ses=22197 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446990001.250:687928): pid=23580 uid=0 auid=0 ses=22197 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446990001.260:687929): pid=23579 uid=0 auid=0 ses=22198 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446990001.261:687930): pid=23579 uid=0 auid=0 ses=22198 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446990601.273:687931): pid=25425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446990601.273:687932): pid=25425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446990601.273:687933): pid=25424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446990601.274:687934): pid=25424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446990601.274:687935): pid=25425 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22199 res=1
type=LOGIN msg=audit(1446990601.274:687936): pid=25424 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22200 res=1
type=USER_START msg=audit(1446990601.289:687937): pid=25425 uid=0 auid=0 ses=22199 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1446990601.290:687938): pid=25424 uid=0 auid=0 ses=22200 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446990601.290:687939): pid=25425 uid=0 auid=0 ses=22199 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446990601.290:687940): pid=25424 uid=0 auid=0 ses=22200 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446990601.296:687941): pid=25425 uid=0 auid=0 ses=22199 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446990601.298:687942): pid=25425 uid=0 auid=0 ses=22199 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446990601.303:687943): pid=25424 uid=0 auid=0 ses=22200 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446990601.307:687944): pid=25424 uid=0 auid=0 ses=22200 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1446990782.823:687945): pid=25985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=25985 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446990782.823:687946): pid=25985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=25985 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446990782.823:687947): pid=25985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=25985 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446990782.867:687948): pid=25984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=25985 suid=74 rport=59635 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446990782.867:687949): pid=25984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=25985 suid=74 rport=59635 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446990782.992:687950): pid=25984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59635 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446990782.993:687951): pid=25984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=59635 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446990782.999:687952): pid=25984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446990783.000:687953): pid=25984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25985 suid=74 rport=59635 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446990783.001:687954): pid=25984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446990783.001:687955): pid=25984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446990783.001:687956): pid=25984 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22201 res=1
type=USER_ROLE_CHANGE msg=audit(1446990783.070:687957): pid=25984 uid=0 auid=0 ses=22201 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446990783.095:687958): pid=25984 uid=0 auid=0 ses=22201 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446990783.098:687959): pid=25984 uid=0 auid=0 ses=22201 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446990783.098:687960): pid=25984 uid=0 auid=0 ses=22201 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446990783.099:687961): pid=25987 uid=0 auid=0 ses=22201 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=25987 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446990783.099:687962): pid=25987 uid=0 auid=0 ses=22201 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=25987 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446990783.099:687963): pid=25987 uid=0 auid=0 ses=22201 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=25987 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446990783.100:687964): pid=25987 uid=0 auid=0 ses=22201 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446990783.120:687965): pid=25984 uid=0 auid=0 ses=22201 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446990783.120:687966): pid=25984 uid=0 auid=0 ses=22201 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446990783.123:687967): pid=25984 uid=0 auid=0 ses=22201 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446990783.123:687968): pid=25984 uid=0 auid=0 ses=22201 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446990783.124:687969): pid=25984 uid=0 auid=0 ses=22201 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25984 suid=0 rport=59635 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446990783.124:687970): pid=25984 uid=0 auid=0 ses=22201 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=25984 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446990783.124:687971): pid=25984 uid=0 auid=0 ses=22201 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=25984 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446990783.124:687972): pid=25984 uid=0 auid=0 ses=22201 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=25984 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446990783.148:687973): pid=25995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=25995 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446990783.148:687974): pid=25995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=25995 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446990783.148:687975): pid=25995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=25995 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446990783.192:687976): pid=25994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=25995 suid=74 rport=59640 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446990783.192:687977): pid=25994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=25995 suid=74 rport=59640 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446990783.321:687978): pid=25994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59640 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446990783.321:687979): pid=25994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=59640 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446990783.328:687980): pid=25994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446990783.329:687981): pid=25994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25995 suid=74 rport=59640 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446990783.331:687982): pid=25994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446990783.331:687983): pid=25994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446990783.331:687984): pid=25994 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22202 res=1
type=USER_ROLE_CHANGE msg=audit(1446990783.397:687985): pid=25994 uid=0 auid=0 ses=22202 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446990783.422:687986): pid=25994 uid=0 auid=0 ses=22202 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446990783.424:687987): pid=25994 uid=0 auid=0 ses=22202 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446990783.424:687988): pid=25994 uid=0 auid=0 ses=22202 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446990783.427:687989): pid=25997 uid=0 auid=0 ses=22202 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=25997 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446990783.427:687990): pid=25997 uid=0 auid=0 ses=22202 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=25997 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446990783.427:687991): pid=25997 uid=0 auid=0 ses=22202 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=25997 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446990783.428:687992): pid=25997 uid=0 auid=0 ses=22202 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446990784.696:687993): pid=25994 uid=0 auid=0 ses=22202 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446990784.696:687994): pid=25994 uid=0 auid=0 ses=22202 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446990784.701:687995): pid=25994 uid=0 auid=0 ses=22202 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446990784.701:687996): pid=25994 uid=0 auid=0 ses=22202 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446990784.702:687997): pid=25994 uid=0 auid=0 ses=22202 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25994 suid=0 rport=59640 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446990784.702:687998): pid=25994 uid=0 auid=0 ses=22202 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=25994 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446990784.702:687999): pid=25994 uid=0 auid=0 ses=22202 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=25994 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446990784.702:688000): pid=25994 uid=0 auid=0 ses=22202 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=25994 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446990784.736:688001): pid=26050 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=26050 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446990784.736:688002): pid=26050 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=26050 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446990784.736:688003): pid=26050 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=26050 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446990784.782:688004): pid=26049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=26050 suid=74 rport=59644 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446990784.782:688005): pid=26049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=26050 suid=74 rport=59644 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446990784.906:688006): pid=26049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59644 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446990784.906:688007): pid=26049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=59644 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446990784.911:688008): pid=26049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446990784.911:688009): pid=26049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26050 suid=74 rport=59644 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446990784.912:688010): pid=26049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446990784.913:688011): pid=26049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446990784.914:688012): pid=26049 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22203 res=1
type=USER_ROLE_CHANGE msg=audit(1446990784.983:688013): pid=26049 uid=0 auid=0 ses=22203 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446990785.003:688014): pid=26049 uid=0 auid=0 ses=22203 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446990785.005:688015): pid=26049 uid=0 auid=0 ses=22203 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446990785.005:688016): pid=26049 uid=0 auid=0 ses=22203 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446990785.006:688017): pid=26052 uid=0 auid=0 ses=22203 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=26052 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446990785.006:688018): pid=26052 uid=0 auid=0 ses=22203 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=26052 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446990785.006:688019): pid=26052 uid=0 auid=0 ses=22203 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=26052 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446990785.008:688020): pid=26052 uid=0 auid=0 ses=22203 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446990785.026:688021): pid=26049 uid=0 auid=0 ses=22203 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446990785.027:688022): pid=26049 uid=0 auid=0 ses=22203 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446990785.030:688023): pid=26049 uid=0 auid=0 ses=22203 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446990785.030:688024): pid=26049 uid=0 auid=0 ses=22203 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446990785.030:688025): pid=26049 uid=0 auid=0 ses=22203 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26049 suid=0 rport=59644 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446990785.030:688026): pid=26049 uid=0 auid=0 ses=22203 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=26049 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446990785.030:688027): pid=26049 uid=0 auid=0 ses=22203 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=26049 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446990785.031:688028): pid=26049 uid=0 auid=0 ses=22203 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=26049 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446991201.327:688029): pid=27342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446991201.327:688030): pid=27342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446991201.328:688031): pid=27342 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22204 res=1
type=USER_ACCT msg=audit(1446991201.330:688032): pid=27341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446991201.330:688033): pid=27341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446991201.331:688034): pid=27341 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22205 res=1
type=USER_START msg=audit(1446991201.347:688035): pid=27341 uid=0 auid=0 ses=22205 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1446991201.347:688036): pid=27342 uid=0 auid=0 ses=22204 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446991201.347:688037): pid=27341 uid=0 auid=0 ses=22205 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446991201.347:688038): pid=27342 uid=0 auid=0 ses=22204 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446991201.355:688039): pid=27342 uid=0 auid=0 ses=22204 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446991201.357:688040): pid=27342 uid=0 auid=0 ses=22204 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446991201.364:688041): pid=27341 uid=0 auid=0 ses=22205 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446991201.366:688042): pid=27341 uid=0 auid=0 ses=22205 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446991261.379:688043): pid=27577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446991261.380:688044): pid=27577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446991261.381:688045): pid=27577 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22206 res=1
type=USER_START msg=audit(1446991261.393:688046): pid=27577 uid=0 auid=0 ses=22206 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446991261.394:688047): pid=27577 uid=0 auid=0 ses=22206 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446991261.418:688048): pid=27577 uid=0 auid=0 ses=22206 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446991261.419:688049): pid=27577 uid=0 auid=0 ses=22206 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446991801.434:688050): pid=29245 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446991801.434:688051): pid=29244 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446991801.434:688052): pid=29245 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446991801.434:688053): pid=29244 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446991801.435:688054): pid=29245 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22207 res=1
type=LOGIN msg=audit(1446991801.435:688055): pid=29244 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22208 res=1
type=USER_START msg=audit(1446991801.450:688056): pid=29245 uid=0 auid=0 ses=22207 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446991801.450:688057): pid=29245 uid=0 auid=0 ses=22207 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1446991801.451:688058): pid=29244 uid=0 auid=0 ses=22208 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446991801.452:688059): pid=29244 uid=0 auid=0 ses=22208 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446991801.457:688060): pid=29245 uid=0 auid=0 ses=22207 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446991801.458:688061): pid=29245 uid=0 auid=0 ses=22207 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446991801.467:688062): pid=29244 uid=0 auid=0 ses=22208 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446991801.468:688063): pid=29244 uid=0 auid=0 ses=22208 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1446991853.758:688064): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=CRYPTO_KEY_USER msg=audit(1446991983.338:688065): pid=29805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=29805 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446991983.338:688066): pid=29805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=29805 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446991983.338:688067): pid=29805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=29805 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446991983.384:688068): pid=29804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=29805 suid=74 rport=61618 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446991983.384:688069): pid=29804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=29805 suid=74 rport=61618 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446991983.511:688070): pid=29804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=61618 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446991983.511:688071): pid=29804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=61618 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446991983.520:688072): pid=29804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446991983.522:688073): pid=29804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29805 suid=74 rport=61618 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446991983.523:688074): pid=29804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446991983.524:688075): pid=29804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446991983.524:688076): pid=29804 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22209 res=1
type=USER_ROLE_CHANGE msg=audit(1446991983.592:688077): pid=29804 uid=0 auid=0 ses=22209 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446991983.615:688078): pid=29804 uid=0 auid=0 ses=22209 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446991983.620:688079): pid=29804 uid=0 auid=0 ses=22209 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446991983.620:688080): pid=29804 uid=0 auid=0 ses=22209 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446991983.622:688081): pid=29807 uid=0 auid=0 ses=22209 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=29807 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446991983.622:688082): pid=29807 uid=0 auid=0 ses=22209 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=29807 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446991983.622:688083): pid=29807 uid=0 auid=0 ses=22209 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=29807 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446991983.623:688084): pid=29807 uid=0 auid=0 ses=22209 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446991983.640:688085): pid=29804 uid=0 auid=0 ses=22209 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446991983.640:688086): pid=29804 uid=0 auid=0 ses=22209 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446991983.643:688087): pid=29804 uid=0 auid=0 ses=22209 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446991983.643:688088): pid=29804 uid=0 auid=0 ses=22209 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446991983.643:688089): pid=29804 uid=0 auid=0 ses=22209 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29804 suid=0 rport=61618 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446991983.643:688090): pid=29804 uid=0 auid=0 ses=22209 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=29804 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446991983.644:688091): pid=29804 uid=0 auid=0 ses=22209 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=29804 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446991983.644:688092): pid=29804 uid=0 auid=0 ses=22209 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=29804 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446991983.671:688093): pid=29815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=29815 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446991983.672:688094): pid=29815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=29815 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446991983.672:688095): pid=29815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=29815 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446991983.717:688096): pid=29814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=29815 suid=74 rport=61622 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446991983.717:688097): pid=29814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=29815 suid=74 rport=61622 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446991983.845:688098): pid=29814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=61622 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446991983.845:688099): pid=29814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=61622 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446991983.854:688100): pid=29814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446991983.855:688101): pid=29814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29815 suid=74 rport=61622 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446991983.857:688102): pid=29814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446991983.857:688103): pid=29814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446991983.857:688104): pid=29814 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22210 res=1
type=USER_ROLE_CHANGE msg=audit(1446991983.920:688105): pid=29814 uid=0 auid=0 ses=22210 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446991983.944:688106): pid=29814 uid=0 auid=0 ses=22210 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446991983.947:688107): pid=29814 uid=0 auid=0 ses=22210 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446991983.947:688108): pid=29814 uid=0 auid=0 ses=22210 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446991983.949:688109): pid=29817 uid=0 auid=0 ses=22210 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=29817 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446991983.949:688110): pid=29817 uid=0 auid=0 ses=22210 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=29817 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446991983.949:688111): pid=29817 uid=0 auid=0 ses=22210 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=29817 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446991983.950:688112): pid=29817 uid=0 auid=0 ses=22210 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446991985.215:688113): pid=29814 uid=0 auid=0 ses=22210 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446991985.215:688114): pid=29814 uid=0 auid=0 ses=22210 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446991985.219:688115): pid=29814 uid=0 auid=0 ses=22210 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446991985.219:688116): pid=29814 uid=0 auid=0 ses=22210 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446991985.220:688117): pid=29814 uid=0 auid=0 ses=22210 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29814 suid=0 rport=61622 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446991985.220:688118): pid=29814 uid=0 auid=0 ses=22210 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=29814 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446991985.220:688119): pid=29814 uid=0 auid=0 ses=22210 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=29814 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446991985.220:688120): pid=29814 uid=0 auid=0 ses=22210 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=29814 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446991985.257:688121): pid=29870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=29870 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446991985.257:688122): pid=29870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=29870 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446991985.257:688123): pid=29870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=29870 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446991985.302:688124): pid=29869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=29870 suid=74 rport=61626 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446991985.302:688125): pid=29869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=29870 suid=74 rport=61626 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446991985.431:688126): pid=29869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=61626 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446991985.432:688127): pid=29869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=61626 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446991985.441:688128): pid=29869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446991985.442:688129): pid=29869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29870 suid=74 rport=61626 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446991985.443:688130): pid=29869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446991985.443:688131): pid=29869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446991985.443:688132): pid=29869 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22211 res=1
type=USER_ROLE_CHANGE msg=audit(1446991985.507:688133): pid=29869 uid=0 auid=0 ses=22211 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446991985.528:688134): pid=29869 uid=0 auid=0 ses=22211 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446991985.531:688135): pid=29869 uid=0 auid=0 ses=22211 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446991985.531:688136): pid=29869 uid=0 auid=0 ses=22211 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446991985.533:688137): pid=29872 uid=0 auid=0 ses=22211 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=29872 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446991985.533:688138): pid=29872 uid=0 auid=0 ses=22211 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=29872 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446991985.533:688139): pid=29872 uid=0 auid=0 ses=22211 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=29872 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446991985.534:688140): pid=29872 uid=0 auid=0 ses=22211 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446991985.551:688141): pid=29869 uid=0 auid=0 ses=22211 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446991985.552:688142): pid=29869 uid=0 auid=0 ses=22211 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446991985.554:688143): pid=29869 uid=0 auid=0 ses=22211 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446991985.555:688144): pid=29869 uid=0 auid=0 ses=22211 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446991985.555:688145): pid=29869 uid=0 auid=0 ses=22211 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29869 suid=0 rport=61626 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446991985.555:688146): pid=29869 uid=0 auid=0 ses=22211 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=29869 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446991985.555:688147): pid=29869 uid=0 auid=0 ses=22211 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=29869 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446991985.555:688148): pid=29869 uid=0 auid=0 ses=22211 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=29869 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446992401.494:688149): pid=31167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446992401.494:688150): pid=31168 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446992401.494:688151): pid=31168 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446992401.494:688152): pid=31167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446992401.495:688153): pid=31168 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22212 res=1
type=LOGIN msg=audit(1446992401.495:688154): pid=31167 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22213 res=1
type=USER_START msg=audit(1446992401.515:688155): pid=31168 uid=0 auid=0 ses=22212 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446992401.515:688156): pid=31168 uid=0 auid=0 ses=22212 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1446992401.516:688157): pid=31167 uid=0 auid=0 ses=22213 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446992401.516:688158): pid=31167 uid=0 auid=0 ses=22213 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446992401.522:688159): pid=31168 uid=0 auid=0 ses=22212 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446992401.524:688160): pid=31168 uid=0 auid=0 ses=22212 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446992401.534:688161): pid=31167 uid=0 auid=0 ses=22213 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446992401.536:688162): pid=31167 uid=0 auid=0 ses=22213 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1446992896.758:688163): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1446993001.549:688164): pid=628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446993001.549:688165): pid=628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446993001.550:688166): pid=629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446993001.550:688167): pid=629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446993001.550:688168): pid=628 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22214 res=1
type=LOGIN msg=audit(1446993001.550:688169): pid=629 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22215 res=1
type=USER_START msg=audit(1446993001.567:688170): pid=628 uid=0 auid=0 ses=22214 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1446993001.567:688171): pid=629 uid=0 auid=0 ses=22215 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446993001.567:688172): pid=628 uid=0 auid=0 ses=22214 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446993001.567:688173): pid=629 uid=0 auid=0 ses=22215 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446993001.574:688174): pid=629 uid=0 auid=0 ses=22215 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446993001.579:688175): pid=628 uid=0 auid=0 ses=22214 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446993001.580:688176): pid=629 uid=0 auid=0 ses=22215 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446993001.581:688177): pid=628 uid=0 auid=0 ses=22214 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1446993182.542:688178): pid=1229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=1229 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446993182.543:688179): pid=1229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=1229 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446993182.543:688180): pid=1229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=1229 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446993182.589:688181): pid=1228 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=1229 suid=74 rport=63594 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446993182.589:688182): pid=1228 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=1229 suid=74 rport=63594 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446993182.715:688183): pid=1228 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=63594 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446993182.715:688184): pid=1228 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=63594 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446993182.720:688185): pid=1228 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446993182.721:688186): pid=1228 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1229 suid=74 rport=63594 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446993182.723:688187): pid=1228 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446993182.723:688188): pid=1228 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446993182.724:688189): pid=1228 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22216 res=1
type=USER_ROLE_CHANGE msg=audit(1446993182.792:688190): pid=1228 uid=0 auid=0 ses=22216 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446993182.810:688191): pid=1228 uid=0 auid=0 ses=22216 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446993182.813:688192): pid=1228 uid=0 auid=0 ses=22216 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446993182.813:688193): pid=1228 uid=0 auid=0 ses=22216 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446993182.815:688194): pid=1231 uid=0 auid=0 ses=22216 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=1231 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446993182.815:688195): pid=1231 uid=0 auid=0 ses=22216 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=1231 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446993182.815:688196): pid=1231 uid=0 auid=0 ses=22216 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=1231 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446993182.815:688197): pid=1231 uid=0 auid=0 ses=22216 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446993182.834:688198): pid=1228 uid=0 auid=0 ses=22216 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446993182.834:688199): pid=1228 uid=0 auid=0 ses=22216 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446993182.838:688200): pid=1228 uid=0 auid=0 ses=22216 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446993182.838:688201): pid=1228 uid=0 auid=0 ses=22216 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446993182.838:688202): pid=1228 uid=0 auid=0 ses=22216 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1228 suid=0 rport=63594 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446993182.839:688203): pid=1228 uid=0 auid=0 ses=22216 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=1228 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446993182.839:688204): pid=1228 uid=0 auid=0 ses=22216 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=1228 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446993182.839:688205): pid=1228 uid=0 auid=0 ses=22216 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=1228 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446993182.862:688206): pid=1239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=1239 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446993182.862:688207): pid=1239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=1239 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446993182.863:688208): pid=1239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=1239 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446993182.907:688209): pid=1238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=1239 suid=74 rport=63596 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446993182.907:688210): pid=1238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=1239 suid=74 rport=63596 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446993183.031:688211): pid=1238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=63596 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446993183.031:688212): pid=1238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=63596 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446993183.038:688213): pid=1238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446993183.038:688214): pid=1238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1239 suid=74 rport=63596 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446993183.040:688215): pid=1238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446993183.040:688216): pid=1238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446993183.040:688217): pid=1238 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22217 res=1
type=USER_ROLE_CHANGE msg=audit(1446993183.106:688218): pid=1238 uid=0 auid=0 ses=22217 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446993183.135:688219): pid=1238 uid=0 auid=0 ses=22217 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446993183.138:688220): pid=1238 uid=0 auid=0 ses=22217 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446993183.138:688221): pid=1238 uid=0 auid=0 ses=22217 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446993183.139:688222): pid=1241 uid=0 auid=0 ses=22217 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=1241 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446993183.139:688223): pid=1241 uid=0 auid=0 ses=22217 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=1241 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446993183.139:688224): pid=1241 uid=0 auid=0 ses=22217 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=1241 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446993183.140:688225): pid=1241 uid=0 auid=0 ses=22217 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446993184.395:688226): pid=1238 uid=0 auid=0 ses=22217 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446993184.395:688227): pid=1238 uid=0 auid=0 ses=22217 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446993184.399:688228): pid=1238 uid=0 auid=0 ses=22217 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446993184.400:688229): pid=1238 uid=0 auid=0 ses=22217 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446993184.400:688230): pid=1238 uid=0 auid=0 ses=22217 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1238 suid=0 rport=63596 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446993184.400:688231): pid=1238 uid=0 auid=0 ses=22217 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=1238 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446993184.400:688232): pid=1238 uid=0 auid=0 ses=22217 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=1238 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446993184.400:688233): pid=1238 uid=0 auid=0 ses=22217 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=1238 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446993184.431:688234): pid=1291 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=1291 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446993184.431:688235): pid=1291 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=1291 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446993184.431:688236): pid=1291 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=1291 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446993184.475:688237): pid=1290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=1291 suid=74 rport=63603 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446993184.476:688238): pid=1290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=1291 suid=74 rport=63603 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446993184.600:688239): pid=1290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=63603 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446993184.600:688240): pid=1290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=63603 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446993184.605:688241): pid=1290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446993184.605:688242): pid=1290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1291 suid=74 rport=63603 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446993184.606:688243): pid=1290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446993184.606:688244): pid=1290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446993184.606:688245): pid=1290 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22218 res=1
type=USER_ROLE_CHANGE msg=audit(1446993184.672:688246): pid=1290 uid=0 auid=0 ses=22218 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446993184.696:688247): pid=1290 uid=0 auid=0 ses=22218 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446993184.699:688248): pid=1290 uid=0 auid=0 ses=22218 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446993184.699:688249): pid=1290 uid=0 auid=0 ses=22218 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446993184.700:688250): pid=1296 uid=0 auid=0 ses=22218 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=1296 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446993184.701:688251): pid=1296 uid=0 auid=0 ses=22218 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=1296 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446993184.701:688252): pid=1296 uid=0 auid=0 ses=22218 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=1296 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446993184.701:688253): pid=1296 uid=0 auid=0 ses=22218 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446993184.719:688254): pid=1290 uid=0 auid=0 ses=22218 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446993184.719:688255): pid=1290 uid=0 auid=0 ses=22218 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446993184.723:688256): pid=1290 uid=0 auid=0 ses=22218 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446993184.723:688257): pid=1290 uid=0 auid=0 ses=22218 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446993184.724:688258): pid=1290 uid=0 auid=0 ses=22218 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1290 suid=0 rport=63603 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446993184.724:688259): pid=1290 uid=0 auid=0 ses=22218 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=1290 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446993184.724:688260): pid=1290 uid=0 auid=0 ses=22218 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=1290 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446993184.724:688261): pid=1290 uid=0 auid=0 ses=22218 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=1290 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446993601.605:688262): pid=2585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446993601.605:688263): pid=2586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446993601.605:688264): pid=2585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446993601.605:688265): pid=2586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446993601.607:688266): pid=2586 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22219 res=1
type=LOGIN msg=audit(1446993601.607:688267): pid=2585 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22220 res=1
type=USER_START msg=audit(1446993601.625:688268): pid=2585 uid=0 auid=0 ses=22220 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1446993601.626:688269): pid=2586 uid=0 auid=0 ses=22219 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446993601.626:688270): pid=2585 uid=0 auid=0 ses=22220 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446993601.626:688271): pid=2586 uid=0 auid=0 ses=22219 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446993601.633:688272): pid=2586 uid=0 auid=0 ses=22219 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446993601.635:688273): pid=2586 uid=0 auid=0 ses=22219 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446993601.643:688274): pid=2585 uid=0 auid=0 ses=22220 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446993601.644:688275): pid=2585 uid=0 auid=0 ses=22220 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446994201.658:688276): pid=4431 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446994201.658:688277): pid=4432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446994201.658:688278): pid=4431 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446994201.658:688279): pid=4432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446994201.659:688280): pid=4432 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22221 res=1
type=LOGIN msg=audit(1446994201.659:688281): pid=4431 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22222 res=1
type=USER_START msg=audit(1446994201.674:688282): pid=4432 uid=0 auid=0 ses=22221 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446994201.674:688283): pid=4432 uid=0 auid=0 ses=22221 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1446994201.676:688284): pid=4431 uid=0 auid=0 ses=22222 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446994201.676:688285): pid=4431 uid=0 auid=0 ses=22222 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446994201.681:688286): pid=4432 uid=0 auid=0 ses=22221 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446994201.684:688287): pid=4432 uid=0 auid=0 ses=22221 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446994201.689:688288): pid=4431 uid=0 auid=0 ses=22222 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446994201.690:688289): pid=4431 uid=0 auid=0 ses=22222 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1446994382.392:688290): pid=4992 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=4992 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446994382.392:688291): pid=4992 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=4992 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446994382.392:688292): pid=4992 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=4992 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446994382.436:688293): pid=4991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=4992 suid=74 rport=32808 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446994382.437:688294): pid=4991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=4992 suid=74 rport=32808 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446994382.567:688295): pid=4991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=32808 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446994382.567:688296): pid=4991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=32808 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446994382.573:688297): pid=4991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446994382.575:688298): pid=4991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4992 suid=74 rport=32808 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446994382.576:688299): pid=4991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446994382.577:688300): pid=4991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446994382.577:688301): pid=4991 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22223 res=1
type=USER_ROLE_CHANGE msg=audit(1446994382.648:688302): pid=4991 uid=0 auid=0 ses=22223 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446994382.666:688303): pid=4991 uid=0 auid=0 ses=22223 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446994382.669:688304): pid=4991 uid=0 auid=0 ses=22223 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446994382.669:688305): pid=4991 uid=0 auid=0 ses=22223 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446994382.671:688306): pid=4994 uid=0 auid=0 ses=22223 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=4994 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446994382.671:688307): pid=4994 uid=0 auid=0 ses=22223 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=4994 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446994382.671:688308): pid=4994 uid=0 auid=0 ses=22223 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=4994 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446994382.672:688309): pid=4994 uid=0 auid=0 ses=22223 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446994382.693:688310): pid=4991 uid=0 auid=0 ses=22223 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446994382.693:688311): pid=4991 uid=0 auid=0 ses=22223 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446994382.697:688312): pid=4991 uid=0 auid=0 ses=22223 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446994382.697:688313): pid=4991 uid=0 auid=0 ses=22223 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446994382.697:688314): pid=4991 uid=0 auid=0 ses=22223 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4991 suid=0 rport=32808 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446994382.698:688315): pid=4991 uid=0 auid=0 ses=22223 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=4991 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446994382.698:688316): pid=4991 uid=0 auid=0 ses=22223 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=4991 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446994382.698:688317): pid=4991 uid=0 auid=0 ses=22223 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=4991 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446994382.721:688318): pid=5002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=5002 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446994382.721:688319): pid=5002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=5002 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446994382.721:688320): pid=5002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=5002 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446994382.766:688321): pid=5001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=5002 suid=74 rport=32809 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446994382.766:688322): pid=5001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=5002 suid=74 rport=32809 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446994382.896:688323): pid=5001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=32809 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446994382.896:688324): pid=5001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=32809 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446994382.905:688325): pid=5001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446994382.906:688326): pid=5001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5002 suid=74 rport=32809 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446994382.907:688327): pid=5001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446994382.908:688328): pid=5001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446994382.908:688329): pid=5001 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22224 res=1
type=USER_ROLE_CHANGE msg=audit(1446994382.970:688330): pid=5001 uid=0 auid=0 ses=22224 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446994382.993:688331): pid=5001 uid=0 auid=0 ses=22224 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446994382.996:688332): pid=5001 uid=0 auid=0 ses=22224 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446994382.996:688333): pid=5001 uid=0 auid=0 ses=22224 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446994382.997:688334): pid=5004 uid=0 auid=0 ses=22224 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=5004 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446994382.997:688335): pid=5004 uid=0 auid=0 ses=22224 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=5004 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446994382.998:688336): pid=5004 uid=0 auid=0 ses=22224 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=5004 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446994382.998:688337): pid=5004 uid=0 auid=0 ses=22224 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446994384.259:688338): pid=5001 uid=0 auid=0 ses=22224 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446994384.259:688339): pid=5001 uid=0 auid=0 ses=22224 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446994384.264:688340): pid=5001 uid=0 auid=0 ses=22224 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446994384.264:688341): pid=5001 uid=0 auid=0 ses=22224 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446994384.264:688342): pid=5001 uid=0 auid=0 ses=22224 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5001 suid=0 rport=32809 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446994384.264:688343): pid=5001 uid=0 auid=0 ses=22224 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=5001 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446994384.264:688344): pid=5001 uid=0 auid=0 ses=22224 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=5001 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446994384.264:688345): pid=5001 uid=0 auid=0 ses=22224 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=5001 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446994384.294:688346): pid=5054 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=5054 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446994384.294:688347): pid=5054 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=5054 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446994384.294:688348): pid=5054 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=5054 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446994384.339:688349): pid=5053 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=5054 suid=74 rport=32814 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446994384.339:688350): pid=5053 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=5054 suid=74 rport=32814 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446994384.459:688351): pid=5053 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=32814 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446994384.459:688352): pid=5053 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=32814 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446994384.464:688353): pid=5053 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446994384.465:688354): pid=5053 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5054 suid=74 rport=32814 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446994384.467:688355): pid=5053 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446994384.467:688356): pid=5053 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446994384.467:688357): pid=5053 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22225 res=1
type=USER_ROLE_CHANGE msg=audit(1446994384.532:688358): pid=5053 uid=0 auid=0 ses=22225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446994384.554:688359): pid=5053 uid=0 auid=0 ses=22225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446994384.556:688360): pid=5053 uid=0 auid=0 ses=22225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446994384.556:688361): pid=5053 uid=0 auid=0 ses=22225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446994384.557:688362): pid=5056 uid=0 auid=0 ses=22225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=5056 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446994384.558:688363): pid=5056 uid=0 auid=0 ses=22225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=5056 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446994384.558:688364): pid=5056 uid=0 auid=0 ses=22225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=5056 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446994384.558:688365): pid=5056 uid=0 auid=0 ses=22225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446994384.577:688366): pid=5053 uid=0 auid=0 ses=22225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446994384.577:688367): pid=5053 uid=0 auid=0 ses=22225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446994384.579:688368): pid=5053 uid=0 auid=0 ses=22225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446994384.579:688369): pid=5053 uid=0 auid=0 ses=22225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446994384.580:688370): pid=5053 uid=0 auid=0 ses=22225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5053 suid=0 rport=32814 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446994384.580:688371): pid=5053 uid=0 auid=0 ses=22225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=5053 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446994384.580:688372): pid=5053 uid=0 auid=0 ses=22225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=5053 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446994384.580:688373): pid=5053 uid=0 auid=0 ses=22225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=5053 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446994801.714:688374): pid=6348 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446994801.714:688375): pid=6349 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446994801.714:688376): pid=6348 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446994801.714:688377): pid=6349 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446994801.715:688378): pid=6349 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22226 res=1
type=LOGIN msg=audit(1446994801.715:688379): pid=6348 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22227 res=1
type=USER_START msg=audit(1446994801.736:688380): pid=6349 uid=0 auid=0 ses=22226 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1446994801.736:688381): pid=6348 uid=0 auid=0 ses=22227 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446994801.737:688382): pid=6348 uid=0 auid=0 ses=22227 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446994801.737:688383): pid=6349 uid=0 auid=0 ses=22226 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446994801.745:688384): pid=6349 uid=0 auid=0 ses=22226 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446994801.746:688385): pid=6349 uid=0 auid=0 ses=22226 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446994801.759:688386): pid=6348 uid=0 auid=0 ses=22227 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446994801.761:688387): pid=6348 uid=0 auid=0 ses=22227 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446994861.772:688388): pid=6584 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446994861.772:688389): pid=6584 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446994861.772:688390): pid=6584 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22228 res=1
type=USER_START msg=audit(1446994861.783:688391): pid=6584 uid=0 auid=0 ses=22228 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446994861.783:688392): pid=6584 uid=0 auid=0 ses=22228 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446994861.810:688393): pid=6584 uid=0 auid=0 ses=22228 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446994861.811:688394): pid=6584 uid=0 auid=0 ses=22228 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1446995030.664:688395): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1446995401.822:688396): pid=8190 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446995401.822:688397): pid=8190 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446995401.823:688398): pid=8190 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22229 res=1
type=USER_START msg=audit(1446995401.833:688399): pid=8190 uid=0 auid=0 ses=22229 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446995401.833:688400): pid=8190 uid=0 auid=0 ses=22229 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446995401.850:688401): pid=8190 uid=0 auid=0 ses=22229 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446995401.851:688402): pid=8191 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446995401.851:688403): pid=8191 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446995401.851:688404): pid=8191 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22230 res=1
type=USER_END msg=audit(1446995401.852:688405): pid=8190 uid=0 auid=0 ses=22229 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1446995401.888:688406): pid=8191 uid=0 auid=0 ses=22230 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446995401.888:688407): pid=8191 uid=0 auid=0 ses=22230 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446995401.907:688408): pid=8191 uid=0 auid=0 ses=22230 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446995401.911:688409): pid=8191 uid=0 auid=0 ses=22230 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1446995582.832:688410): pid=8792 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=8792 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446995582.832:688411): pid=8792 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=8792 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446995582.832:688412): pid=8792 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=8792 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446995582.876:688413): pid=8791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=8792 suid=74 rport=34789 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446995582.876:688414): pid=8791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=8792 suid=74 rport=34789 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446995583.005:688415): pid=8791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34789 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446995583.005:688416): pid=8791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=34789 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446995583.014:688417): pid=8791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446995583.015:688418): pid=8791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8792 suid=74 rport=34789 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446995583.018:688419): pid=8791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446995583.018:688420): pid=8791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446995583.018:688421): pid=8791 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22231 res=1
type=USER_ROLE_CHANGE msg=audit(1446995583.088:688422): pid=8791 uid=0 auid=0 ses=22231 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446995583.110:688423): pid=8791 uid=0 auid=0 ses=22231 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446995583.112:688424): pid=8791 uid=0 auid=0 ses=22231 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446995583.112:688425): pid=8791 uid=0 auid=0 ses=22231 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446995583.114:688426): pid=8794 uid=0 auid=0 ses=22231 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=8794 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446995583.114:688427): pid=8794 uid=0 auid=0 ses=22231 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=8794 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446995583.114:688428): pid=8794 uid=0 auid=0 ses=22231 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=8794 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446995583.115:688429): pid=8794 uid=0 auid=0 ses=22231 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446995583.133:688430): pid=8791 uid=0 auid=0 ses=22231 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446995583.133:688431): pid=8791 uid=0 auid=0 ses=22231 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446995583.137:688432): pid=8791 uid=0 auid=0 ses=22231 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446995583.137:688433): pid=8791 uid=0 auid=0 ses=22231 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446995583.137:688434): pid=8791 uid=0 auid=0 ses=22231 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8791 suid=0 rport=34789 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446995583.138:688435): pid=8791 uid=0 auid=0 ses=22231 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=8791 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446995583.138:688436): pid=8791 uid=0 auid=0 ses=22231 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=8791 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446995583.138:688437): pid=8791 uid=0 auid=0 ses=22231 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=8791 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446995583.161:688438): pid=8802 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=8802 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446995583.161:688439): pid=8802 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=8802 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446995583.161:688440): pid=8802 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=8802 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446995583.205:688441): pid=8801 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=8802 suid=74 rport=34790 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446995583.206:688442): pid=8801 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=8802 suid=74 rport=34790 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446995583.335:688443): pid=8801 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34790 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446995583.335:688444): pid=8801 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=34790 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446995583.342:688445): pid=8801 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446995583.343:688446): pid=8801 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8802 suid=74 rport=34790 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446995583.346:688447): pid=8801 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446995583.346:688448): pid=8801 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446995583.346:688449): pid=8801 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22232 res=1
type=USER_ROLE_CHANGE msg=audit(1446995583.412:688450): pid=8801 uid=0 auid=0 ses=22232 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446995583.436:688451): pid=8801 uid=0 auid=0 ses=22232 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446995583.438:688452): pid=8801 uid=0 auid=0 ses=22232 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446995583.438:688453): pid=8801 uid=0 auid=0 ses=22232 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446995583.440:688454): pid=8804 uid=0 auid=0 ses=22232 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=8804 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446995583.440:688455): pid=8804 uid=0 auid=0 ses=22232 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=8804 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446995583.440:688456): pid=8804 uid=0 auid=0 ses=22232 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=8804 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446995583.441:688457): pid=8804 uid=0 auid=0 ses=22232 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446995584.708:688458): pid=8801 uid=0 auid=0 ses=22232 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446995584.708:688459): pid=8801 uid=0 auid=0 ses=22232 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446995584.714:688460): pid=8801 uid=0 auid=0 ses=22232 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446995584.714:688461): pid=8801 uid=0 auid=0 ses=22232 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446995584.715:688462): pid=8801 uid=0 auid=0 ses=22232 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8801 suid=0 rport=34790 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446995584.715:688463): pid=8801 uid=0 auid=0 ses=22232 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=8801 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446995584.715:688464): pid=8801 uid=0 auid=0 ses=22232 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=8801 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446995584.715:688465): pid=8801 uid=0 auid=0 ses=22232 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=8801 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446995584.745:688466): pid=8879 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=8879 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446995584.745:688467): pid=8879 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=8879 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446995584.745:688468): pid=8879 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=8879 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446995584.789:688469): pid=8878 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=8879 suid=74 rport=34796 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446995584.790:688470): pid=8878 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=8879 suid=74 rport=34796 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446995584.920:688471): pid=8878 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34796 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446995584.920:688472): pid=8878 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=34796 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446995584.930:688473): pid=8878 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446995584.931:688474): pid=8878 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8879 suid=74 rport=34796 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446995584.934:688475): pid=8878 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446995584.934:688476): pid=8878 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446995584.935:688477): pid=8878 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22233 res=1
type=USER_ROLE_CHANGE msg=audit(1446995585.001:688478): pid=8878 uid=0 auid=0 ses=22233 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446995585.025:688479): pid=8878 uid=0 auid=0 ses=22233 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446995585.029:688480): pid=8878 uid=0 auid=0 ses=22233 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446995585.030:688481): pid=8878 uid=0 auid=0 ses=22233 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446995585.032:688482): pid=8881 uid=0 auid=0 ses=22233 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=8881 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446995585.032:688483): pid=8881 uid=0 auid=0 ses=22233 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=8881 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446995585.032:688484): pid=8881 uid=0 auid=0 ses=22233 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=8881 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446995585.033:688485): pid=8881 uid=0 auid=0 ses=22233 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446995585.050:688486): pid=8878 uid=0 auid=0 ses=22233 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446995585.050:688487): pid=8878 uid=0 auid=0 ses=22233 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446995585.055:688488): pid=8878 uid=0 auid=0 ses=22233 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446995585.055:688489): pid=8878 uid=0 auid=0 ses=22233 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446995585.056:688490): pid=8878 uid=0 auid=0 ses=22233 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8878 suid=0 rport=34796 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446995585.056:688491): pid=8878 uid=0 auid=0 ses=22233 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=8878 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446995585.056:688492): pid=8878 uid=0 auid=0 ses=22233 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=8878 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446995585.056:688493): pid=8878 uid=0 auid=0 ses=22233 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=8878 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446996001.929:688494): pid=10115 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446996001.929:688495): pid=10114 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446996001.929:688496): pid=10114 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446996001.929:688497): pid=10115 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446996001.931:688498): pid=10114 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22234 res=1
type=LOGIN msg=audit(1446996001.931:688499): pid=10115 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22235 res=1
type=USER_START msg=audit(1446996001.951:688500): pid=10115 uid=0 auid=0 ses=22235 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446996001.951:688501): pid=10115 uid=0 auid=0 ses=22235 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1446996001.954:688502): pid=10114 uid=0 auid=0 ses=22234 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446996001.954:688503): pid=10114 uid=0 auid=0 ses=22234 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446996001.960:688504): pid=10115 uid=0 auid=0 ses=22235 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446996001.962:688505): pid=10115 uid=0 auid=0 ses=22235 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446996001.969:688506): pid=10114 uid=0 auid=0 ses=22234 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446996001.970:688507): pid=10114 uid=0 auid=0 ses=22234 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446996601.984:688508): pid=11962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446996601.984:688509): pid=11961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446996601.984:688510): pid=11961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446996601.984:688511): pid=11962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446996601.985:688512): pid=11962 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22236 res=1
type=LOGIN msg=audit(1446996601.985:688513): pid=11961 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22237 res=1
type=USER_START msg=audit(1446996601.999:688514): pid=11962 uid=0 auid=0 ses=22236 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446996601.999:688515): pid=11962 uid=0 auid=0 ses=22236 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1446996602.000:688516): pid=11961 uid=0 auid=0 ses=22237 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446996602.000:688517): pid=11961 uid=0 auid=0 ses=22237 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446996602.010:688518): pid=11961 uid=0 auid=0 ses=22237 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446996602.011:688519): pid=11962 uid=0 auid=0 ses=22236 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446996602.012:688520): pid=11961 uid=0 auid=0 ses=22237 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446996602.016:688521): pid=11962 uid=0 auid=0 ses=22236 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1446996783.028:688522): pid=12522 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12522 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446996783.028:688523): pid=12522 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12522 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446996783.028:688524): pid=12522 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12522 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446996783.071:688525): pid=12521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=12522 suid=74 rport=36769 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446996783.072:688526): pid=12521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=12522 suid=74 rport=36769 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446996783.201:688527): pid=12521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=36769 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446996783.201:688528): pid=12521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=36769 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446996783.208:688529): pid=12521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446996783.210:688530): pid=12521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12522 suid=74 rport=36769 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446996783.214:688531): pid=12521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446996783.214:688532): pid=12521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446996783.215:688533): pid=12521 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22238 res=1
type=USER_ROLE_CHANGE msg=audit(1446996783.282:688534): pid=12521 uid=0 auid=0 ses=22238 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446996783.300:688535): pid=12521 uid=0 auid=0 ses=22238 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446996783.302:688536): pid=12521 uid=0 auid=0 ses=22238 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446996783.302:688537): pid=12521 uid=0 auid=0 ses=22238 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446996783.304:688538): pid=12524 uid=0 auid=0 ses=22238 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12524 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446996783.304:688539): pid=12524 uid=0 auid=0 ses=22238 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12524 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446996783.304:688540): pid=12524 uid=0 auid=0 ses=22238 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12524 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446996783.305:688541): pid=12524 uid=0 auid=0 ses=22238 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446996783.324:688542): pid=12521 uid=0 auid=0 ses=22238 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446996783.325:688543): pid=12521 uid=0 auid=0 ses=22238 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446996783.330:688544): pid=12521 uid=0 auid=0 ses=22238 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446996783.331:688545): pid=12521 uid=0 auid=0 ses=22238 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446996783.331:688546): pid=12521 uid=0 auid=0 ses=22238 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12521 suid=0 rport=36769 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446996783.331:688547): pid=12521 uid=0 auid=0 ses=22238 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12521 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446996783.331:688548): pid=12521 uid=0 auid=0 ses=22238 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12521 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446996783.331:688549): pid=12521 uid=0 auid=0 ses=22238 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12521 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446996783.350:688550): pid=12532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12532 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446996783.350:688551): pid=12532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12532 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446996783.350:688552): pid=12532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12532 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446996783.394:688553): pid=12531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=12532 suid=74 rport=36771 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446996783.395:688554): pid=12531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=12532 suid=74 rport=36771 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446996783.524:688555): pid=12531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=36771 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446996783.524:688556): pid=12531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=36771 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446996783.530:688557): pid=12531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446996783.530:688558): pid=12531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12532 suid=74 rport=36771 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446996783.532:688559): pid=12531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446996783.533:688560): pid=12531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446996783.533:688561): pid=12531 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22239 res=1
type=USER_ROLE_CHANGE msg=audit(1446996783.599:688562): pid=12531 uid=0 auid=0 ses=22239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446996783.620:688563): pid=12531 uid=0 auid=0 ses=22239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446996783.622:688564): pid=12531 uid=0 auid=0 ses=22239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446996783.623:688565): pid=12531 uid=0 auid=0 ses=22239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446996783.624:688566): pid=12534 uid=0 auid=0 ses=22239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12534 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446996783.624:688567): pid=12534 uid=0 auid=0 ses=22239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12534 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446996783.624:688568): pid=12534 uid=0 auid=0 ses=22239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12534 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446996783.625:688569): pid=12534 uid=0 auid=0 ses=22239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446996784.913:688570): pid=12531 uid=0 auid=0 ses=22239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446996784.913:688571): pid=12531 uid=0 auid=0 ses=22239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446996784.919:688572): pid=12531 uid=0 auid=0 ses=22239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446996784.920:688573): pid=12531 uid=0 auid=0 ses=22239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446996784.920:688574): pid=12531 uid=0 auid=0 ses=22239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12531 suid=0 rport=36771 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446996784.920:688575): pid=12531 uid=0 auid=0 ses=22239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12531 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446996784.920:688576): pid=12531 uid=0 auid=0 ses=22239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12531 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446996784.920:688577): pid=12531 uid=0 auid=0 ses=22239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12531 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446996784.947:688578): pid=12587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12587 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446996784.947:688579): pid=12587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12587 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446996784.947:688580): pid=12587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12587 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446996784.993:688581): pid=12586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=12587 suid=74 rport=36774 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446996784.993:688582): pid=12586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=12587 suid=74 rport=36774 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446996785.120:688583): pid=12586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=36774 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446996785.120:688584): pid=12586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=36774 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446996785.129:688585): pid=12586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446996785.130:688586): pid=12586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12587 suid=74 rport=36774 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446996785.133:688587): pid=12586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446996785.134:688588): pid=12586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446996785.134:688589): pid=12586 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22240 res=1
type=USER_ROLE_CHANGE msg=audit(1446996785.203:688590): pid=12586 uid=0 auid=0 ses=22240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446996785.227:688591): pid=12586 uid=0 auid=0 ses=22240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446996785.230:688592): pid=12586 uid=0 auid=0 ses=22240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446996785.230:688593): pid=12586 uid=0 auid=0 ses=22240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446996785.232:688594): pid=12589 uid=0 auid=0 ses=22240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12589 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446996785.232:688595): pid=12589 uid=0 auid=0 ses=22240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12589 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446996785.232:688596): pid=12589 uid=0 auid=0 ses=22240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12589 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446996785.233:688597): pid=12589 uid=0 auid=0 ses=22240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446996785.250:688598): pid=12586 uid=0 auid=0 ses=22240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446996785.250:688599): pid=12586 uid=0 auid=0 ses=22240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446996785.256:688600): pid=12586 uid=0 auid=0 ses=22240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446996785.256:688601): pid=12586 uid=0 auid=0 ses=22240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446996785.256:688602): pid=12586 uid=0 auid=0 ses=22240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12586 suid=0 rport=36774 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446996785.256:688603): pid=12586 uid=0 auid=0 ses=22240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12586 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446996785.256:688604): pid=12586 uid=0 auid=0 ses=22240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12586 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446996785.256:688605): pid=12586 uid=0 auid=0 ses=22240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12586 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=SYSCALL msg=audit(1446997135.669:688606): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1446997201.036:688608): pid=13877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446997201.036:688607): pid=13876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446997201.036:688610): pid=13876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446997201.036:688609): pid=13877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446997201.037:688611): pid=13877 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22241 res=1
type=LOGIN msg=audit(1446997201.037:688612): pid=13876 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22242 res=1
type=USER_START msg=audit(1446997201.057:688613): pid=13877 uid=0 auid=0 ses=22241 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1446997201.057:688614): pid=13876 uid=0 auid=0 ses=22242 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446997201.058:688615): pid=13877 uid=0 auid=0 ses=22241 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446997201.058:688616): pid=13876 uid=0 auid=0 ses=22242 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446997201.066:688617): pid=13877 uid=0 auid=0 ses=22241 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446997201.068:688618): pid=13877 uid=0 auid=0 ses=22241 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446997201.079:688619): pid=13876 uid=0 auid=0 ses=22242 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446997201.080:688620): pid=13876 uid=0 auid=0 ses=22242 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446997801.095:688621): pid=15842 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446997801.095:688622): pid=15842 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446997801.095:688623): pid=15842 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22243 res=1
type=USER_ACCT msg=audit(1446997801.095:688624): pid=15841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446997801.095:688625): pid=15841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446997801.096:688626): pid=15841 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22244 res=1
type=USER_START msg=audit(1446997801.111:688627): pid=15842 uid=0 auid=0 ses=22243 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446997801.111:688628): pid=15842 uid=0 auid=0 ses=22243 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1446997801.114:688629): pid=15841 uid=0 auid=0 ses=22244 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446997801.114:688630): pid=15841 uid=0 auid=0 ses=22244 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446997801.119:688631): pid=15842 uid=0 auid=0 ses=22243 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446997801.120:688632): pid=15842 uid=0 auid=0 ses=22243 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446997801.126:688633): pid=15841 uid=0 auid=0 ses=22244 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446997801.128:688634): pid=15841 uid=0 auid=0 ses=22244 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1446997982.575:688635): pid=16402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16402 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446997982.576:688636): pid=16402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16402 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446997982.576:688637): pid=16402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16402 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446997982.619:688638): pid=16401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=16402 suid=74 rport=38748 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446997982.620:688639): pid=16401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=16402 suid=74 rport=38748 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446997982.750:688640): pid=16401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38748 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446997982.750:688641): pid=16401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=38748 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446997982.757:688642): pid=16401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446997982.759:688643): pid=16401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16402 suid=74 rport=38748 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446997982.762:688644): pid=16401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446997982.763:688645): pid=16401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446997982.763:688646): pid=16401 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22245 res=1
type=USER_ROLE_CHANGE msg=audit(1446997982.831:688647): pid=16401 uid=0 auid=0 ses=22245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446997982.851:688648): pid=16401 uid=0 auid=0 ses=22245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446997982.854:688649): pid=16401 uid=0 auid=0 ses=22245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446997982.854:688650): pid=16401 uid=0 auid=0 ses=22245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446997982.855:688651): pid=16404 uid=0 auid=0 ses=22245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16404 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446997982.856:688652): pid=16404 uid=0 auid=0 ses=22245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16404 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446997982.856:688653): pid=16404 uid=0 auid=0 ses=22245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16404 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446997982.856:688654): pid=16404 uid=0 auid=0 ses=22245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446997982.876:688655): pid=16401 uid=0 auid=0 ses=22245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446997982.876:688656): pid=16401 uid=0 auid=0 ses=22245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446997982.880:688657): pid=16401 uid=0 auid=0 ses=22245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446997982.880:688658): pid=16401 uid=0 auid=0 ses=22245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446997982.881:688659): pid=16401 uid=0 auid=0 ses=22245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16401 suid=0 rport=38748 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446997982.881:688660): pid=16401 uid=0 auid=0 ses=22245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16401 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446997982.881:688661): pid=16401 uid=0 auid=0 ses=22245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16401 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446997982.881:688662): pid=16401 uid=0 auid=0 ses=22245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16401 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446997982.906:688663): pid=16412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16412 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446997982.906:688664): pid=16412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16412 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446997982.906:688665): pid=16412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16412 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446997982.950:688666): pid=16411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=16412 suid=74 rport=38749 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446997982.950:688667): pid=16411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=16412 suid=74 rport=38749 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446997983.076:688668): pid=16411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38749 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446997983.076:688669): pid=16411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=38749 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446997983.084:688670): pid=16411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446997983.085:688671): pid=16411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16412 suid=74 rport=38749 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446997983.087:688672): pid=16411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446997983.088:688673): pid=16411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446997983.088:688674): pid=16411 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22246 res=1
type=USER_ROLE_CHANGE msg=audit(1446997983.152:688675): pid=16411 uid=0 auid=0 ses=22246 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446997983.172:688676): pid=16411 uid=0 auid=0 ses=22246 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446997983.176:688677): pid=16411 uid=0 auid=0 ses=22246 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446997983.176:688678): pid=16411 uid=0 auid=0 ses=22246 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446997983.177:688679): pid=16414 uid=0 auid=0 ses=22246 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16414 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446997983.177:688680): pid=16414 uid=0 auid=0 ses=22246 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16414 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446997983.177:688681): pid=16414 uid=0 auid=0 ses=22246 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16414 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446997983.178:688682): pid=16414 uid=0 auid=0 ses=22246 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446997984.448:688683): pid=16411 uid=0 auid=0 ses=22246 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446997984.448:688684): pid=16411 uid=0 auid=0 ses=22246 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446997984.454:688685): pid=16411 uid=0 auid=0 ses=22246 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446997984.454:688686): pid=16411 uid=0 auid=0 ses=22246 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446997984.454:688687): pid=16411 uid=0 auid=0 ses=22246 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16411 suid=0 rport=38749 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446997984.454:688688): pid=16411 uid=0 auid=0 ses=22246 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16411 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446997984.454:688689): pid=16411 uid=0 auid=0 ses=22246 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16411 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446997984.454:688690): pid=16411 uid=0 auid=0 ses=22246 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16411 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446997984.488:688691): pid=16464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16464 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446997984.488:688692): pid=16464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16464 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446997984.488:688693): pid=16464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16464 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446997984.532:688694): pid=16463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=16464 suid=74 rport=38753 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446997984.533:688695): pid=16463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=16464 suid=74 rport=38753 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446997984.663:688696): pid=16463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38753 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446997984.663:688697): pid=16463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=38753 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446997984.669:688698): pid=16463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446997984.670:688699): pid=16463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16464 suid=74 rport=38753 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446997984.671:688700): pid=16463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446997984.671:688701): pid=16463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446997984.671:688702): pid=16463 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22247 res=1
type=USER_ROLE_CHANGE msg=audit(1446997984.736:688703): pid=16463 uid=0 auid=0 ses=22247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446997984.758:688704): pid=16463 uid=0 auid=0 ses=22247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446997984.761:688705): pid=16463 uid=0 auid=0 ses=22247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446997984.761:688706): pid=16463 uid=0 auid=0 ses=22247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446997984.762:688707): pid=16469 uid=0 auid=0 ses=22247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16469 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446997984.763:688708): pid=16469 uid=0 auid=0 ses=22247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16469 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446997984.763:688709): pid=16469 uid=0 auid=0 ses=22247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16469 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446997984.763:688710): pid=16469 uid=0 auid=0 ses=22247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446997984.780:688711): pid=16463 uid=0 auid=0 ses=22247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446997984.781:688712): pid=16463 uid=0 auid=0 ses=22247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446997984.785:688713): pid=16463 uid=0 auid=0 ses=22247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446997984.785:688714): pid=16463 uid=0 auid=0 ses=22247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446997984.786:688715): pid=16463 uid=0 auid=0 ses=22247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16463 suid=0 rport=38753 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446997984.786:688716): pid=16463 uid=0 auid=0 ses=22247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16463 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446997984.786:688717): pid=16463 uid=0 auid=0 ses=22247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16463 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446997984.786:688718): pid=16463 uid=0 auid=0 ses=22247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16463 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=SYSCALL msg=audit(1446998200.758:688719): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1446998401.152:688720): pid=17760 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446998401.153:688721): pid=17760 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446998401.154:688722): pid=17760 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22248 res=1
type=USER_ACCT msg=audit(1446998401.154:688723): pid=17759 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446998401.154:688724): pid=17759 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446998401.154:688725): pid=17759 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22249 res=1
type=USER_START msg=audit(1446998401.172:688726): pid=17760 uid=0 auid=0 ses=22248 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1446998401.172:688727): pid=17759 uid=0 auid=0 ses=22249 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446998401.174:688728): pid=17759 uid=0 auid=0 ses=22249 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446998401.174:688729): pid=17760 uid=0 auid=0 ses=22248 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446998401.182:688730): pid=17760 uid=0 auid=0 ses=22248 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446998401.184:688731): pid=17760 uid=0 auid=0 ses=22248 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446998401.195:688732): pid=17759 uid=0 auid=0 ses=22249 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446998426.215:688733): pid=17759 uid=0 auid=0 ses=22249 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=USER_ACCT msg=audit(1446998461.231:688734): pid=17995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446998461.231:688735): pid=17995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446998461.232:688736): pid=17995 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22250 res=1
type=USER_START msg=audit(1446998461.243:688737): pid=17995 uid=0 auid=0 ses=22250 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446998461.243:688738): pid=17995 uid=0 auid=0 ses=22250 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446998461.269:688739): pid=17995 uid=0 auid=0 ses=22250 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446998461.271:688740): pid=17995 uid=0 auid=0 ses=22250 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446999001.283:688741): pid=19662 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446999001.283:688742): pid=19663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446999001.283:688743): pid=19662 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446999001.283:688744): pid=19663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446999001.283:688745): pid=19663 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22251 res=1
type=LOGIN msg=audit(1446999001.283:688746): pid=19662 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22252 res=1
type=USER_START msg=audit(1446999001.299:688747): pid=19663 uid=0 auid=0 ses=22251 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446999001.299:688748): pid=19663 uid=0 auid=0 ses=22251 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1446999001.301:688749): pid=19662 uid=0 auid=0 ses=22252 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446999001.301:688750): pid=19662 uid=0 auid=0 ses=22252 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446999001.305:688751): pid=19663 uid=0 auid=0 ses=22251 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446999001.306:688752): pid=19663 uid=0 auid=0 ses=22251 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446999001.313:688753): pid=19662 uid=0 auid=0 ses=22252 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446999001.315:688754): pid=19662 uid=0 auid=0 ses=22252 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1446999182.805:688755): pid=20224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=20224 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446999182.805:688756): pid=20224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=20224 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446999182.805:688757): pid=20224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=20224 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446999182.849:688758): pid=20223 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=20224 suid=74 rport=40729 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446999182.850:688759): pid=20223 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=20224 suid=74 rport=40729 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446999182.978:688760): pid=20223 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=40729 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446999182.978:688761): pid=20223 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=40729 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446999182.985:688762): pid=20223 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446999182.987:688763): pid=20223 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20224 suid=74 rport=40729 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446999182.990:688764): pid=20223 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446999182.990:688765): pid=20223 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446999182.990:688766): pid=20223 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22253 res=1
type=USER_ROLE_CHANGE msg=audit(1446999183.058:688767): pid=20223 uid=0 auid=0 ses=22253 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446999183.082:688768): pid=20223 uid=0 auid=0 ses=22253 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446999183.086:688769): pid=20223 uid=0 auid=0 ses=22253 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446999183.086:688770): pid=20223 uid=0 auid=0 ses=22253 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446999183.088:688771): pid=20226 uid=0 auid=0 ses=22253 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=20226 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446999183.088:688772): pid=20226 uid=0 auid=0 ses=22253 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=20226 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446999183.088:688773): pid=20226 uid=0 auid=0 ses=22253 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=20226 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446999183.088:688774): pid=20226 uid=0 auid=0 ses=22253 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446999183.108:688775): pid=20223 uid=0 auid=0 ses=22253 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446999183.108:688776): pid=20223 uid=0 auid=0 ses=22253 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446999183.112:688777): pid=20223 uid=0 auid=0 ses=22253 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446999183.112:688778): pid=20223 uid=0 auid=0 ses=22253 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446999183.112:688779): pid=20223 uid=0 auid=0 ses=22253 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20223 suid=0 rport=40729 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446999183.113:688780): pid=20223 uid=0 auid=0 ses=22253 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=20223 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446999183.113:688781): pid=20223 uid=0 auid=0 ses=22253 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=20223 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446999183.113:688782): pid=20223 uid=0 auid=0 ses=22253 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=20223 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446999183.133:688783): pid=20234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=20234 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446999183.134:688784): pid=20234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=20234 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446999183.134:688785): pid=20234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=20234 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446999183.177:688786): pid=20233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=20234 suid=74 rport=40730 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446999183.178:688787): pid=20233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=20234 suid=74 rport=40730 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446999183.307:688788): pid=20233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=40730 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446999183.308:688789): pid=20233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=40730 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446999183.314:688790): pid=20233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446999183.315:688791): pid=20233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20234 suid=74 rport=40730 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446999183.317:688792): pid=20233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446999183.317:688793): pid=20233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446999183.318:688794): pid=20233 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22254 res=1
type=USER_ROLE_CHANGE msg=audit(1446999183.384:688795): pid=20233 uid=0 auid=0 ses=22254 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446999183.407:688796): pid=20233 uid=0 auid=0 ses=22254 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446999183.411:688797): pid=20233 uid=0 auid=0 ses=22254 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446999183.411:688798): pid=20233 uid=0 auid=0 ses=22254 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446999183.413:688799): pid=20236 uid=0 auid=0 ses=22254 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=20236 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446999183.413:688800): pid=20236 uid=0 auid=0 ses=22254 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=20236 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446999183.413:688801): pid=20236 uid=0 auid=0 ses=22254 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=20236 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446999183.414:688802): pid=20236 uid=0 auid=0 ses=22254 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446999184.695:688803): pid=20233 uid=0 auid=0 ses=22254 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446999184.695:688804): pid=20233 uid=0 auid=0 ses=22254 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446999184.699:688805): pid=20233 uid=0 auid=0 ses=22254 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446999184.699:688806): pid=20233 uid=0 auid=0 ses=22254 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446999184.699:688807): pid=20233 uid=0 auid=0 ses=22254 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20233 suid=0 rport=40730 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446999184.699:688808): pid=20233 uid=0 auid=0 ses=22254 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=20233 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446999184.699:688809): pid=20233 uid=0 auid=0 ses=22254 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=20233 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446999184.699:688810): pid=20233 uid=0 auid=0 ses=22254 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=20233 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446999184.730:688811): pid=20289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=20289 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446999184.730:688812): pid=20289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=20289 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446999184.730:688813): pid=20289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=20289 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446999184.775:688814): pid=20288 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=20289 suid=74 rport=40734 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1446999184.775:688815): pid=20288 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=20289 suid=74 rport=40734 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446999184.897:688816): pid=20288 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=40734 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446999184.897:688817): pid=20288 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=40734 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1446999184.901:688818): pid=20288 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446999184.902:688819): pid=20288 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20289 suid=74 rport=40734 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1446999184.905:688820): pid=20288 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1446999184.905:688821): pid=20288 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1446999184.905:688822): pid=20288 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22255 res=1
type=USER_ROLE_CHANGE msg=audit(1446999184.972:688823): pid=20288 uid=0 auid=0 ses=22255 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446999184.990:688824): pid=20288 uid=0 auid=0 ses=22255 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1446999184.993:688825): pid=20288 uid=0 auid=0 ses=22255 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1446999184.993:688826): pid=20288 uid=0 auid=0 ses=22255 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446999184.995:688827): pid=20291 uid=0 auid=0 ses=22255 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=20291 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446999184.995:688828): pid=20291 uid=0 auid=0 ses=22255 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=20291 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446999184.995:688829): pid=20291 uid=0 auid=0 ses=22255 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=20291 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1446999184.996:688830): pid=20291 uid=0 auid=0 ses=22255 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446999185.012:688831): pid=20288 uid=0 auid=0 ses=22255 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1446999185.012:688832): pid=20288 uid=0 auid=0 ses=22255 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1446999185.016:688833): pid=20288 uid=0 auid=0 ses=22255 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1446999185.016:688834): pid=20288 uid=0 auid=0 ses=22255 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1446999185.016:688835): pid=20288 uid=0 auid=0 ses=22255 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20288 suid=0 rport=40734 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446999185.016:688836): pid=20288 uid=0 auid=0 ses=22255 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=20288 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446999185.016:688837): pid=20288 uid=0 auid=0 ses=22255 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=20288 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1446999185.016:688838): pid=20288 uid=0 auid=0 ses=22255 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=20288 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=SYSCALL msg=audit(1446999239.673:688839): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1446999601.337:688841): pid=21587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1446999601.337:688840): pid=21586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446999601.337:688842): pid=21587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1446999601.337:688843): pid=21586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1446999601.338:688844): pid=21587 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22256 res=1
type=LOGIN msg=audit(1446999601.338:688845): pid=21586 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22257 res=1
type=USER_START msg=audit(1446999601.357:688846): pid=21586 uid=0 auid=0 ses=22257 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1446999601.357:688847): pid=21587 uid=0 auid=0 ses=22256 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446999601.358:688848): pid=21586 uid=0 auid=0 ses=22257 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1446999601.358:688849): pid=21587 uid=0 auid=0 ses=22256 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446999601.368:688850): pid=21587 uid=0 auid=0 ses=22256 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446999601.369:688851): pid=21587 uid=0 auid=0 ses=22256 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1446999601.372:688852): pid=21586 uid=0 auid=0 ses=22257 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1446999601.375:688853): pid=21586 uid=0 auid=0 ses=22257 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447000201.395:688854): pid=23430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447000201.395:688855): pid=23429 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447000201.395:688856): pid=23430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447000201.396:688857): pid=23429 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447000201.396:688858): pid=23430 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22258 res=1
type=LOGIN msg=audit(1447000201.396:688859): pid=23429 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22259 res=1
type=USER_START msg=audit(1447000201.413:688860): pid=23429 uid=0 auid=0 ses=22259 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447000201.413:688861): pid=23430 uid=0 auid=0 ses=22258 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447000201.413:688862): pid=23429 uid=0 auid=0 ses=22259 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447000201.413:688863): pid=23430 uid=0 auid=0 ses=22258 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447000201.421:688864): pid=23430 uid=0 auid=0 ses=22258 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447000201.426:688865): pid=23429 uid=0 auid=0 ses=22259 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447000201.426:688866): pid=23430 uid=0 auid=0 ses=22258 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447000201.429:688867): pid=23429 uid=0 auid=0 ses=22259 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447000383.161:688868): pid=23992 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=23992 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447000383.161:688869): pid=23992 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=23992 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447000383.161:688870): pid=23992 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=23992 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447000383.204:688871): pid=23991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=23992 suid=74 rport=42709 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447000383.205:688872): pid=23991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=23992 suid=74 rport=42709 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447000383.337:688873): pid=23991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42709 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447000383.337:688874): pid=23991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=42709 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447000383.342:688875): pid=23991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447000383.343:688876): pid=23991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23992 suid=74 rport=42709 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447000383.345:688877): pid=23991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447000383.345:688878): pid=23991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447000383.345:688879): pid=23991 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22260 res=1
type=USER_ROLE_CHANGE msg=audit(1447000383.413:688880): pid=23991 uid=0 auid=0 ses=22260 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447000383.432:688881): pid=23991 uid=0 auid=0 ses=22260 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447000383.434:688882): pid=23991 uid=0 auid=0 ses=22260 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447000383.434:688883): pid=23991 uid=0 auid=0 ses=22260 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447000383.436:688884): pid=23994 uid=0 auid=0 ses=22260 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=23994 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447000383.436:688885): pid=23994 uid=0 auid=0 ses=22260 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=23994 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447000383.436:688886): pid=23994 uid=0 auid=0 ses=22260 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=23994 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447000383.436:688887): pid=23994 uid=0 auid=0 ses=22260 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447000383.453:688888): pid=23991 uid=0 auid=0 ses=22260 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447000383.453:688889): pid=23991 uid=0 auid=0 ses=22260 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447000383.457:688890): pid=23991 uid=0 auid=0 ses=22260 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447000383.457:688891): pid=23991 uid=0 auid=0 ses=22260 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447000383.458:688892): pid=23991 uid=0 auid=0 ses=22260 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23991 suid=0 rport=42709 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447000383.458:688893): pid=23991 uid=0 auid=0 ses=22260 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=23991 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447000383.458:688894): pid=23991 uid=0 auid=0 ses=22260 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=23991 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447000383.458:688895): pid=23991 uid=0 auid=0 ses=22260 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=23991 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447000383.478:688896): pid=24002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=24002 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447000383.479:688897): pid=24002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=24002 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447000383.479:688898): pid=24002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=24002 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447000383.523:688899): pid=24001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=24002 suid=74 rport=42711 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447000383.524:688900): pid=24001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=24002 suid=74 rport=42711 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447000383.652:688901): pid=24001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42711 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447000383.652:688902): pid=24001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=42711 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447000383.660:688903): pid=24001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447000383.661:688904): pid=24001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24002 suid=74 rport=42711 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447000383.663:688905): pid=24001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447000383.664:688906): pid=24001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447000383.664:688907): pid=24001 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22261 res=1
type=USER_ROLE_CHANGE msg=audit(1447000383.731:688908): pid=24001 uid=0 auid=0 ses=22261 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447000383.751:688909): pid=24001 uid=0 auid=0 ses=22261 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447000383.754:688910): pid=24001 uid=0 auid=0 ses=22261 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447000383.754:688911): pid=24001 uid=0 auid=0 ses=22261 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447000383.755:688912): pid=24004 uid=0 auid=0 ses=22261 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=24004 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447000383.755:688913): pid=24004 uid=0 auid=0 ses=22261 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=24004 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447000383.755:688914): pid=24004 uid=0 auid=0 ses=22261 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=24004 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447000383.756:688915): pid=24004 uid=0 auid=0 ses=22261 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447000385.036:688916): pid=24001 uid=0 auid=0 ses=22261 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447000385.036:688917): pid=24001 uid=0 auid=0 ses=22261 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447000385.040:688918): pid=24001 uid=0 auid=0 ses=22261 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447000385.040:688919): pid=24001 uid=0 auid=0 ses=22261 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447000385.041:688920): pid=24001 uid=0 auid=0 ses=22261 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24001 suid=0 rport=42711 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447000385.041:688921): pid=24001 uid=0 auid=0 ses=22261 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=24001 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447000385.041:688922): pid=24001 uid=0 auid=0 ses=22261 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=24001 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447000385.041:688923): pid=24001 uid=0 auid=0 ses=22261 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=24001 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447000385.075:688924): pid=24057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=24057 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447000385.075:688925): pid=24057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=24057 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447000385.075:688926): pid=24057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=24057 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447000385.120:688927): pid=24056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=24057 suid=74 rport=42715 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447000385.121:688928): pid=24056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=24057 suid=74 rport=42715 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447000385.251:688929): pid=24056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42715 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447000385.251:688930): pid=24056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=42715 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447000385.257:688931): pid=24056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447000385.258:688932): pid=24056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24057 suid=74 rport=42715 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447000385.259:688933): pid=24056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447000385.259:688934): pid=24056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447000385.259:688935): pid=24056 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22262 res=1
type=USER_ROLE_CHANGE msg=audit(1447000385.324:688936): pid=24056 uid=0 auid=0 ses=22262 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447000385.347:688937): pid=24056 uid=0 auid=0 ses=22262 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447000385.350:688938): pid=24056 uid=0 auid=0 ses=22262 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447000385.350:688939): pid=24056 uid=0 auid=0 ses=22262 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447000385.351:688940): pid=24059 uid=0 auid=0 ses=22262 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=24059 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447000385.351:688941): pid=24059 uid=0 auid=0 ses=22262 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=24059 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447000385.351:688942): pid=24059 uid=0 auid=0 ses=22262 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=24059 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447000385.352:688943): pid=24059 uid=0 auid=0 ses=22262 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447000385.368:688944): pid=24056 uid=0 auid=0 ses=22262 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447000385.368:688945): pid=24056 uid=0 auid=0 ses=22262 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447000385.372:688946): pid=24056 uid=0 auid=0 ses=22262 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447000385.372:688947): pid=24056 uid=0 auid=0 ses=22262 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447000385.372:688948): pid=24056 uid=0 auid=0 ses=22262 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24056 suid=0 rport=42715 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447000385.372:688949): pid=24056 uid=0 auid=0 ses=22262 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=24056 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447000385.372:688950): pid=24056 uid=0 auid=0 ses=22262 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=24056 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447000385.373:688951): pid=24056 uid=0 auid=0 ses=22262 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=24056 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447000801.447:688953): pid=25346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447000801.447:688952): pid=25347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447000801.447:688954): pid=25346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447000801.447:688955): pid=25347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447000801.448:688956): pid=25347 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22263 res=1
type=LOGIN msg=audit(1447000801.448:688957): pid=25346 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22264 res=1
type=USER_START msg=audit(1447000801.471:688958): pid=25346 uid=0 auid=0 ses=22264 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447000801.472:688959): pid=25346 uid=0 auid=0 ses=22264 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447000801.473:688960): pid=25347 uid=0 auid=0 ses=22263 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447000801.473:688961): pid=25347 uid=0 auid=0 ses=22263 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447000801.484:688962): pid=25347 uid=0 auid=0 ses=22263 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447000801.485:688963): pid=25347 uid=0 auid=0 ses=22263 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447000801.487:688964): pid=25346 uid=0 auid=0 ses=22264 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447000826.516:688965): pid=25346 uid=0 auid=0 ses=22264 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=SYSCALL msg=audit(1447001375.710:688966): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447001401.533:688967): pid=27193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447001401.533:688968): pid=27193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447001401.533:688969): pid=27193 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22265 res=1
type=USER_ACCT msg=audit(1447001401.534:688970): pid=27192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447001401.534:688971): pid=27192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447001401.534:688972): pid=27192 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22266 res=1
type=USER_START msg=audit(1447001401.551:688973): pid=27192 uid=0 auid=0 ses=22266 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447001401.552:688974): pid=27193 uid=0 auid=0 ses=22265 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447001401.552:688975): pid=27192 uid=0 auid=0 ses=22266 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447001401.552:688976): pid=27193 uid=0 auid=0 ses=22265 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447001401.560:688977): pid=27193 uid=0 auid=0 ses=22265 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447001401.565:688978): pid=27192 uid=0 auid=0 ses=22266 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447001401.565:688979): pid=27193 uid=0 auid=0 ses=22265 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447001401.571:688980): pid=27192 uid=0 auid=0 ses=22266 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447001582.772:688981): pid=27753 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=27753 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447001582.772:688982): pid=27753 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=27753 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447001582.773:688983): pid=27753 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27753 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447001582.816:688984): pid=27752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=27753 suid=74 rport=44689 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447001582.817:688985): pid=27752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=27753 suid=74 rport=44689 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447001582.944:688986): pid=27752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=44689 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447001582.944:688987): pid=27752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=44689 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447001582.954:688988): pid=27752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447001582.955:688989): pid=27752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27753 suid=74 rport=44689 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447001582.956:688990): pid=27752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447001582.956:688991): pid=27752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447001582.957:688992): pid=27752 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22267 res=1
type=USER_ROLE_CHANGE msg=audit(1447001583.029:688993): pid=27752 uid=0 auid=0 ses=22267 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447001583.057:688994): pid=27752 uid=0 auid=0 ses=22267 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447001583.060:688995): pid=27752 uid=0 auid=0 ses=22267 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447001583.060:688996): pid=27752 uid=0 auid=0 ses=22267 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447001583.062:688997): pid=27755 uid=0 auid=0 ses=22267 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=27755 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447001583.062:688998): pid=27755 uid=0 auid=0 ses=22267 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=27755 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447001583.062:688999): pid=27755 uid=0 auid=0 ses=22267 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27755 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447001583.063:689000): pid=27755 uid=0 auid=0 ses=22267 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447001583.084:689001): pid=27752 uid=0 auid=0 ses=22267 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447001583.084:689002): pid=27752 uid=0 auid=0 ses=22267 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447001583.089:689003): pid=27752 uid=0 auid=0 ses=22267 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447001583.089:689004): pid=27752 uid=0 auid=0 ses=22267 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447001583.090:689005): pid=27752 uid=0 auid=0 ses=22267 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27752 suid=0 rport=44689 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447001583.090:689006): pid=27752 uid=0 auid=0 ses=22267 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=27752 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447001583.090:689007): pid=27752 uid=0 auid=0 ses=22267 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=27752 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447001583.090:689008): pid=27752 uid=0 auid=0 ses=22267 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27752 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447001583.110:689009): pid=27763 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=27763 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447001583.110:689010): pid=27763 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=27763 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447001583.110:689011): pid=27763 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27763 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447001583.154:689012): pid=27762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=27763 suid=74 rport=44690 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447001583.154:689013): pid=27762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=27763 suid=74 rport=44690 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447001583.283:689014): pid=27762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=44690 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447001583.283:689015): pid=27762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=44690 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447001583.293:689016): pid=27762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447001583.294:689017): pid=27762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27763 suid=74 rport=44690 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447001583.296:689018): pid=27762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447001583.296:689019): pid=27762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447001583.296:689020): pid=27762 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22268 res=1
type=USER_ROLE_CHANGE msg=audit(1447001583.364:689021): pid=27762 uid=0 auid=0 ses=22268 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447001583.390:689022): pid=27762 uid=0 auid=0 ses=22268 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447001583.392:689023): pid=27762 uid=0 auid=0 ses=22268 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447001583.392:689024): pid=27762 uid=0 auid=0 ses=22268 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447001583.394:689025): pid=27765 uid=0 auid=0 ses=22268 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=27765 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447001583.394:689026): pid=27765 uid=0 auid=0 ses=22268 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=27765 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447001583.394:689027): pid=27765 uid=0 auid=0 ses=22268 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27765 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447001583.394:689028): pid=27765 uid=0 auid=0 ses=22268 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447001584.683:689029): pid=27762 uid=0 auid=0 ses=22268 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447001584.683:689030): pid=27762 uid=0 auid=0 ses=22268 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447001584.686:689031): pid=27762 uid=0 auid=0 ses=22268 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447001584.686:689032): pid=27762 uid=0 auid=0 ses=22268 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447001584.686:689033): pid=27762 uid=0 auid=0 ses=22268 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27762 suid=0 rport=44690 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447001584.686:689034): pid=27762 uid=0 auid=0 ses=22268 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=27762 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447001584.686:689035): pid=27762 uid=0 auid=0 ses=22268 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=27762 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447001584.687:689036): pid=27762 uid=0 auid=0 ses=22268 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27762 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447001584.722:689037): pid=27815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=27815 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447001584.722:689038): pid=27815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=27815 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447001584.722:689039): pid=27815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27815 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447001584.769:689040): pid=27814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=27815 suid=74 rport=44694 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447001584.772:689041): pid=27814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=27815 suid=74 rport=44694 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447001584.888:689042): pid=27814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=44694 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447001584.888:689043): pid=27814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=44694 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447001584.894:689044): pid=27814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447001584.894:689045): pid=27814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27815 suid=74 rport=44694 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447001584.897:689046): pid=27814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447001584.897:689047): pid=27814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447001584.897:689048): pid=27814 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22269 res=1
type=USER_ROLE_CHANGE msg=audit(1447001584.962:689049): pid=27814 uid=0 auid=0 ses=22269 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447001584.986:689050): pid=27814 uid=0 auid=0 ses=22269 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447001584.988:689051): pid=27814 uid=0 auid=0 ses=22269 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447001584.988:689052): pid=27814 uid=0 auid=0 ses=22269 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447001584.990:689053): pid=27820 uid=0 auid=0 ses=22269 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=27820 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447001584.990:689054): pid=27820 uid=0 auid=0 ses=22269 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=27820 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447001584.990:689055): pid=27820 uid=0 auid=0 ses=22269 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27820 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447001584.991:689056): pid=27820 uid=0 auid=0 ses=22269 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447001585.009:689057): pid=27814 uid=0 auid=0 ses=22269 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447001585.009:689058): pid=27814 uid=0 auid=0 ses=22269 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447001585.012:689059): pid=27814 uid=0 auid=0 ses=22269 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447001585.013:689060): pid=27814 uid=0 auid=0 ses=22269 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447001585.013:689061): pid=27814 uid=0 auid=0 ses=22269 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27814 suid=0 rport=44694 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447001585.013:689062): pid=27814 uid=0 auid=0 ses=22269 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=27814 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447001585.013:689063): pid=27814 uid=0 auid=0 ses=22269 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=27814 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447001585.013:689064): pid=27814 uid=0 auid=0 ses=22269 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27814 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447002001.593:689065): pid=29109 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447002001.593:689066): pid=29110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447002001.593:689067): pid=29109 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447002001.593:689068): pid=29110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447002001.594:689069): pid=29110 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22270 res=1
type=LOGIN msg=audit(1447002001.594:689070): pid=29109 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22271 res=1
type=USER_START msg=audit(1447002001.610:689071): pid=29110 uid=0 auid=0 ses=22270 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447002001.611:689072): pid=29110 uid=0 auid=0 ses=22270 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447002001.614:689073): pid=29109 uid=0 auid=0 ses=22271 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447002001.614:689074): pid=29109 uid=0 auid=0 ses=22271 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447002001.621:689075): pid=29110 uid=0 auid=0 ses=22270 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447002001.625:689076): pid=29110 uid=0 auid=0 ses=22270 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447002001.629:689077): pid=29109 uid=0 auid=0 ses=22271 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447002001.632:689078): pid=29109 uid=0 auid=0 ses=22271 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447002061.646:689079): pid=29346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447002061.646:689080): pid=29346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447002061.646:689081): pid=29346 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22272 res=1
type=USER_START msg=audit(1447002061.655:689082): pid=29346 uid=0 auid=0 ses=22272 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447002061.656:689083): pid=29346 uid=0 auid=0 ses=22272 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447002061.679:689084): pid=29346 uid=0 auid=0 ses=22272 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447002061.680:689085): pid=29346 uid=0 auid=0 ses=22272 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447002601.696:689086): pid=30991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447002601.696:689087): pid=30992 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447002601.696:689088): pid=30991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447002601.696:689089): pid=30992 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447002601.696:689090): pid=30992 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22273 res=1
type=LOGIN msg=audit(1447002601.696:689091): pid=30991 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22274 res=1
type=USER_START msg=audit(1447002601.713:689092): pid=30992 uid=0 auid=0 ses=22273 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447002601.714:689093): pid=30992 uid=0 auid=0 ses=22273 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447002601.715:689094): pid=30991 uid=0 auid=0 ses=22274 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447002601.715:689095): pid=30991 uid=0 auid=0 ses=22274 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447002601.723:689096): pid=30992 uid=0 auid=0 ses=22273 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447002601.724:689097): pid=30992 uid=0 auid=0 ses=22273 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447002601.729:689098): pid=30991 uid=0 auid=0 ses=22274 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447002601.732:689099): pid=30991 uid=0 auid=0 ses=22274 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447002782.548:689100): pid=31551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=31551 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447002782.548:689101): pid=31551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=31551 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447002782.548:689102): pid=31551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=31551 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447002782.592:689103): pid=31550 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=31551 suid=74 rport=46669 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447002782.592:689104): pid=31550 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=31551 suid=74 rport=46669 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447002782.720:689105): pid=31550 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=46669 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447002782.720:689106): pid=31550 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=46669 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447002782.728:689107): pid=31550 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447002782.730:689108): pid=31550 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=31551 suid=74 rport=46669 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447002782.735:689109): pid=31550 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447002782.735:689110): pid=31550 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447002782.735:689111): pid=31550 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22275 res=1
type=USER_ROLE_CHANGE msg=audit(1447002782.807:689112): pid=31550 uid=0 auid=0 ses=22275 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447002782.827:689113): pid=31550 uid=0 auid=0 ses=22275 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447002782.830:689114): pid=31550 uid=0 auid=0 ses=22275 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447002782.830:689115): pid=31550 uid=0 auid=0 ses=22275 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447002782.831:689116): pid=31553 uid=0 auid=0 ses=22275 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=31553 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447002782.832:689117): pid=31553 uid=0 auid=0 ses=22275 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=31553 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447002782.832:689118): pid=31553 uid=0 auid=0 ses=22275 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=31553 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447002782.832:689119): pid=31553 uid=0 auid=0 ses=22275 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447002782.852:689120): pid=31550 uid=0 auid=0 ses=22275 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447002782.852:689121): pid=31550 uid=0 auid=0 ses=22275 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447002782.856:689122): pid=31550 uid=0 auid=0 ses=22275 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447002782.856:689123): pid=31550 uid=0 auid=0 ses=22275 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447002782.857:689124): pid=31550 uid=0 auid=0 ses=22275 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=31550 suid=0 rport=46669 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447002782.857:689125): pid=31550 uid=0 auid=0 ses=22275 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=31550 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447002782.857:689126): pid=31550 uid=0 auid=0 ses=22275 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=31550 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447002782.857:689127): pid=31550 uid=0 auid=0 ses=22275 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=31550 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447002782.879:689128): pid=31561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=31561 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447002782.879:689129): pid=31561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=31561 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447002782.879:689130): pid=31561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=31561 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447002782.923:689131): pid=31560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=31561 suid=74 rport=46670 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447002782.923:689132): pid=31560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=31561 suid=74 rport=46670 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447002783.051:689133): pid=31560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=46670 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447002783.051:689134): pid=31560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=46670 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447002783.059:689135): pid=31560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447002783.061:689136): pid=31560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=31561 suid=74 rport=46670 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447002783.064:689137): pid=31560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447002783.064:689138): pid=31560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447002783.064:689139): pid=31560 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22276 res=1
type=USER_ROLE_CHANGE msg=audit(1447002783.130:689140): pid=31560 uid=0 auid=0 ses=22276 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447002783.150:689141): pid=31560 uid=0 auid=0 ses=22276 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447002783.153:689142): pid=31560 uid=0 auid=0 ses=22276 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447002783.153:689143): pid=31560 uid=0 auid=0 ses=22276 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447002783.155:689144): pid=31563 uid=0 auid=0 ses=22276 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=31563 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447002783.155:689145): pid=31563 uid=0 auid=0 ses=22276 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=31563 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447002783.155:689146): pid=31563 uid=0 auid=0 ses=22276 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=31563 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447002783.155:689147): pid=31563 uid=0 auid=0 ses=22276 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447002784.432:689148): pid=31560 uid=0 auid=0 ses=22276 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447002784.432:689149): pid=31560 uid=0 auid=0 ses=22276 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447002784.437:689150): pid=31560 uid=0 auid=0 ses=22276 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447002784.437:689151): pid=31560 uid=0 auid=0 ses=22276 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447002784.437:689152): pid=31560 uid=0 auid=0 ses=22276 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=31560 suid=0 rport=46670 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447002784.437:689153): pid=31560 uid=0 auid=0 ses=22276 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=31560 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447002784.437:689154): pid=31560 uid=0 auid=0 ses=22276 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=31560 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447002784.438:689155): pid=31560 uid=0 auid=0 ses=22276 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=31560 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447002784.470:689156): pid=31635 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=31635 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447002784.470:689157): pid=31635 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=31635 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447002784.471:689158): pid=31635 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=31635 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447002784.515:689159): pid=31634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=31635 suid=74 rport=46673 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447002784.516:689160): pid=31634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=31635 suid=74 rport=46673 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447002784.645:689161): pid=31634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=46673 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447002784.645:689162): pid=31634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=46673 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447002784.649:689163): pid=31634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447002784.650:689164): pid=31634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=31635 suid=74 rport=46673 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447002784.652:689165): pid=31634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447002784.652:689166): pid=31634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447002784.653:689167): pid=31634 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22277 res=1
type=USER_ROLE_CHANGE msg=audit(1447002784.719:689168): pid=31634 uid=0 auid=0 ses=22277 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447002784.740:689169): pid=31634 uid=0 auid=0 ses=22277 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447002784.743:689170): pid=31634 uid=0 auid=0 ses=22277 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447002784.743:689171): pid=31634 uid=0 auid=0 ses=22277 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447002784.744:689172): pid=31637 uid=0 auid=0 ses=22277 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=31637 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447002784.744:689173): pid=31637 uid=0 auid=0 ses=22277 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=31637 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447002784.744:689174): pid=31637 uid=0 auid=0 ses=22277 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=31637 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447002784.745:689175): pid=31637 uid=0 auid=0 ses=22277 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447002784.767:689176): pid=31634 uid=0 auid=0 ses=22277 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447002784.767:689177): pid=31634 uid=0 auid=0 ses=22277 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447002784.774:689178): pid=31634 uid=0 auid=0 ses=22277 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447002784.775:689179): pid=31634 uid=0 auid=0 ses=22277 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447002784.775:689180): pid=31634 uid=0 auid=0 ses=22277 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=31634 suid=0 rport=46673 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447002784.776:689181): pid=31634 uid=0 auid=0 ses=22277 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=31634 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447002784.776:689182): pid=31634 uid=0 auid=0 ses=22277 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=31634 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447002784.776:689183): pid=31634 uid=0 auid=0 ses=22277 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=31634 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447003201.751:689184): pid=423 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447003201.751:689185): pid=424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447003201.751:689186): pid=423 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447003201.751:689187): pid=424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447003201.752:689188): pid=424 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22278 res=1
type=LOGIN msg=audit(1447003201.752:689189): pid=423 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22279 res=1
type=USER_START msg=audit(1447003201.769:689190): pid=424 uid=0 auid=0 ses=22278 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447003201.770:689191): pid=424 uid=0 auid=0 ses=22278 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447003201.770:689192): pid=423 uid=0 auid=0 ses=22279 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447003201.771:689193): pid=423 uid=0 auid=0 ses=22279 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447003201.780:689194): pid=424 uid=0 auid=0 ses=22278 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447003201.781:689195): pid=424 uid=0 auid=0 ses=22278 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447003201.788:689196): pid=423 uid=0 auid=0 ses=22279 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447003201.790:689197): pid=423 uid=0 auid=0 ses=22279 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1447003445.679:689198): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447003801.810:689199): pid=2375 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447003801.810:689200): pid=2376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447003801.810:689201): pid=2375 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447003801.810:689202): pid=2376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447003801.811:689203): pid=2376 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22280 res=1
type=LOGIN msg=audit(1447003801.811:689204): pid=2375 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22281 res=1
type=USER_START msg=audit(1447003801.827:689205): pid=2375 uid=0 auid=0 ses=22281 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447003801.828:689206): pid=2376 uid=0 auid=0 ses=22280 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447003801.828:689207): pid=2375 uid=0 auid=0 ses=22281 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447003801.828:689208): pid=2376 uid=0 auid=0 ses=22280 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447003801.836:689209): pid=2376 uid=0 auid=0 ses=22280 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447003801.837:689210): pid=2376 uid=0 auid=0 ses=22280 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447003801.838:689211): pid=2375 uid=0 auid=0 ses=22281 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447003801.842:689212): pid=2375 uid=0 auid=0 ses=22281 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447003983.153:689213): pid=2938 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=2938 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447003983.153:689214): pid=2938 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=2938 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447003983.153:689215): pid=2938 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=2938 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447003983.197:689216): pid=2937 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=2938 suid=74 rport=48650 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447003983.197:689217): pid=2937 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=2938 suid=74 rport=48650 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447003983.324:689218): pid=2937 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=48650 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447003983.324:689219): pid=2937 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=48650 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447003983.328:689220): pid=2937 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447003983.329:689221): pid=2937 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2938 suid=74 rport=48650 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447003983.331:689222): pid=2937 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447003983.332:689223): pid=2937 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447003983.332:689224): pid=2937 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22282 res=1
type=USER_ROLE_CHANGE msg=audit(1447003983.400:689225): pid=2937 uid=0 auid=0 ses=22282 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447003983.417:689226): pid=2937 uid=0 auid=0 ses=22282 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447003983.420:689227): pid=2937 uid=0 auid=0 ses=22282 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447003983.420:689228): pid=2937 uid=0 auid=0 ses=22282 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447003983.421:689229): pid=2940 uid=0 auid=0 ses=22282 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=2940 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447003983.421:689230): pid=2940 uid=0 auid=0 ses=22282 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=2940 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447003983.421:689231): pid=2940 uid=0 auid=0 ses=22282 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=2940 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447003983.422:689232): pid=2940 uid=0 auid=0 ses=22282 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447003983.440:689233): pid=2937 uid=0 auid=0 ses=22282 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447003983.440:689234): pid=2937 uid=0 auid=0 ses=22282 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447003983.444:689235): pid=2937 uid=0 auid=0 ses=22282 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447003983.444:689236): pid=2937 uid=0 auid=0 ses=22282 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447003983.445:689237): pid=2937 uid=0 auid=0 ses=22282 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2937 suid=0 rport=48650 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447003983.445:689238): pid=2937 uid=0 auid=0 ses=22282 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=2937 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447003983.445:689239): pid=2937 uid=0 auid=0 ses=22282 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=2937 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447003983.445:689240): pid=2937 uid=0 auid=0 ses=22282 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=2937 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447003983.467:689241): pid=2948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=2948 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447003983.467:689242): pid=2948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=2948 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447003983.467:689243): pid=2948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=2948 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447003983.511:689244): pid=2947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=2948 suid=74 rport=48651 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447003983.511:689245): pid=2947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=2948 suid=74 rport=48651 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447003983.639:689246): pid=2947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=48651 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447003983.639:689247): pid=2947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=48651 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447003983.648:689248): pid=2947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447003983.649:689249): pid=2947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2948 suid=74 rport=48651 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447003983.651:689250): pid=2947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447003983.651:689251): pid=2947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447003983.651:689252): pid=2947 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22283 res=1
type=USER_ROLE_CHANGE msg=audit(1447003983.720:689253): pid=2947 uid=0 auid=0 ses=22283 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447003983.747:689254): pid=2947 uid=0 auid=0 ses=22283 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447003983.750:689255): pid=2947 uid=0 auid=0 ses=22283 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447003983.750:689256): pid=2947 uid=0 auid=0 ses=22283 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447003983.751:689257): pid=2950 uid=0 auid=0 ses=22283 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=2950 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447003983.751:689258): pid=2950 uid=0 auid=0 ses=22283 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=2950 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447003983.752:689259): pid=2950 uid=0 auid=0 ses=22283 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=2950 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447003983.752:689260): pid=2950 uid=0 auid=0 ses=22283 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447003985.032:689261): pid=2947 uid=0 auid=0 ses=22283 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447003985.032:689262): pid=2947 uid=0 auid=0 ses=22283 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447003985.036:689263): pid=2947 uid=0 auid=0 ses=22283 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447003985.036:689264): pid=2947 uid=0 auid=0 ses=22283 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447003985.036:689265): pid=2947 uid=0 auid=0 ses=22283 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2947 suid=0 rport=48651 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447003985.037:689266): pid=2947 uid=0 auid=0 ses=22283 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=2947 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447003985.037:689267): pid=2947 uid=0 auid=0 ses=22283 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=2947 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447003985.037:689268): pid=2947 uid=0 auid=0 ses=22283 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=2947 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447003985.068:689269): pid=3003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=3003 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447003985.069:689270): pid=3003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=3003 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447003985.069:689271): pid=3003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=3003 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447003985.113:689272): pid=3002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=3003 suid=74 rport=48654 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447003985.113:689273): pid=3002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=3003 suid=74 rport=48654 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447003985.236:689274): pid=3002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=48654 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447003985.236:689275): pid=3002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=48654 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447003985.242:689276): pid=3002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447003985.242:689277): pid=3002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3003 suid=74 rport=48654 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447003985.243:689278): pid=3002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447003985.243:689279): pid=3002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447003985.244:689280): pid=3002 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22284 res=1
type=USER_ROLE_CHANGE msg=audit(1447003985.310:689281): pid=3002 uid=0 auid=0 ses=22284 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447003985.328:689282): pid=3002 uid=0 auid=0 ses=22284 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447003985.331:689283): pid=3002 uid=0 auid=0 ses=22284 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447003985.331:689284): pid=3002 uid=0 auid=0 ses=22284 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447003985.332:689285): pid=3005 uid=0 auid=0 ses=22284 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=3005 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447003985.332:689286): pid=3005 uid=0 auid=0 ses=22284 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=3005 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447003985.332:689287): pid=3005 uid=0 auid=0 ses=22284 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=3005 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447003985.333:689288): pid=3005 uid=0 auid=0 ses=22284 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447003985.349:689289): pid=3002 uid=0 auid=0 ses=22284 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447003985.349:689290): pid=3002 uid=0 auid=0 ses=22284 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447003985.352:689291): pid=3002 uid=0 auid=0 ses=22284 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447003985.352:689292): pid=3002 uid=0 auid=0 ses=22284 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447003985.352:689293): pid=3002 uid=0 auid=0 ses=22284 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3002 suid=0 rport=48654 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447003985.352:689294): pid=3002 uid=0 auid=0 ses=22284 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=3002 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447003985.353:689295): pid=3002 uid=0 auid=0 ses=22284 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=3002 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447003985.353:689296): pid=3002 uid=0 auid=0 ses=22284 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=3002 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447004401.866:689298): pid=4295 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447004401.866:689297): pid=4294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447004401.866:689299): pid=4295 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447004401.866:689300): pid=4294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447004401.868:689301): pid=4295 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22285 res=1
type=LOGIN msg=audit(1447004401.868:689302): pid=4294 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22286 res=1
type=USER_START msg=audit(1447004401.886:689303): pid=4295 uid=0 auid=0 ses=22285 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447004401.886:689304): pid=4294 uid=0 auid=0 ses=22286 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447004401.887:689305): pid=4295 uid=0 auid=0 ses=22285 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447004401.887:689306): pid=4294 uid=0 auid=0 ses=22286 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447004401.897:689307): pid=4295 uid=0 auid=0 ses=22285 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447004401.905:689308): pid=4295 uid=0 auid=0 ses=22285 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447004401.905:689309): pid=4294 uid=0 auid=0 ses=22286 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447004401.911:689310): pid=4294 uid=0 auid=0 ses=22286 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SERVICE_START msg=audit(1447004913.927:689311): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-tmpfiles-clean" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=SERVICE_STOP msg=audit(1447004913.927:689312): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-tmpfiles-clean" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1447005001.922:689313): pid=6141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447005001.922:689314): pid=6142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447005001.922:689315): pid=6141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447005001.923:689316): pid=6142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447005001.924:689318): pid=6142 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22288 res=1
type=LOGIN msg=audit(1447005001.924:689317): pid=6141 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22287 res=1
type=USER_START msg=audit(1447005001.940:689319): pid=6141 uid=0 auid=0 ses=22287 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447005001.941:689320): pid=6141 uid=0 auid=0 ses=22287 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447005001.941:689321): pid=6142 uid=0 auid=0 ses=22288 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447005001.941:689322): pid=6142 uid=0 auid=0 ses=22288 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447005001.950:689323): pid=6142 uid=0 auid=0 ses=22288 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447005001.953:689324): pid=6142 uid=0 auid=0 ses=22288 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447005001.954:689325): pid=6141 uid=0 auid=0 ses=22287 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447005026.984:689326): pid=6141 uid=0 auid=0 ses=22287 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=CRYPTO_KEY_USER msg=audit(1447005182.395:689327): pid=6703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=6703 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447005182.395:689328): pid=6703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=6703 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447005182.395:689329): pid=6703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=6703 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447005182.439:689330): pid=6702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=6703 suid=74 rport=50631 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447005182.439:689331): pid=6702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=6703 suid=74 rport=50631 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447005182.566:689332): pid=6702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=50631 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447005182.566:689333): pid=6702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=50631 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447005182.575:689334): pid=6702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447005182.577:689335): pid=6702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6703 suid=74 rport=50631 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447005182.579:689336): pid=6702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447005182.579:689337): pid=6702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447005182.580:689338): pid=6702 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22289 res=1
type=USER_ROLE_CHANGE msg=audit(1447005182.649:689339): pid=6702 uid=0 auid=0 ses=22289 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447005182.668:689340): pid=6702 uid=0 auid=0 ses=22289 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447005182.671:689341): pid=6702 uid=0 auid=0 ses=22289 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447005182.671:689342): pid=6702 uid=0 auid=0 ses=22289 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447005182.673:689343): pid=6705 uid=0 auid=0 ses=22289 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=6705 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447005182.673:689344): pid=6705 uid=0 auid=0 ses=22289 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=6705 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447005182.673:689345): pid=6705 uid=0 auid=0 ses=22289 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=6705 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447005182.674:689346): pid=6705 uid=0 auid=0 ses=22289 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447005182.691:689347): pid=6702 uid=0 auid=0 ses=22289 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447005182.691:689348): pid=6702 uid=0 auid=0 ses=22289 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447005182.695:689349): pid=6702 uid=0 auid=0 ses=22289 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447005182.695:689350): pid=6702 uid=0 auid=0 ses=22289 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447005182.696:689351): pid=6702 uid=0 auid=0 ses=22289 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6702 suid=0 rport=50631 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447005182.696:689352): pid=6702 uid=0 auid=0 ses=22289 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=6702 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447005182.696:689353): pid=6702 uid=0 auid=0 ses=22289 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=6702 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447005182.696:689354): pid=6702 uid=0 auid=0 ses=22289 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=6702 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447005182.718:689355): pid=6713 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=6713 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447005182.718:689356): pid=6713 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=6713 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447005182.718:689357): pid=6713 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=6713 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447005182.762:689358): pid=6712 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=6713 suid=74 rport=50632 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447005182.763:689359): pid=6712 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=6713 suid=74 rport=50632 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447005182.890:689360): pid=6712 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=50632 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447005182.890:689361): pid=6712 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=50632 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447005182.899:689362): pid=6712 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447005182.901:689363): pid=6712 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6713 suid=74 rport=50632 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447005182.903:689364): pid=6712 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447005182.903:689365): pid=6712 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447005182.903:689366): pid=6712 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22290 res=1
type=USER_ROLE_CHANGE msg=audit(1447005182.971:689367): pid=6712 uid=0 auid=0 ses=22290 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447005182.991:689368): pid=6712 uid=0 auid=0 ses=22290 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447005182.994:689369): pid=6712 uid=0 auid=0 ses=22290 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447005182.994:689370): pid=6712 uid=0 auid=0 ses=22290 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447005182.996:689371): pid=6715 uid=0 auid=0 ses=22290 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=6715 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447005182.996:689372): pid=6715 uid=0 auid=0 ses=22290 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=6715 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447005182.996:689373): pid=6715 uid=0 auid=0 ses=22290 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=6715 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447005182.996:689374): pid=6715 uid=0 auid=0 ses=22290 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447005184.253:689375): pid=6712 uid=0 auid=0 ses=22290 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447005184.253:689376): pid=6712 uid=0 auid=0 ses=22290 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447005184.259:689377): pid=6712 uid=0 auid=0 ses=22290 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447005184.259:689378): pid=6712 uid=0 auid=0 ses=22290 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447005184.260:689379): pid=6712 uid=0 auid=0 ses=22290 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6712 suid=0 rport=50632 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447005184.260:689380): pid=6712 uid=0 auid=0 ses=22290 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=6712 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447005184.260:689381): pid=6712 uid=0 auid=0 ses=22290 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=6712 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447005184.260:689382): pid=6712 uid=0 auid=0 ses=22290 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=6712 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447005184.293:689383): pid=6765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=6765 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447005184.294:689384): pid=6765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=6765 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447005184.294:689385): pid=6765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=6765 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447005184.337:689386): pid=6764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=6765 suid=74 rport=50634 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447005184.338:689387): pid=6764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=6765 suid=74 rport=50634 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447005184.461:689388): pid=6764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=50634 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447005184.461:689389): pid=6764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=50634 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447005184.469:689390): pid=6764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447005184.469:689391): pid=6764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6765 suid=74 rport=50634 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447005184.471:689392): pid=6764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447005184.471:689393): pid=6764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447005184.471:689394): pid=6764 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22291 res=1
type=USER_ROLE_CHANGE msg=audit(1447005184.538:689395): pid=6764 uid=0 auid=0 ses=22291 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447005184.563:689396): pid=6764 uid=0 auid=0 ses=22291 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447005184.565:689397): pid=6764 uid=0 auid=0 ses=22291 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447005184.565:689398): pid=6764 uid=0 auid=0 ses=22291 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447005184.567:689399): pid=6767 uid=0 auid=0 ses=22291 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=6767 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447005184.567:689400): pid=6767 uid=0 auid=0 ses=22291 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=6767 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447005184.567:689401): pid=6767 uid=0 auid=0 ses=22291 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=6767 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447005184.568:689402): pid=6767 uid=0 auid=0 ses=22291 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447005184.586:689403): pid=6764 uid=0 auid=0 ses=22291 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447005184.586:689404): pid=6764 uid=0 auid=0 ses=22291 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447005184.591:689405): pid=6764 uid=0 auid=0 ses=22291 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447005184.592:689406): pid=6764 uid=0 auid=0 ses=22291 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447005184.592:689407): pid=6764 uid=0 auid=0 ses=22291 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6764 suid=0 rport=50634 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447005184.592:689408): pid=6764 uid=0 auid=0 ses=22291 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=6764 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447005184.592:689409): pid=6764 uid=0 auid=0 ses=22291 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=6764 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447005184.592:689410): pid=6764 uid=0 auid=0 ses=22291 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=6764 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=SYSCALL msg=audit(1447005564.699:689411): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447005602.009:689412): pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447005602.009:689413): pid=8062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447005602.009:689414): pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447005602.009:689415): pid=8062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447005602.010:689416): pid=8061 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22292 res=1
type=LOGIN msg=audit(1447005602.010:689417): pid=8062 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22293 res=1
type=USER_START msg=audit(1447005602.027:689418): pid=8062 uid=0 auid=0 ses=22293 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447005602.027:689419): pid=8061 uid=0 auid=0 ses=22292 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447005602.027:689420): pid=8062 uid=0 auid=0 ses=22293 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447005602.027:689421): pid=8061 uid=0 auid=0 ses=22292 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447005602.034:689422): pid=8062 uid=0 auid=0 ses=22293 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447005602.038:689423): pid=8062 uid=0 auid=0 ses=22293 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447005602.045:689424): pid=8061 uid=0 auid=0 ses=22292 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447005602.047:689425): pid=8061 uid=0 auid=0 ses=22292 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447005661.060:689426): pid=8295 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447005661.060:689427): pid=8295 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447005661.061:689428): pid=8295 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22294 res=1
type=USER_START msg=audit(1447005661.072:689429): pid=8295 uid=0 auid=0 ses=22294 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447005661.072:689430): pid=8295 uid=0 auid=0 ses=22294 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447005661.101:689431): pid=8295 uid=0 auid=0 ses=22294 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447005661.102:689432): pid=8295 uid=0 auid=0 ses=22294 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447006201.114:689433): pid=9963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447006201.114:689434): pid=9963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447006201.114:689435): pid=9963 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22295 res=1
type=USER_ACCT msg=audit(1447006201.114:689436): pid=9964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447006201.114:689437): pid=9964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447006201.114:689438): pid=9964 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22296 res=1
type=USER_START msg=audit(1447006201.129:689439): pid=9964 uid=0 auid=0 ses=22296 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447006201.129:689440): pid=9964 uid=0 auid=0 ses=22296 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447006201.130:689441): pid=9963 uid=0 auid=0 ses=22295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447006201.130:689442): pid=9963 uid=0 auid=0 ses=22295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447006201.136:689443): pid=9964 uid=0 auid=0 ses=22296 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447006201.137:689444): pid=9964 uid=0 auid=0 ses=22296 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447006201.146:689445): pid=9963 uid=0 auid=0 ses=22295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447006201.147:689446): pid=9963 uid=0 auid=0 ses=22295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447006383.286:689447): pid=10524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=10524 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447006383.286:689448): pid=10524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=10524 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447006383.286:689449): pid=10524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=10524 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447006383.329:689450): pid=10523 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=10524 suid=74 rport=52612 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447006383.330:689451): pid=10523 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=10524 suid=74 rport=52612 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447006383.457:689452): pid=10523 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52612 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447006383.457:689453): pid=10523 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=52612 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447006383.465:689454): pid=10523 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447006383.467:689455): pid=10523 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10524 suid=74 rport=52612 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447006383.469:689456): pid=10523 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447006383.469:689457): pid=10523 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447006383.469:689458): pid=10523 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22297 res=1
type=USER_ROLE_CHANGE msg=audit(1447006383.542:689459): pid=10523 uid=0 auid=0 ses=22297 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447006383.575:689460): pid=10523 uid=0 auid=0 ses=22297 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447006383.577:689461): pid=10523 uid=0 auid=0 ses=22297 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447006383.577:689462): pid=10523 uid=0 auid=0 ses=22297 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447006383.580:689463): pid=10526 uid=0 auid=0 ses=22297 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=10526 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447006383.580:689464): pid=10526 uid=0 auid=0 ses=22297 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=10526 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447006383.580:689465): pid=10526 uid=0 auid=0 ses=22297 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=10526 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447006383.580:689466): pid=10526 uid=0 auid=0 ses=22297 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447006383.598:689467): pid=10523 uid=0 auid=0 ses=22297 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447006383.598:689468): pid=10523 uid=0 auid=0 ses=22297 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447006383.602:689469): pid=10523 uid=0 auid=0 ses=22297 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447006383.602:689470): pid=10523 uid=0 auid=0 ses=22297 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447006383.602:689471): pid=10523 uid=0 auid=0 ses=22297 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10523 suid=0 rport=52612 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447006383.602:689472): pid=10523 uid=0 auid=0 ses=22297 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=10523 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447006383.602:689473): pid=10523 uid=0 auid=0 ses=22297 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=10523 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447006383.603:689474): pid=10523 uid=0 auid=0 ses=22297 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=10523 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447006383.625:689475): pid=10534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=10534 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447006383.625:689476): pid=10534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=10534 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447006383.625:689477): pid=10534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=10534 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447006383.669:689478): pid=10533 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=10534 suid=74 rport=52613 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447006383.670:689479): pid=10533 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=10534 suid=74 rport=52613 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447006383.795:689480): pid=10533 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52613 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447006383.795:689481): pid=10533 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=52613 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447006383.804:689482): pid=10533 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447006383.804:689483): pid=10533 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10534 suid=74 rport=52613 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447006383.804:689484): pid=10533 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447006383.806:689485): pid=10533 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447006383.806:689486): pid=10533 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22298 res=1
type=USER_ROLE_CHANGE msg=audit(1447006383.868:689487): pid=10533 uid=0 auid=0 ses=22298 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447006383.892:689488): pid=10533 uid=0 auid=0 ses=22298 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447006383.894:689489): pid=10533 uid=0 auid=0 ses=22298 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447006383.894:689490): pid=10533 uid=0 auid=0 ses=22298 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447006383.895:689491): pid=10536 uid=0 auid=0 ses=22298 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=10536 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447006383.896:689492): pid=10536 uid=0 auid=0 ses=22298 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=10536 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447006383.896:689493): pid=10536 uid=0 auid=0 ses=22298 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=10536 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447006383.896:689494): pid=10536 uid=0 auid=0 ses=22298 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447006385.171:689495): pid=10533 uid=0 auid=0 ses=22298 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447006385.171:689496): pid=10533 uid=0 auid=0 ses=22298 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447006385.177:689497): pid=10533 uid=0 auid=0 ses=22298 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447006385.177:689498): pid=10533 uid=0 auid=0 ses=22298 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447006385.177:689499): pid=10533 uid=0 auid=0 ses=22298 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10533 suid=0 rport=52613 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447006385.177:689500): pid=10533 uid=0 auid=0 ses=22298 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=10533 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447006385.177:689501): pid=10533 uid=0 auid=0 ses=22298 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=10533 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447006385.177:689502): pid=10533 uid=0 auid=0 ses=22298 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=10533 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447006385.211:689503): pid=10589 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=10589 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447006385.212:689504): pid=10589 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=10589 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447006385.212:689505): pid=10589 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=10589 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447006385.257:689506): pid=10588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=10589 suid=74 rport=52615 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447006385.257:689507): pid=10588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=10589 suid=74 rport=52615 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447006385.387:689508): pid=10588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52615 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447006385.387:689509): pid=10588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=52615 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447006385.395:689510): pid=10588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447006385.396:689511): pid=10588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10589 suid=74 rport=52615 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447006385.398:689512): pid=10588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447006385.398:689513): pid=10588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447006385.398:689514): pid=10588 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22299 res=1
type=USER_ROLE_CHANGE msg=audit(1447006385.463:689515): pid=10588 uid=0 auid=0 ses=22299 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447006385.487:689516): pid=10588 uid=0 auid=0 ses=22299 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447006385.489:689517): pid=10588 uid=0 auid=0 ses=22299 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447006385.490:689518): pid=10588 uid=0 auid=0 ses=22299 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447006385.491:689519): pid=10591 uid=0 auid=0 ses=22299 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=10591 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447006385.491:689520): pid=10591 uid=0 auid=0 ses=22299 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=10591 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447006385.491:689521): pid=10591 uid=0 auid=0 ses=22299 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=10591 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447006385.493:689522): pid=10591 uid=0 auid=0 ses=22299 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447006385.511:689523): pid=10588 uid=0 auid=0 ses=22299 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447006385.511:689524): pid=10588 uid=0 auid=0 ses=22299 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447006385.516:689525): pid=10588 uid=0 auid=0 ses=22299 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447006385.516:689526): pid=10588 uid=0 auid=0 ses=22299 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447006385.517:689527): pid=10588 uid=0 auid=0 ses=22299 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10588 suid=0 rport=52615 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447006385.517:689528): pid=10588 uid=0 auid=0 ses=22299 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=10588 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447006385.517:689529): pid=10588 uid=0 auid=0 ses=22299 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=10588 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447006385.517:689530): pid=10588 uid=0 auid=0 ses=22299 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=10588 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447006801.173:689532): pid=11887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447006801.173:689531): pid=11888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447006801.174:689533): pid=11887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447006801.174:689534): pid=11888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447006801.175:689535): pid=11888 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22300 res=1
type=LOGIN msg=audit(1447006801.175:689536): pid=11887 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22301 res=1
type=USER_START msg=audit(1447006801.193:689537): pid=11887 uid=0 auid=0 ses=22301 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447006801.194:689538): pid=11887 uid=0 auid=0 ses=22301 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447006801.200:689539): pid=11888 uid=0 auid=0 ses=22300 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447006801.200:689540): pid=11888 uid=0 auid=0 ses=22300 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447006801.207:689541): pid=11888 uid=0 auid=0 ses=22300 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447006801.209:689542): pid=11888 uid=0 auid=0 ses=22300 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447006801.214:689543): pid=11887 uid=0 auid=0 ses=22301 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447006801.215:689544): pid=11887 uid=0 auid=0 ses=22301 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447007401.228:689546): pid=13733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447007401.228:689545): pid=13732 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447007401.228:689547): pid=13732 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447007401.228:689548): pid=13733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447007401.228:689549): pid=13733 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22302 res=1
type=LOGIN msg=audit(1447007401.228:689550): pid=13732 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22303 res=1
type=USER_START msg=audit(1447007401.244:689551): pid=13733 uid=0 auid=0 ses=22302 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447007401.244:689552): pid=13732 uid=0 auid=0 ses=22303 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447007401.245:689553): pid=13733 uid=0 auid=0 ses=22302 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447007401.245:689554): pid=13732 uid=0 auid=0 ses=22303 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447007401.253:689555): pid=13733 uid=0 auid=0 ses=22302 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447007401.254:689556): pid=13733 uid=0 auid=0 ses=22302 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447007401.258:689557): pid=13732 uid=0 auid=0 ses=22303 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447007426.284:689558): pid=13732 uid=0 auid=0 ses=22303 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=CRYPTO_KEY_USER msg=audit(1447007582.927:689559): pid=14295 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=14295 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447007582.927:689560): pid=14295 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=14295 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447007582.927:689561): pid=14295 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=14295 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447007582.973:689562): pid=14294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=14295 suid=74 rport=54591 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447007582.973:689563): pid=14294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=14295 suid=74 rport=54591 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447007583.102:689564): pid=14294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=54591 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447007583.102:689565): pid=14294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=54591 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447007583.111:689566): pid=14294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447007583.113:689567): pid=14294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14295 suid=74 rport=54591 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447007583.115:689568): pid=14294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447007583.115:689569): pid=14294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447007583.115:689570): pid=14294 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22304 res=1
type=USER_ROLE_CHANGE msg=audit(1447007583.187:689571): pid=14294 uid=0 auid=0 ses=22304 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447007583.205:689572): pid=14294 uid=0 auid=0 ses=22304 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447007583.207:689573): pid=14294 uid=0 auid=0 ses=22304 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447007583.207:689574): pid=14294 uid=0 auid=0 ses=22304 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447007583.208:689575): pid=14297 uid=0 auid=0 ses=22304 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=14297 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447007583.208:689576): pid=14297 uid=0 auid=0 ses=22304 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=14297 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447007583.208:689577): pid=14297 uid=0 auid=0 ses=22304 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=14297 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447007583.209:689578): pid=14297 uid=0 auid=0 ses=22304 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447007583.228:689579): pid=14294 uid=0 auid=0 ses=22304 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447007583.228:689580): pid=14294 uid=0 auid=0 ses=22304 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447007583.232:689581): pid=14294 uid=0 auid=0 ses=22304 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447007583.232:689582): pid=14294 uid=0 auid=0 ses=22304 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447007583.232:689583): pid=14294 uid=0 auid=0 ses=22304 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14294 suid=0 rport=54591 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447007583.232:689584): pid=14294 uid=0 auid=0 ses=22304 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=14294 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447007583.233:689585): pid=14294 uid=0 auid=0 ses=22304 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=14294 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447007583.233:689586): pid=14294 uid=0 auid=0 ses=22304 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=14294 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447007583.261:689587): pid=14305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=14305 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447007583.261:689588): pid=14305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=14305 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447007583.261:689589): pid=14305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=14305 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447007583.306:689590): pid=14304 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=14305 suid=74 rport=54593 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447007583.306:689591): pid=14304 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=14305 suid=74 rport=54593 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447007583.432:689592): pid=14304 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=54593 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447007583.432:689593): pid=14304 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=54593 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447007583.440:689594): pid=14304 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447007583.441:689595): pid=14304 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14305 suid=74 rport=54593 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447007583.443:689596): pid=14304 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447007583.445:689597): pid=14304 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447007583.445:689598): pid=14304 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22305 res=1
type=USER_ROLE_CHANGE msg=audit(1447007583.512:689599): pid=14304 uid=0 auid=0 ses=22305 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447007583.540:689600): pid=14304 uid=0 auid=0 ses=22305 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447007583.542:689601): pid=14304 uid=0 auid=0 ses=22305 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447007583.543:689602): pid=14304 uid=0 auid=0 ses=22305 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447007583.544:689603): pid=14307 uid=0 auid=0 ses=22305 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=14307 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447007583.544:689604): pid=14307 uid=0 auid=0 ses=22305 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=14307 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447007583.544:689605): pid=14307 uid=0 auid=0 ses=22305 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=14307 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447007583.545:689606): pid=14307 uid=0 auid=0 ses=22305 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447007584.808:689607): pid=14304 uid=0 auid=0 ses=22305 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447007584.808:689608): pid=14304 uid=0 auid=0 ses=22305 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447007584.813:689609): pid=14304 uid=0 auid=0 ses=22305 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447007584.813:689610): pid=14304 uid=0 auid=0 ses=22305 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447007584.813:689611): pid=14304 uid=0 auid=0 ses=22305 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14304 suid=0 rport=54593 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447007584.814:689612): pid=14304 uid=0 auid=0 ses=22305 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=14304 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447007584.814:689613): pid=14304 uid=0 auid=0 ses=22305 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=14304 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447007584.814:689614): pid=14304 uid=0 auid=0 ses=22305 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=14304 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447007584.846:689615): pid=14357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=14357 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447007584.846:689616): pid=14357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=14357 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447007584.846:689617): pid=14357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=14357 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447007584.891:689618): pid=14356 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=14357 suid=74 rport=54594 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447007584.891:689619): pid=14356 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=14357 suid=74 rport=54594 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447007585.016:689620): pid=14356 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=54594 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447007585.016:689621): pid=14356 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=54594 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447007585.025:689622): pid=14356 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447007585.026:689623): pid=14356 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14357 suid=74 rport=54594 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447007585.028:689624): pid=14356 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447007585.028:689625): pid=14356 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447007585.029:689626): pid=14356 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22306 res=1
type=USER_ROLE_CHANGE msg=audit(1447007585.094:689627): pid=14356 uid=0 auid=0 ses=22306 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447007585.116:689628): pid=14356 uid=0 auid=0 ses=22306 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447007585.119:689629): pid=14356 uid=0 auid=0 ses=22306 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447007585.119:689630): pid=14356 uid=0 auid=0 ses=22306 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447007585.120:689631): pid=14362 uid=0 auid=0 ses=22306 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=14362 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447007585.120:689632): pid=14362 uid=0 auid=0 ses=22306 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=14362 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447007585.120:689633): pid=14362 uid=0 auid=0 ses=22306 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=14362 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447007585.121:689634): pid=14362 uid=0 auid=0 ses=22306 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447007585.138:689635): pid=14356 uid=0 auid=0 ses=22306 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447007585.138:689636): pid=14356 uid=0 auid=0 ses=22306 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447007585.142:689637): pid=14356 uid=0 auid=0 ses=22306 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447007585.142:689638): pid=14356 uid=0 auid=0 ses=22306 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447007585.142:689639): pid=14356 uid=0 auid=0 ses=22306 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14356 suid=0 rport=54594 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447007585.142:689640): pid=14356 uid=0 auid=0 ses=22306 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=14356 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447007585.143:689641): pid=14356 uid=0 auid=0 ses=22306 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=14356 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447007585.143:689642): pid=14356 uid=0 auid=0 ses=22306 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=14356 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=SYSCALL msg=audit(1447007672.706:689643): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447008001.305:689644): pid=15768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447008001.305:689645): pid=15767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447008001.305:689646): pid=15768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447008001.305:689647): pid=15767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447008001.306:689648): pid=15768 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22307 res=1
type=LOGIN msg=audit(1447008001.306:689649): pid=15767 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22308 res=1
type=USER_START msg=audit(1447008001.328:689651): pid=15767 uid=0 auid=0 ses=22308 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447008001.328:689650): pid=15768 uid=0 auid=0 ses=22307 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447008001.330:689652): pid=15767 uid=0 auid=0 ses=22308 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447008001.330:689653): pid=15768 uid=0 auid=0 ses=22307 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447008001.338:689654): pid=15768 uid=0 auid=0 ses=22307 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447008001.340:689655): pid=15768 uid=0 auid=0 ses=22307 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447008001.346:689656): pid=15767 uid=0 auid=0 ses=22308 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447008001.348:689657): pid=15767 uid=0 auid=0 ses=22308 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447008601.361:689658): pid=17615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447008601.362:689659): pid=17615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447008601.362:689660): pid=17614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447008601.362:689661): pid=17615 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22309 res=1
type=CRED_ACQ msg=audit(1447008601.362:689662): pid=17614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447008601.362:689663): pid=17614 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22310 res=1
type=USER_START msg=audit(1447008601.376:689664): pid=17615 uid=0 auid=0 ses=22309 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447008601.377:689665): pid=17615 uid=0 auid=0 ses=22309 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447008601.377:689666): pid=17614 uid=0 auid=0 ses=22310 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447008601.377:689667): pid=17614 uid=0 auid=0 ses=22310 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447008601.384:689668): pid=17615 uid=0 auid=0 ses=22309 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447008601.385:689669): pid=17615 uid=0 auid=0 ses=22309 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447008601.389:689670): pid=17614 uid=0 auid=0 ses=22310 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447008601.391:689671): pid=17614 uid=0 auid=0 ses=22310 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1447008700.755:689672): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=CRYPTO_KEY_USER msg=audit(1447008782.709:689673): pid=18174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=18174 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447008782.709:689674): pid=18174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=18174 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447008782.710:689675): pid=18174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=18174 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447008782.753:689676): pid=18173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=18174 suid=74 rport=56572 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447008782.753:689677): pid=18173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=18174 suid=74 rport=56572 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447008782.882:689678): pid=18173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=56572 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447008782.882:689679): pid=18173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=56572 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447008782.891:689680): pid=18173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447008782.892:689681): pid=18173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18174 suid=74 rport=56572 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447008782.893:689682): pid=18173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447008782.894:689683): pid=18173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447008782.894:689684): pid=18173 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22311 res=1
type=USER_ROLE_CHANGE msg=audit(1447008782.964:689685): pid=18173 uid=0 auid=0 ses=22311 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447008782.989:689686): pid=18173 uid=0 auid=0 ses=22311 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447008782.992:689687): pid=18173 uid=0 auid=0 ses=22311 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447008782.992:689688): pid=18173 uid=0 auid=0 ses=22311 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447008782.994:689689): pid=18176 uid=0 auid=0 ses=22311 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=18176 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447008782.994:689690): pid=18176 uid=0 auid=0 ses=22311 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=18176 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447008782.994:689691): pid=18176 uid=0 auid=0 ses=22311 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=18176 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447008782.995:689692): pid=18176 uid=0 auid=0 ses=22311 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447008783.017:689693): pid=18173 uid=0 auid=0 ses=22311 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447008783.017:689694): pid=18173 uid=0 auid=0 ses=22311 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447008783.020:689695): pid=18173 uid=0 auid=0 ses=22311 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447008783.021:689696): pid=18173 uid=0 auid=0 ses=22311 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447008783.021:689697): pid=18173 uid=0 auid=0 ses=22311 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18173 suid=0 rport=56572 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447008783.021:689698): pid=18173 uid=0 auid=0 ses=22311 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=18173 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447008783.021:689699): pid=18173 uid=0 auid=0 ses=22311 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=18173 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447008783.021:689700): pid=18173 uid=0 auid=0 ses=22311 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=18173 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447008783.046:689701): pid=18184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=18184 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447008783.046:689702): pid=18184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=18184 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447008783.047:689703): pid=18184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=18184 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447008783.090:689704): pid=18183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=18184 suid=74 rport=56573 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447008783.090:689705): pid=18183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=18184 suid=74 rport=56573 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447008783.220:689706): pid=18183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=56573 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447008783.220:689707): pid=18183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=56573 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447008783.229:689708): pid=18183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447008783.230:689709): pid=18183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18184 suid=74 rport=56573 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447008783.232:689710): pid=18183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447008783.232:689711): pid=18183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447008783.233:689712): pid=18183 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22312 res=1
type=USER_ROLE_CHANGE msg=audit(1447008783.300:689713): pid=18183 uid=0 auid=0 ses=22312 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447008783.327:689714): pid=18183 uid=0 auid=0 ses=22312 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447008783.330:689715): pid=18183 uid=0 auid=0 ses=22312 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447008783.330:689716): pid=18183 uid=0 auid=0 ses=22312 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447008783.331:689717): pid=18186 uid=0 auid=0 ses=22312 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=18186 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447008783.331:689718): pid=18186 uid=0 auid=0 ses=22312 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=18186 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447008783.331:689719): pid=18186 uid=0 auid=0 ses=22312 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=18186 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447008783.332:689720): pid=18186 uid=0 auid=0 ses=22312 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447008784.590:689721): pid=18183 uid=0 auid=0 ses=22312 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447008784.591:689722): pid=18183 uid=0 auid=0 ses=22312 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447008784.599:689723): pid=18183 uid=0 auid=0 ses=22312 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447008784.599:689724): pid=18183 uid=0 auid=0 ses=22312 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447008784.600:689725): pid=18183 uid=0 auid=0 ses=22312 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18183 suid=0 rport=56573 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447008784.600:689726): pid=18183 uid=0 auid=0 ses=22312 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=18183 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447008784.600:689727): pid=18183 uid=0 auid=0 ses=22312 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=18183 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447008784.600:689728): pid=18183 uid=0 auid=0 ses=22312 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=18183 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447008784.628:689729): pid=18236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=18236 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447008784.628:689730): pid=18236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=18236 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447008784.628:689731): pid=18236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=18236 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447008784.672:689732): pid=18235 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=18236 suid=74 rport=56575 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447008784.673:689733): pid=18235 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=18236 suid=74 rport=56575 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447008784.802:689734): pid=18235 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=56575 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447008784.803:689735): pid=18235 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=56575 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447008784.810:689736): pid=18235 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447008784.812:689737): pid=18235 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18236 suid=74 rport=56575 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447008784.816:689738): pid=18235 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447008784.816:689739): pid=18235 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447008784.817:689740): pid=18235 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22313 res=1
type=USER_ROLE_CHANGE msg=audit(1447008784.879:689741): pid=18235 uid=0 auid=0 ses=22313 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447008784.899:689742): pid=18235 uid=0 auid=0 ses=22313 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447008784.901:689743): pid=18235 uid=0 auid=0 ses=22313 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447008784.902:689744): pid=18235 uid=0 auid=0 ses=22313 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447008784.903:689745): pid=18238 uid=0 auid=0 ses=22313 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=18238 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447008784.903:689746): pid=18238 uid=0 auid=0 ses=22313 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=18238 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447008784.903:689747): pid=18238 uid=0 auid=0 ses=22313 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=18238 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447008784.904:689748): pid=18238 uid=0 auid=0 ses=22313 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447008784.923:689749): pid=18235 uid=0 auid=0 ses=22313 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447008784.923:689750): pid=18235 uid=0 auid=0 ses=22313 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447008784.927:689751): pid=18235 uid=0 auid=0 ses=22313 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447008784.927:689752): pid=18235 uid=0 auid=0 ses=22313 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447008784.927:689753): pid=18235 uid=0 auid=0 ses=22313 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18235 suid=0 rport=56575 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447008784.927:689754): pid=18235 uid=0 auid=0 ses=22313 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=18235 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447008784.927:689755): pid=18235 uid=0 auid=0 ses=22313 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=18235 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447008784.927:689756): pid=18235 uid=0 auid=0 ses=22313 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=18235 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447009201.411:689757): pid=19520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447009201.411:689758): pid=19520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447009201.412:689759): pid=19520 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22314 res=1
type=USER_ACCT msg=audit(1447009201.415:689760): pid=19521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447009201.415:689761): pid=19521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447009201.415:689762): pid=19521 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22315 res=1
type=USER_START msg=audit(1447009201.432:689763): pid=19521 uid=0 auid=0 ses=22315 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447009201.432:689764): pid=19520 uid=0 auid=0 ses=22314 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447009201.432:689765): pid=19521 uid=0 auid=0 ses=22315 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447009201.433:689766): pid=19520 uid=0 auid=0 ses=22314 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447009201.446:689767): pid=19521 uid=0 auid=0 ses=22315 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447009201.451:689768): pid=19521 uid=0 auid=0 ses=22315 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447009201.451:689769): pid=19520 uid=0 auid=0 ses=22314 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447009201.456:689770): pid=19520 uid=0 auid=0 ses=22314 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447009261.467:689771): pid=19756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447009261.467:689772): pid=19756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447009261.469:689773): pid=19756 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22316 res=1
type=USER_START msg=audit(1447009261.482:689774): pid=19756 uid=0 auid=0 ses=22316 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447009261.482:689775): pid=19756 uid=0 auid=0 ses=22316 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447009261.507:689776): pid=19756 uid=0 auid=0 ses=22316 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447009261.509:689777): pid=19756 uid=0 auid=0 ses=22316 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1447009759.694:689778): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447009801.523:689779): pid=21372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447009801.524:689780): pid=21372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447009801.524:689781): pid=21373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447009801.524:689782): pid=21372 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22317 res=1
type=CRED_ACQ msg=audit(1447009801.524:689783): pid=21373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447009801.524:689784): pid=21373 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22318 res=1
type=USER_START msg=audit(1447009801.538:689785): pid=21373 uid=0 auid=0 ses=22318 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447009801.538:689786): pid=21372 uid=0 auid=0 ses=22317 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447009801.538:689787): pid=21372 uid=0 auid=0 ses=22317 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447009801.538:689788): pid=21373 uid=0 auid=0 ses=22318 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447009801.546:689789): pid=21373 uid=0 auid=0 ses=22318 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447009801.547:689790): pid=21373 uid=0 auid=0 ses=22318 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447009801.552:689791): pid=21372 uid=0 auid=0 ses=22317 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447009826.579:689792): pid=21372 uid=0 auid=0 ses=22317 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=CRYPTO_KEY_USER msg=audit(1447009982.573:689793): pid=21951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=21951 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447009982.573:689794): pid=21951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=21951 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447009982.573:689795): pid=21951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=21951 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447009982.617:689796): pid=21948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=21951 suid=74 rport=58552 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447009982.617:689797): pid=21948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=21951 suid=74 rport=58552 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447009982.746:689798): pid=21948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=58552 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447009982.746:689799): pid=21948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=58552 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447009982.750:689800): pid=21948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447009982.751:689801): pid=21948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21951 suid=74 rport=58552 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447009982.752:689802): pid=21948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447009982.752:689803): pid=21948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447009982.752:689804): pid=21948 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22319 res=1
type=USER_ROLE_CHANGE msg=audit(1447009982.821:689805): pid=21948 uid=0 auid=0 ses=22319 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447009982.843:689806): pid=21948 uid=0 auid=0 ses=22319 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447009982.845:689807): pid=21948 uid=0 auid=0 ses=22319 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447009982.845:689808): pid=21948 uid=0 auid=0 ses=22319 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447009982.847:689809): pid=21974 uid=0 auid=0 ses=22319 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=21974 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447009982.847:689810): pid=21974 uid=0 auid=0 ses=22319 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=21974 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447009982.847:689811): pid=21974 uid=0 auid=0 ses=22319 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=21974 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447009982.848:689812): pid=21974 uid=0 auid=0 ses=22319 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447009982.867:689813): pid=21948 uid=0 auid=0 ses=22319 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447009982.868:689814): pid=21948 uid=0 auid=0 ses=22319 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447009982.872:689815): pid=21948 uid=0 auid=0 ses=22319 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447009982.873:689816): pid=21948 uid=0 auid=0 ses=22319 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447009982.874:689817): pid=21948 uid=0 auid=0 ses=22319 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21948 suid=0 rport=58552 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447009982.874:689818): pid=21948 uid=0 auid=0 ses=22319 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=21948 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447009982.874:689819): pid=21948 uid=0 auid=0 ses=22319 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=21948 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447009982.874:689820): pid=21948 uid=0 auid=0 ses=22319 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=21948 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447009982.894:689821): pid=21982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=21982 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447009982.894:689822): pid=21982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=21982 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447009982.894:689823): pid=21982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=21982 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447009982.938:689824): pid=21981 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=21982 suid=74 rport=58553 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447009982.938:689825): pid=21981 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=21982 suid=74 rport=58553 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447009983.062:689826): pid=21981 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=58553 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447009983.062:689827): pid=21981 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=58553 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447009983.067:689828): pid=21981 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447009983.067:689829): pid=21981 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21982 suid=74 rport=58553 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447009983.068:689830): pid=21981 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447009983.069:689831): pid=21981 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447009983.069:689832): pid=21981 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22320 res=1
type=USER_ROLE_CHANGE msg=audit(1447009983.133:689833): pid=21981 uid=0 auid=0 ses=22320 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447009983.158:689834): pid=21981 uid=0 auid=0 ses=22320 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447009983.161:689835): pid=21981 uid=0 auid=0 ses=22320 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447009983.161:689836): pid=21981 uid=0 auid=0 ses=22320 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447009983.163:689837): pid=21984 uid=0 auid=0 ses=22320 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=21984 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447009983.163:689838): pid=21984 uid=0 auid=0 ses=22320 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=21984 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447009983.163:689839): pid=21984 uid=0 auid=0 ses=22320 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=21984 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447009983.164:689840): pid=21984 uid=0 auid=0 ses=22320 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447009984.453:689841): pid=21981 uid=0 auid=0 ses=22320 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447009984.454:689842): pid=21981 uid=0 auid=0 ses=22320 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447009984.457:689843): pid=21981 uid=0 auid=0 ses=22320 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447009984.457:689844): pid=21981 uid=0 auid=0 ses=22320 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447009984.458:689845): pid=21981 uid=0 auid=0 ses=22320 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21981 suid=0 rport=58553 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447009984.458:689846): pid=21981 uid=0 auid=0 ses=22320 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=21981 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447009984.458:689847): pid=21981 uid=0 auid=0 ses=22320 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=21981 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447009984.458:689848): pid=21981 uid=0 auid=0 ses=22320 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=21981 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447009984.487:689849): pid=22046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=22046 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447009984.488:689850): pid=22046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=22046 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447009984.488:689851): pid=22046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=22046 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447009984.531:689852): pid=22045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=22046 suid=74 rport=58557 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447009984.532:689853): pid=22045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=22046 suid=74 rport=58557 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447009984.652:689854): pid=22045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=58557 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447009984.652:689855): pid=22045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=58557 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447009984.658:689856): pid=22045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447009984.659:689857): pid=22045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22046 suid=74 rport=58557 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447009984.660:689858): pid=22045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447009984.660:689859): pid=22045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447009984.660:689860): pid=22045 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22321 res=1
type=USER_ROLE_CHANGE msg=audit(1447009984.725:689861): pid=22045 uid=0 auid=0 ses=22321 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447009984.743:689862): pid=22045 uid=0 auid=0 ses=22321 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447009984.745:689863): pid=22045 uid=0 auid=0 ses=22321 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447009984.745:689864): pid=22045 uid=0 auid=0 ses=22321 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447009984.747:689865): pid=22058 uid=0 auid=0 ses=22321 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=22058 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447009984.747:689866): pid=22058 uid=0 auid=0 ses=22321 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=22058 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447009984.747:689867): pid=22058 uid=0 auid=0 ses=22321 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=22058 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447009984.748:689868): pid=22058 uid=0 auid=0 ses=22321 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447009984.763:689869): pid=22045 uid=0 auid=0 ses=22321 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447009984.763:689870): pid=22045 uid=0 auid=0 ses=22321 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447009984.766:689871): pid=22045 uid=0 auid=0 ses=22321 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447009984.766:689872): pid=22045 uid=0 auid=0 ses=22321 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447009984.767:689873): pid=22045 uid=0 auid=0 ses=22321 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22045 suid=0 rport=58557 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447009984.767:689874): pid=22045 uid=0 auid=0 ses=22321 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=22045 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447009984.767:689875): pid=22045 uid=0 auid=0 ses=22321 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=22045 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447009984.767:689876): pid=22045 uid=0 auid=0 ses=22321 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=22045 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447010401.600:689877): pid=23257 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447010401.600:689878): pid=23258 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447010401.600:689879): pid=23257 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447010401.600:689880): pid=23258 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447010401.601:689881): pid=23257 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22322 res=1
type=LOGIN msg=audit(1447010401.601:689882): pid=23258 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22323 res=1
type=USER_START msg=audit(1447010401.620:689883): pid=23257 uid=0 auid=0 ses=22322 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447010401.620:689884): pid=23257 uid=0 auid=0 ses=22322 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447010401.620:689885): pid=23258 uid=0 auid=0 ses=22323 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447010401.621:689886): pid=23258 uid=0 auid=0 ses=22323 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447010401.630:689887): pid=23258 uid=0 auid=0 ses=22323 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447010401.632:689888): pid=23258 uid=0 auid=0 ses=22323 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447010401.636:689889): pid=23257 uid=0 auid=0 ses=22322 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447010426.663:689890): pid=23257 uid=0 auid=0 ses=22322 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=SYSCALL msg=audit(1447010823.752:689891): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447011001.690:689892): pid=25101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447011001.690:689893): pid=25102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447011001.690:689894): pid=25101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447011001.690:689895): pid=25102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447011001.691:689896): pid=25101 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22324 res=1
type=LOGIN msg=audit(1447011001.691:689897): pid=25102 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22325 res=1
type=USER_START msg=audit(1447011001.706:689898): pid=25102 uid=0 auid=0 ses=22325 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447011001.706:689899): pid=25102 uid=0 auid=0 ses=22325 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447011001.707:689900): pid=25101 uid=0 auid=0 ses=22324 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447011001.707:689901): pid=25101 uid=0 auid=0 ses=22324 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447011001.714:689902): pid=25102 uid=0 auid=0 ses=22325 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447011001.720:689903): pid=25102 uid=0 auid=0 ses=22325 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447011001.720:689904): pid=25101 uid=0 auid=0 ses=22324 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447011026.749:689905): pid=25101 uid=0 auid=0 ses=22324 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=CRYPTO_KEY_USER msg=audit(1447011182.612:689906): pid=25701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=25701 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447011182.612:689907): pid=25701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=25701 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447011182.612:689908): pid=25701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=25701 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447011182.657:689909): pid=25700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=25701 suid=74 rport=60531 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447011182.657:689910): pid=25700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=25701 suid=74 rport=60531 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447011182.786:689911): pid=25700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60531 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447011182.786:689912): pid=25700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=60531 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447011182.794:689913): pid=25700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447011182.796:689914): pid=25700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25701 suid=74 rport=60531 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447011182.797:689915): pid=25700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447011182.797:689916): pid=25700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447011182.797:689917): pid=25700 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22326 res=1
type=USER_ROLE_CHANGE msg=audit(1447011182.869:689918): pid=25700 uid=0 auid=0 ses=22326 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447011182.893:689919): pid=25700 uid=0 auid=0 ses=22326 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447011182.896:689920): pid=25700 uid=0 auid=0 ses=22326 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447011182.897:689921): pid=25700 uid=0 auid=0 ses=22326 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447011182.898:689922): pid=25703 uid=0 auid=0 ses=22326 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=25703 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447011182.898:689923): pid=25703 uid=0 auid=0 ses=22326 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=25703 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447011182.898:689924): pid=25703 uid=0 auid=0 ses=22326 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=25703 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447011182.899:689925): pid=25703 uid=0 auid=0 ses=22326 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447011182.917:689926): pid=25700 uid=0 auid=0 ses=22326 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447011182.917:689927): pid=25700 uid=0 auid=0 ses=22326 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447011182.921:689928): pid=25700 uid=0 auid=0 ses=22326 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447011182.921:689929): pid=25700 uid=0 auid=0 ses=22326 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447011182.922:689930): pid=25700 uid=0 auid=0 ses=22326 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25700 suid=0 rport=60531 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447011182.923:689931): pid=25700 uid=0 auid=0 ses=22326 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=25700 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447011182.923:689932): pid=25700 uid=0 auid=0 ses=22326 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=25700 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447011182.923:689933): pid=25700 uid=0 auid=0 ses=22326 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=25700 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447011182.946:689934): pid=25711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=25711 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447011182.946:689935): pid=25711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=25711 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447011182.946:689936): pid=25711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=25711 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447011182.990:689937): pid=25710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=25711 suid=74 rport=60534 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447011182.991:689938): pid=25710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=25711 suid=74 rport=60534 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447011183.118:689939): pid=25710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60534 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447011183.118:689940): pid=25710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=60534 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447011183.128:689941): pid=25710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447011183.129:689942): pid=25710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25711 suid=74 rport=60534 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447011183.130:689943): pid=25710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447011183.130:689944): pid=25710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447011183.130:689945): pid=25710 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22327 res=1
type=USER_ROLE_CHANGE msg=audit(1447011183.194:689946): pid=25710 uid=0 auid=0 ses=22327 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447011183.216:689947): pid=25710 uid=0 auid=0 ses=22327 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447011183.219:689948): pid=25710 uid=0 auid=0 ses=22327 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447011183.219:689949): pid=25710 uid=0 auid=0 ses=22327 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447011183.220:689950): pid=25713 uid=0 auid=0 ses=22327 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=25713 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447011183.220:689951): pid=25713 uid=0 auid=0 ses=22327 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=25713 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447011183.220:689952): pid=25713 uid=0 auid=0 ses=22327 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=25713 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447011183.221:689953): pid=25713 uid=0 auid=0 ses=22327 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447011184.472:689954): pid=25710 uid=0 auid=0 ses=22327 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447011184.472:689955): pid=25710 uid=0 auid=0 ses=22327 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447011184.478:689956): pid=25710 uid=0 auid=0 ses=22327 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447011184.478:689957): pid=25710 uid=0 auid=0 ses=22327 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447011184.478:689958): pid=25710 uid=0 auid=0 ses=22327 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25710 suid=0 rport=60534 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447011184.478:689959): pid=25710 uid=0 auid=0 ses=22327 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=25710 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447011184.478:689960): pid=25710 uid=0 auid=0 ses=22327 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=25710 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447011184.478:689961): pid=25710 uid=0 auid=0 ses=22327 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=25710 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447011184.510:689962): pid=25763 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=25763 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447011184.510:689963): pid=25763 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=25763 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447011184.510:689964): pid=25763 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=25763 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447011184.555:689965): pid=25762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=25763 suid=74 rport=60537 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447011184.555:689966): pid=25762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=25763 suid=74 rport=60537 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447011184.683:689967): pid=25762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60537 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447011184.683:689968): pid=25762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=60537 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447011184.693:689969): pid=25762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447011184.694:689970): pid=25762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25763 suid=74 rport=60537 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447011184.697:689971): pid=25762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447011184.697:689972): pid=25762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447011184.697:689973): pid=25762 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22328 res=1
type=USER_ROLE_CHANGE msg=audit(1447011184.760:689974): pid=25762 uid=0 auid=0 ses=22328 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447011184.784:689975): pid=25762 uid=0 auid=0 ses=22328 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447011184.787:689976): pid=25762 uid=0 auid=0 ses=22328 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447011184.787:689977): pid=25762 uid=0 auid=0 ses=22328 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447011184.788:689978): pid=25765 uid=0 auid=0 ses=22328 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=25765 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447011184.788:689979): pid=25765 uid=0 auid=0 ses=22328 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=25765 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447011184.788:689980): pid=25765 uid=0 auid=0 ses=22328 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=25765 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447011184.789:689981): pid=25765 uid=0 auid=0 ses=22328 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447011184.805:689982): pid=25762 uid=0 auid=0 ses=22328 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447011184.805:689983): pid=25762 uid=0 auid=0 ses=22328 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447011184.808:689984): pid=25762 uid=0 auid=0 ses=22328 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447011184.808:689985): pid=25762 uid=0 auid=0 ses=22328 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447011184.808:689986): pid=25762 uid=0 auid=0 ses=22328 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25762 suid=0 rport=60537 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447011184.808:689987): pid=25762 uid=0 auid=0 ses=22328 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=25762 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447011184.809:689988): pid=25762 uid=0 auid=0 ses=22328 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=25762 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447011184.809:689989): pid=25762 uid=0 auid=0 ses=22328 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=25762 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447011601.773:689990): pid=27019 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447011601.773:689991): pid=27019 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447011601.773:689992): pid=27020 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447011601.773:689993): pid=27020 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447011601.774:689994): pid=27020 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22329 res=1
type=LOGIN msg=audit(1447011601.774:689995): pid=27019 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22330 res=1
type=USER_START msg=audit(1447011601.791:689996): pid=27020 uid=0 auid=0 ses=22329 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447011601.791:689997): pid=27019 uid=0 auid=0 ses=22330 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447011601.791:689998): pid=27020 uid=0 auid=0 ses=22329 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447011601.791:689999): pid=27019 uid=0 auid=0 ses=22330 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447011601.801:690000): pid=27020 uid=0 auid=0 ses=22329 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447011601.803:690001): pid=27020 uid=0 auid=0 ses=22329 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447011601.808:690002): pid=27019 uid=0 auid=0 ses=22330 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447011601.812:690003): pid=27019 uid=0 auid=0 ses=22330 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1447011895.729:690004): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447012201.828:690005): pid=28864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447012201.828:690006): pid=28865 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447012201.828:690007): pid=28864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447012201.828:690008): pid=28865 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447012201.829:690009): pid=28864 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22331 res=1
type=LOGIN msg=audit(1447012201.829:690010): pid=28865 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22332 res=1
type=USER_START msg=audit(1447012201.846:690011): pid=28865 uid=0 auid=0 ses=22332 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447012201.846:690012): pid=28865 uid=0 auid=0 ses=22332 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447012201.846:690013): pid=28864 uid=0 auid=0 ses=22331 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447012201.846:690014): pid=28864 uid=0 auid=0 ses=22331 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447012201.853:690015): pid=28865 uid=0 auid=0 ses=22332 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447012201.855:690016): pid=28865 uid=0 auid=0 ses=22332 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447012201.862:690017): pid=28864 uid=0 auid=0 ses=22331 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447012201.863:690018): pid=28864 uid=0 auid=0 ses=22331 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447012383.392:690019): pid=29462 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=29462 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447012383.392:690020): pid=29462 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=29462 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447012383.392:690021): pid=29462 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=29462 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447012383.437:690022): pid=29461 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=29462 suid=74 rport=62513 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447012383.437:690023): pid=29461 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=29462 suid=74 rport=62513 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447012383.563:690024): pid=29461 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=62513 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447012383.563:690025): pid=29461 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=62513 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447012383.567:690026): pid=29461 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447012383.568:690027): pid=29461 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29462 suid=74 rport=62513 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447012383.570:690028): pid=29461 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447012383.570:690029): pid=29461 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447012383.571:690030): pid=29461 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22333 res=1
type=USER_ROLE_CHANGE msg=audit(1447012383.638:690031): pid=29461 uid=0 auid=0 ses=22333 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447012383.660:690032): pid=29461 uid=0 auid=0 ses=22333 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447012383.662:690033): pid=29461 uid=0 auid=0 ses=22333 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447012383.662:690034): pid=29461 uid=0 auid=0 ses=22333 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447012383.664:690035): pid=29464 uid=0 auid=0 ses=22333 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=29464 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447012383.664:690036): pid=29464 uid=0 auid=0 ses=22333 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=29464 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447012383.664:690037): pid=29464 uid=0 auid=0 ses=22333 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=29464 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447012383.665:690038): pid=29464 uid=0 auid=0 ses=22333 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447012383.688:690039): pid=29461 uid=0 auid=0 ses=22333 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447012383.688:690040): pid=29461 uid=0 auid=0 ses=22333 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447012383.692:690041): pid=29461 uid=0 auid=0 ses=22333 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447012383.692:690042): pid=29461 uid=0 auid=0 ses=22333 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447012383.693:690043): pid=29461 uid=0 auid=0 ses=22333 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29461 suid=0 rport=62513 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447012383.693:690044): pid=29461 uid=0 auid=0 ses=22333 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=29461 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447012383.693:690045): pid=29461 uid=0 auid=0 ses=22333 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=29461 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447012383.693:690046): pid=29461 uid=0 auid=0 ses=22333 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=29461 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447012383.713:690047): pid=29472 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=29472 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447012383.713:690048): pid=29472 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=29472 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447012383.713:690049): pid=29472 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=29472 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447012383.757:690050): pid=29471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=29472 suid=74 rport=62514 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447012383.758:690051): pid=29471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=29472 suid=74 rport=62514 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447012383.885:690052): pid=29471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=62514 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447012383.885:690053): pid=29471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=62514 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447012383.893:690054): pid=29471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447012383.894:690055): pid=29471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29472 suid=74 rport=62514 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447012383.896:690056): pid=29471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447012383.896:690057): pid=29471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447012383.897:690058): pid=29471 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22334 res=1
type=USER_ROLE_CHANGE msg=audit(1447012383.959:690059): pid=29471 uid=0 auid=0 ses=22334 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447012383.982:690060): pid=29471 uid=0 auid=0 ses=22334 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447012383.984:690061): pid=29471 uid=0 auid=0 ses=22334 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447012383.984:690062): pid=29471 uid=0 auid=0 ses=22334 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447012383.986:690063): pid=29474 uid=0 auid=0 ses=22334 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=29474 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447012383.986:690064): pid=29474 uid=0 auid=0 ses=22334 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=29474 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447012383.986:690065): pid=29474 uid=0 auid=0 ses=22334 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=29474 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447012383.987:690066): pid=29474 uid=0 auid=0 ses=22334 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447012385.267:690067): pid=29471 uid=0 auid=0 ses=22334 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447012385.267:690068): pid=29471 uid=0 auid=0 ses=22334 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447012385.272:690069): pid=29471 uid=0 auid=0 ses=22334 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447012385.272:690070): pid=29471 uid=0 auid=0 ses=22334 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447012385.274:690071): pid=29471 uid=0 auid=0 ses=22334 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29471 suid=0 rport=62514 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447012385.274:690072): pid=29471 uid=0 auid=0 ses=22334 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=29471 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447012385.274:690073): pid=29471 uid=0 auid=0 ses=22334 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=29471 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447012385.274:690074): pid=29471 uid=0 auid=0 ses=22334 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=29471 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447012385.306:690075): pid=29527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=29527 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447012385.307:690076): pid=29527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=29527 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447012385.307:690077): pid=29527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=29527 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447012385.350:690078): pid=29526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=29527 suid=74 rport=62519 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447012385.351:690079): pid=29526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=29527 suid=74 rport=62519 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447012385.478:690080): pid=29526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=62519 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447012385.478:690081): pid=29526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=62519 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447012385.484:690082): pid=29526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447012385.485:690083): pid=29526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29527 suid=74 rport=62519 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447012385.486:690084): pid=29526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447012385.487:690085): pid=29526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447012385.487:690086): pid=29526 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22335 res=1
type=USER_ROLE_CHANGE msg=audit(1447012385.551:690087): pid=29526 uid=0 auid=0 ses=22335 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447012385.575:690088): pid=29526 uid=0 auid=0 ses=22335 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447012385.578:690089): pid=29526 uid=0 auid=0 ses=22335 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447012385.579:690090): pid=29526 uid=0 auid=0 ses=22335 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447012385.580:690091): pid=29529 uid=0 auid=0 ses=22335 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=29529 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447012385.580:690092): pid=29529 uid=0 auid=0 ses=22335 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=29529 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447012385.580:690093): pid=29529 uid=0 auid=0 ses=22335 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=29529 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447012385.581:690094): pid=29529 uid=0 auid=0 ses=22335 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447012385.600:690095): pid=29526 uid=0 auid=0 ses=22335 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447012385.601:690096): pid=29526 uid=0 auid=0 ses=22335 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447012385.605:690097): pid=29526 uid=0 auid=0 ses=22335 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447012385.605:690098): pid=29526 uid=0 auid=0 ses=22335 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447012385.605:690099): pid=29526 uid=0 auid=0 ses=22335 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29526 suid=0 rport=62519 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447012385.605:690100): pid=29526 uid=0 auid=0 ses=22335 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=29526 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447012385.605:690101): pid=29526 uid=0 auid=0 ses=22335 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=29526 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447012385.605:690102): pid=29526 uid=0 auid=0 ses=22335 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=29526 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447012801.883:690103): pid=30782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447012801.883:690104): pid=30782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447012801.883:690105): pid=30783 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447012801.884:690106): pid=30783 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447012801.884:690107): pid=30783 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22336 res=1
type=LOGIN msg=audit(1447012801.884:690108): pid=30782 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22337 res=1
type=USER_START msg=audit(1447012801.902:690109): pid=30782 uid=0 auid=0 ses=22337 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447012801.902:690110): pid=30782 uid=0 auid=0 ses=22337 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447012801.902:690111): pid=30783 uid=0 auid=0 ses=22336 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447012801.902:690112): pid=30783 uid=0 auid=0 ses=22336 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447012801.909:690113): pid=30783 uid=0 auid=0 ses=22336 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447012801.911:690114): pid=30783 uid=0 auid=0 ses=22336 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447012801.919:690115): pid=30782 uid=0 auid=0 ses=22337 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447012801.920:690116): pid=30782 uid=0 auid=0 ses=22337 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447012861.931:690117): pid=30986 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447012861.931:690118): pid=30986 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447012861.932:690119): pid=30986 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22338 res=1
type=USER_START msg=audit(1447012861.944:690120): pid=30986 uid=0 auid=0 ses=22338 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447012861.945:690121): pid=30986 uid=0 auid=0 ses=22338 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447012861.973:690122): pid=30986 uid=0 auid=0 ses=22338 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447012861.975:690123): pid=30986 uid=0 auid=0 ses=22338 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1447012972.759:690124): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447013401.991:690125): pid=32686 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447013401.991:690126): pid=32687 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447013401.991:690127): pid=32687 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447013401.991:690128): pid=32686 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447013401.991:690129): pid=32687 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22339 res=1
type=LOGIN msg=audit(1447013401.991:690130): pid=32686 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22340 res=1
type=USER_START msg=audit(1447013402.008:690131): pid=32686 uid=0 auid=0 ses=22340 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447013402.008:690132): pid=32687 uid=0 auid=0 ses=22339 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447013402.008:690133): pid=32686 uid=0 auid=0 ses=22340 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447013402.008:690134): pid=32687 uid=0 auid=0 ses=22339 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447013402.017:690135): pid=32687 uid=0 auid=0 ses=22339 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447013402.018:690136): pid=32687 uid=0 auid=0 ses=22339 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447013402.019:690137): pid=32686 uid=0 auid=0 ses=22340 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447013427.046:690138): pid=32686 uid=0 auid=0 ses=22340 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=CRYPTO_KEY_USER msg=audit(1447013582.846:690139): pid=892 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=892 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447013582.847:690140): pid=892 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=892 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447013582.847:690141): pid=892 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=892 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447013582.892:690142): pid=891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=892 suid=74 rport=64492 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447013582.892:690143): pid=891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=892 suid=74 rport=64492 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447013583.015:690144): pid=891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=64492 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447013583.015:690145): pid=891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=64492 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447013583.020:690146): pid=891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447013583.021:690147): pid=891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=892 suid=74 rport=64492 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447013583.024:690148): pid=891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447013583.024:690149): pid=891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447013583.024:690150): pid=891 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22341 res=1
type=USER_ROLE_CHANGE msg=audit(1447013583.093:690151): pid=891 uid=0 auid=0 ses=22341 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447013583.111:690152): pid=891 uid=0 auid=0 ses=22341 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447013583.115:690153): pid=891 uid=0 auid=0 ses=22341 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447013583.115:690154): pid=891 uid=0 auid=0 ses=22341 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447013583.116:690155): pid=894 uid=0 auid=0 ses=22341 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=894 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447013583.116:690156): pid=894 uid=0 auid=0 ses=22341 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=894 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447013583.116:690157): pid=894 uid=0 auid=0 ses=22341 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=894 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447013583.117:690158): pid=894 uid=0 auid=0 ses=22341 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447013583.135:690159): pid=891 uid=0 auid=0 ses=22341 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447013583.135:690160): pid=891 uid=0 auid=0 ses=22341 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447013583.139:690161): pid=891 uid=0 auid=0 ses=22341 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447013583.139:690162): pid=891 uid=0 auid=0 ses=22341 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447013583.139:690163): pid=891 uid=0 auid=0 ses=22341 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=891 suid=0 rport=64492 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447013583.139:690164): pid=891 uid=0 auid=0 ses=22341 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=891 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447013583.140:690165): pid=891 uid=0 auid=0 ses=22341 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=891 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447013583.140:690166): pid=891 uid=0 auid=0 ses=22341 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=891 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447013583.161:690167): pid=902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=902 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447013583.162:690168): pid=902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=902 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447013583.162:690169): pid=902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=902 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447013583.207:690170): pid=901 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=902 suid=74 rport=64493 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447013583.208:690171): pid=901 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=902 suid=74 rport=64493 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447013583.332:690172): pid=901 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=64493 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447013583.332:690173): pid=901 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=64493 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447013583.339:690174): pid=901 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447013583.340:690175): pid=901 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=902 suid=74 rport=64493 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447013583.341:690176): pid=901 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447013583.341:690177): pid=901 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447013583.342:690178): pid=901 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22342 res=1
type=USER_ROLE_CHANGE msg=audit(1447013583.409:690179): pid=901 uid=0 auid=0 ses=22342 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447013583.432:690180): pid=901 uid=0 auid=0 ses=22342 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447013583.435:690181): pid=901 uid=0 auid=0 ses=22342 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447013583.435:690182): pid=901 uid=0 auid=0 ses=22342 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447013583.436:690183): pid=904 uid=0 auid=0 ses=22342 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=904 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447013583.436:690184): pid=904 uid=0 auid=0 ses=22342 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=904 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447013583.436:690185): pid=904 uid=0 auid=0 ses=22342 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=904 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447013583.437:690186): pid=904 uid=0 auid=0 ses=22342 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447013584.717:690187): pid=901 uid=0 auid=0 ses=22342 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447013584.717:690188): pid=901 uid=0 auid=0 ses=22342 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447013584.721:690189): pid=901 uid=0 auid=0 ses=22342 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447013584.721:690190): pid=901 uid=0 auid=0 ses=22342 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447013584.722:690191): pid=901 uid=0 auid=0 ses=22342 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=901 suid=0 rport=64493 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447013584.722:690192): pid=901 uid=0 auid=0 ses=22342 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=901 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447013584.722:690193): pid=901 uid=0 auid=0 ses=22342 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=901 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447013584.722:690194): pid=901 uid=0 auid=0 ses=22342 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=901 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447013584.758:690195): pid=995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=995 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447013584.758:690196): pid=995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=995 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447013584.758:690197): pid=995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=995 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447013584.804:690198): pid=994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=995 suid=74 rport=64496 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447013584.804:690199): pid=994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=995 suid=74 rport=64496 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447013584.933:690200): pid=994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=64496 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447013584.933:690201): pid=994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=64496 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447013584.943:690202): pid=994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447013584.944:690203): pid=994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=995 suid=74 rport=64496 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447013584.945:690204): pid=994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447013584.946:690205): pid=994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447013584.946:690206): pid=994 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22343 res=1
type=USER_ROLE_CHANGE msg=audit(1447013585.012:690207): pid=994 uid=0 auid=0 ses=22343 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447013585.034:690208): pid=994 uid=0 auid=0 ses=22343 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447013585.037:690209): pid=994 uid=0 auid=0 ses=22343 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447013585.037:690210): pid=994 uid=0 auid=0 ses=22343 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447013585.039:690211): pid=1000 uid=0 auid=0 ses=22343 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=1000 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447013585.039:690212): pid=1000 uid=0 auid=0 ses=22343 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=1000 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447013585.039:690213): pid=1000 uid=0 auid=0 ses=22343 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=1000 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447013585.040:690214): pid=1000 uid=0 auid=0 ses=22343 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447013585.060:690215): pid=994 uid=0 auid=0 ses=22343 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447013585.060:690216): pid=994 uid=0 auid=0 ses=22343 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447013585.065:690217): pid=994 uid=0 auid=0 ses=22343 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447013585.065:690218): pid=994 uid=0 auid=0 ses=22343 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447013585.065:690219): pid=994 uid=0 auid=0 ses=22343 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=994 suid=0 rport=64496 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447013585.065:690220): pid=994 uid=0 auid=0 ses=22343 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=994 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447013585.065:690221): pid=994 uid=0 auid=0 ses=22343 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=994 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447013585.065:690222): pid=994 uid=0 auid=0 ses=22343 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=994 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447014001.069:690224): pid=2264 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447014001.069:690223): pid=2263 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447014001.070:690225): pid=2264 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447014001.070:690226): pid=2263 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447014001.071:690227): pid=2264 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22344 res=1
type=LOGIN msg=audit(1447014001.071:690228): pid=2263 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22345 res=1
type=USER_START msg=audit(1447014001.088:690229): pid=2263 uid=0 auid=0 ses=22345 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447014001.088:690230): pid=2264 uid=0 auid=0 ses=22344 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447014001.088:690231): pid=2264 uid=0 auid=0 ses=22344 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447014001.088:690232): pid=2263 uid=0 auid=0 ses=22345 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447014001.097:690233): pid=2264 uid=0 auid=0 ses=22344 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447014001.098:690234): pid=2264 uid=0 auid=0 ses=22344 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447014001.105:690235): pid=2263 uid=0 auid=0 ses=22345 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447014026.132:690236): pid=2263 uid=0 auid=0 ses=22345 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=USER_ACCT msg=audit(1447014601.153:690237): pid=4108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447014601.153:690238): pid=4107 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447014601.153:690240): pid=4108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447014601.153:690239): pid=4107 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447014601.154:690241): pid=4108 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22346 res=1
type=LOGIN msg=audit(1447014601.154:690242): pid=4107 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22347 res=1
type=USER_START msg=audit(1447014601.169:690243): pid=4107 uid=0 auid=0 ses=22347 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447014601.169:690244): pid=4107 uid=0 auid=0 ses=22347 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447014601.170:690245): pid=4108 uid=0 auid=0 ses=22346 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447014601.171:690246): pid=4108 uid=0 auid=0 ses=22346 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447014601.179:690247): pid=4108 uid=0 auid=0 ses=22346 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447014601.180:690248): pid=4108 uid=0 auid=0 ses=22346 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447014601.182:690249): pid=4107 uid=0 auid=0 ses=22347 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447014626.209:690250): pid=4107 uid=0 auid=0 ses=22347 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=CRYPTO_KEY_USER msg=audit(1447014783.444:690251): pid=4670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=4670 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447014783.444:690252): pid=4670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=4670 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447014783.444:690253): pid=4670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=4670 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447014783.488:690254): pid=4669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=4670 suid=74 rport=33709 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447014783.488:690255): pid=4669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=4670 suid=74 rport=33709 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447014783.618:690256): pid=4669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33709 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447014783.618:690257): pid=4669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=33709 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447014783.627:690258): pid=4669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447014783.627:690259): pid=4669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4670 suid=74 rport=33709 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447014783.629:690260): pid=4669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447014783.629:690261): pid=4669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447014783.630:690262): pid=4669 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22348 res=1
type=USER_ROLE_CHANGE msg=audit(1447014783.697:690263): pid=4669 uid=0 auid=0 ses=22348 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447014783.719:690264): pid=4669 uid=0 auid=0 ses=22348 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447014783.722:690265): pid=4669 uid=0 auid=0 ses=22348 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447014783.722:690266): pid=4669 uid=0 auid=0 ses=22348 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447014783.723:690267): pid=4672 uid=0 auid=0 ses=22348 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=4672 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447014783.723:690268): pid=4672 uid=0 auid=0 ses=22348 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=4672 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447014783.723:690269): pid=4672 uid=0 auid=0 ses=22348 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=4672 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447014783.724:690270): pid=4672 uid=0 auid=0 ses=22348 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447014783.742:690271): pid=4669 uid=0 auid=0 ses=22348 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447014783.742:690272): pid=4669 uid=0 auid=0 ses=22348 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447014783.745:690273): pid=4669 uid=0 auid=0 ses=22348 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447014783.745:690274): pid=4669 uid=0 auid=0 ses=22348 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447014783.747:690275): pid=4669 uid=0 auid=0 ses=22348 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4669 suid=0 rport=33709 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447014783.747:690276): pid=4669 uid=0 auid=0 ses=22348 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=4669 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447014783.747:690277): pid=4669 uid=0 auid=0 ses=22348 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=4669 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447014783.747:690278): pid=4669 uid=0 auid=0 ses=22348 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=4669 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447014783.771:690279): pid=4680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=4680 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447014783.771:690280): pid=4680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=4680 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447014783.772:690281): pid=4680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=4680 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447014783.816:690282): pid=4679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=4680 suid=74 rport=33710 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447014783.816:690283): pid=4679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=4680 suid=74 rport=33710 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447014783.945:690284): pid=4679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33710 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447014783.945:690285): pid=4679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=33710 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447014783.952:690286): pid=4679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447014783.953:690287): pid=4679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4680 suid=74 rport=33710 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447014783.954:690288): pid=4679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447014783.954:690289): pid=4679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447014783.955:690290): pid=4679 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22349 res=1
type=USER_ROLE_CHANGE msg=audit(1447014784.019:690291): pid=4679 uid=0 auid=0 ses=22349 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447014784.037:690292): pid=4679 uid=0 auid=0 ses=22349 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447014784.040:690293): pid=4679 uid=0 auid=0 ses=22349 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447014784.040:690294): pid=4679 uid=0 auid=0 ses=22349 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447014784.041:690295): pid=4682 uid=0 auid=0 ses=22349 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=4682 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447014784.041:690296): pid=4682 uid=0 auid=0 ses=22349 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=4682 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447014784.041:690297): pid=4682 uid=0 auid=0 ses=22349 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=4682 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447014784.042:690298): pid=4682 uid=0 auid=0 ses=22349 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447014785.331:690299): pid=4679 uid=0 auid=0 ses=22349 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447014785.331:690300): pid=4679 uid=0 auid=0 ses=22349 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447014785.338:690301): pid=4679 uid=0 auid=0 ses=22349 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447014785.338:690302): pid=4679 uid=0 auid=0 ses=22349 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447014785.339:690303): pid=4679 uid=0 auid=0 ses=22349 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4679 suid=0 rport=33710 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447014785.339:690304): pid=4679 uid=0 auid=0 ses=22349 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=4679 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447014785.339:690305): pid=4679 uid=0 auid=0 ses=22349 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=4679 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447014785.339:690306): pid=4679 uid=0 auid=0 ses=22349 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=4679 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447014785.368:690307): pid=4772 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=4772 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447014785.369:690308): pid=4772 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=4772 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447014785.369:690309): pid=4772 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=4772 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447014785.413:690310): pid=4771 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=4772 suid=74 rport=33713 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447014785.414:690311): pid=4771 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=4772 suid=74 rport=33713 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447014785.543:690312): pid=4771 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33713 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447014785.543:690313): pid=4771 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=33713 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447014785.552:690314): pid=4771 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447014785.553:690315): pid=4771 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4772 suid=74 rport=33713 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447014785.554:690316): pid=4771 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447014785.555:690317): pid=4771 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447014785.555:690318): pid=4771 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22350 res=1
type=USER_ROLE_CHANGE msg=audit(1447014785.620:690319): pid=4771 uid=0 auid=0 ses=22350 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447014785.641:690320): pid=4771 uid=0 auid=0 ses=22350 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447014785.644:690321): pid=4771 uid=0 auid=0 ses=22350 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447014785.644:690322): pid=4771 uid=0 auid=0 ses=22350 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447014785.646:690323): pid=4774 uid=0 auid=0 ses=22350 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=4774 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447014785.646:690324): pid=4774 uid=0 auid=0 ses=22350 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=4774 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447014785.646:690325): pid=4774 uid=0 auid=0 ses=22350 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=4774 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447014785.646:690326): pid=4774 uid=0 auid=0 ses=22350 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447014785.663:690327): pid=4771 uid=0 auid=0 ses=22350 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447014785.663:690328): pid=4771 uid=0 auid=0 ses=22350 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447014785.668:690329): pid=4771 uid=0 auid=0 ses=22350 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447014785.668:690330): pid=4771 uid=0 auid=0 ses=22350 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447014785.669:690331): pid=4771 uid=0 auid=0 ses=22350 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4771 suid=0 rport=33713 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447014785.669:690332): pid=4771 uid=0 auid=0 ses=22350 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=4771 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447014785.669:690333): pid=4771 uid=0 auid=0 ses=22350 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=4771 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447014785.669:690334): pid=4771 uid=0 auid=0 ses=22350 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=4771 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=SYSCALL msg=audit(1447015064.758:690335): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447015201.236:690336): pid=6023 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447015201.236:690337): pid=6023 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447015201.236:690338): pid=6024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447015201.236:690339): pid=6024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447015201.237:690340): pid=6023 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22351 res=1
type=LOGIN msg=audit(1447015201.237:690341): pid=6024 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22352 res=1
type=USER_START msg=audit(1447015201.258:690342): pid=6024 uid=0 auid=0 ses=22352 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447015201.258:690343): pid=6023 uid=0 auid=0 ses=22351 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447015201.260:690344): pid=6023 uid=0 auid=0 ses=22351 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447015201.260:690345): pid=6024 uid=0 auid=0 ses=22352 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447015201.267:690346): pid=6024 uid=0 auid=0 ses=22352 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447015201.269:690347): pid=6024 uid=0 auid=0 ses=22352 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447015201.280:690348): pid=6023 uid=0 auid=0 ses=22351 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447015201.281:690349): pid=6023 uid=0 auid=0 ses=22351 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447015801.298:690350): pid=7871 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447015801.298:690351): pid=7871 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447015801.298:690352): pid=7870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447015801.298:690353): pid=7871 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22353 res=1
type=CRED_ACQ msg=audit(1447015801.298:690354): pid=7870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447015801.298:690355): pid=7870 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22354 res=1
type=USER_START msg=audit(1447015801.313:690356): pid=7870 uid=0 auid=0 ses=22354 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447015801.313:690357): pid=7871 uid=0 auid=0 ses=22353 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447015801.314:690358): pid=7871 uid=0 auid=0 ses=22353 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447015801.314:690359): pid=7870 uid=0 auid=0 ses=22354 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447015801.320:690360): pid=7871 uid=0 auid=0 ses=22353 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447015801.324:690361): pid=7871 uid=0 auid=0 ses=22353 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447015801.325:690362): pid=7870 uid=0 auid=0 ses=22354 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447015826.352:690363): pid=7870 uid=0 auid=0 ses=22354 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=CRYPTO_KEY_USER msg=audit(1447015983.436:690364): pid=8431 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=8431 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447015983.436:690365): pid=8431 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=8431 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447015983.436:690366): pid=8431 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=8431 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447015983.480:690367): pid=8430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=8431 suid=74 rport=35690 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447015983.480:690368): pid=8430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=8431 suid=74 rport=35690 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447015983.609:690369): pid=8430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=35690 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447015983.609:690370): pid=8430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=35690 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447015983.618:690371): pid=8430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447015983.619:690372): pid=8430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8431 suid=74 rport=35690 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447015983.620:690373): pid=8430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447015983.620:690374): pid=8430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447015983.620:690375): pid=8430 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22355 res=1
type=USER_ROLE_CHANGE msg=audit(1447015983.690:690376): pid=8430 uid=0 auid=0 ses=22355 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447015983.712:690377): pid=8430 uid=0 auid=0 ses=22355 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447015983.715:690378): pid=8430 uid=0 auid=0 ses=22355 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447015983.715:690379): pid=8430 uid=0 auid=0 ses=22355 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447015983.717:690380): pid=8433 uid=0 auid=0 ses=22355 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=8433 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447015983.717:690381): pid=8433 uid=0 auid=0 ses=22355 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=8433 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447015983.717:690382): pid=8433 uid=0 auid=0 ses=22355 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=8433 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447015983.718:690383): pid=8433 uid=0 auid=0 ses=22355 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447015983.737:690384): pid=8430 uid=0 auid=0 ses=22355 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447015983.737:690385): pid=8430 uid=0 auid=0 ses=22355 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447015983.742:690386): pid=8430 uid=0 auid=0 ses=22355 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447015983.742:690387): pid=8430 uid=0 auid=0 ses=22355 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447015983.743:690388): pid=8430 uid=0 auid=0 ses=22355 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8430 suid=0 rport=35690 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447015983.743:690389): pid=8430 uid=0 auid=0 ses=22355 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=8430 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447015983.743:690390): pid=8430 uid=0 auid=0 ses=22355 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=8430 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447015983.743:690391): pid=8430 uid=0 auid=0 ses=22355 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=8430 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447015983.765:690392): pid=8441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=8441 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447015983.765:690393): pid=8441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=8441 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447015983.765:690394): pid=8441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=8441 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447015983.809:690395): pid=8440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=8441 suid=74 rport=35691 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447015983.809:690396): pid=8440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=8441 suid=74 rport=35691 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447015983.938:690397): pid=8440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=35691 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447015983.938:690398): pid=8440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=35691 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447015983.946:690399): pid=8440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447015983.947:690400): pid=8440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8441 suid=74 rport=35691 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447015983.950:690401): pid=8440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447015983.951:690402): pid=8440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447015983.951:690403): pid=8440 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22356 res=1
type=USER_ROLE_CHANGE msg=audit(1447015984.021:690404): pid=8440 uid=0 auid=0 ses=22356 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447015984.040:690405): pid=8440 uid=0 auid=0 ses=22356 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447015984.042:690406): pid=8440 uid=0 auid=0 ses=22356 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447015984.042:690407): pid=8440 uid=0 auid=0 ses=22356 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447015984.044:690408): pid=8443 uid=0 auid=0 ses=22356 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=8443 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447015984.044:690409): pid=8443 uid=0 auid=0 ses=22356 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=8443 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447015984.044:690410): pid=8443 uid=0 auid=0 ses=22356 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=8443 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447015984.044:690411): pid=8443 uid=0 auid=0 ses=22356 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447015985.311:690412): pid=8440 uid=0 auid=0 ses=22356 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447015985.311:690413): pid=8440 uid=0 auid=0 ses=22356 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447015985.316:690414): pid=8440 uid=0 auid=0 ses=22356 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447015985.317:690415): pid=8440 uid=0 auid=0 ses=22356 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447015985.317:690416): pid=8440 uid=0 auid=0 ses=22356 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8440 suid=0 rport=35691 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447015985.317:690417): pid=8440 uid=0 auid=0 ses=22356 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=8440 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447015985.317:690418): pid=8440 uid=0 auid=0 ses=22356 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=8440 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447015985.317:690419): pid=8440 uid=0 auid=0 ses=22356 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=8440 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447015985.344:690420): pid=8496 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=8496 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447015985.345:690421): pid=8496 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=8496 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447015985.345:690422): pid=8496 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=8496 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447015985.389:690423): pid=8495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=8496 suid=74 rport=35694 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447015985.389:690424): pid=8495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=8496 suid=74 rport=35694 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447015985.519:690425): pid=8495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=35694 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447015985.519:690426): pid=8495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=35694 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447015985.528:690427): pid=8495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447015985.529:690428): pid=8495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8496 suid=74 rport=35694 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447015985.530:690429): pid=8495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447015985.530:690430): pid=8495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447015985.530:690431): pid=8495 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22357 res=1
type=USER_ROLE_CHANGE msg=audit(1447015985.596:690432): pid=8495 uid=0 auid=0 ses=22357 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447015985.620:690433): pid=8495 uid=0 auid=0 ses=22357 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447015985.624:690434): pid=8495 uid=0 auid=0 ses=22357 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447015985.624:690435): pid=8495 uid=0 auid=0 ses=22357 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447015985.625:690436): pid=8535 uid=0 auid=0 ses=22357 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=8535 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447015985.625:690437): pid=8535 uid=0 auid=0 ses=22357 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=8535 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447015985.625:690438): pid=8535 uid=0 auid=0 ses=22357 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=8535 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447015985.626:690439): pid=8535 uid=0 auid=0 ses=22357 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447015985.644:690440): pid=8495 uid=0 auid=0 ses=22357 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447015985.644:690441): pid=8495 uid=0 auid=0 ses=22357 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447015985.650:690442): pid=8495 uid=0 auid=0 ses=22357 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447015985.650:690443): pid=8495 uid=0 auid=0 ses=22357 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447015985.651:690444): pid=8495 uid=0 auid=0 ses=22357 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8495 suid=0 rport=35694 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447015985.651:690445): pid=8495 uid=0 auid=0 ses=22357 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=8495 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447015985.651:690446): pid=8495 uid=0 auid=0 ses=22357 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=8495 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447015985.651:690447): pid=8495 uid=0 auid=0 ses=22357 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=8495 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=SYSCALL msg=audit(1447016090.725:690448): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447016401.373:690449): pid=9787 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447016401.373:690450): pid=9787 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447016401.373:690451): pid=9788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447016401.374:690452): pid=9788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447016401.374:690453): pid=9788 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22359 res=1
type=LOGIN msg=audit(1447016401.374:690454): pid=9787 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22358 res=1
type=USER_START msg=audit(1447016401.402:690455): pid=9788 uid=0 auid=0 ses=22359 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447016401.403:690456): pid=9788 uid=0 auid=0 ses=22359 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447016401.406:690457): pid=9787 uid=0 auid=0 ses=22358 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447016401.406:690458): pid=9787 uid=0 auid=0 ses=22358 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447016401.415:690459): pid=9788 uid=0 auid=0 ses=22359 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447016401.420:690460): pid=9788 uid=0 auid=0 ses=22359 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447016401.421:690461): pid=9787 uid=0 auid=0 ses=22358 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447016401.426:690462): pid=9787 uid=0 auid=0 ses=22358 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447016461.441:690463): pid=9981 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447016461.441:690464): pid=9981 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447016461.441:690465): pid=9981 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22360 res=1
type=USER_START msg=audit(1447016461.455:690466): pid=9981 uid=0 auid=0 ses=22360 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447016461.455:690467): pid=9981 uid=0 auid=0 ses=22360 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447016461.484:690468): pid=9981 uid=0 auid=0 ses=22360 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447016461.487:690469): pid=9981 uid=0 auid=0 ses=22360 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447017001.499:690470): pid=11630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447017001.499:690471): pid=11630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447017001.499:690472): pid=11631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447017001.499:690473): pid=11630 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22361 res=1
type=CRED_ACQ msg=audit(1447017001.499:690474): pid=11631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447017001.500:690475): pid=11631 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22362 res=1
type=USER_START msg=audit(1447017001.515:690476): pid=11631 uid=0 auid=0 ses=22362 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447017001.515:690477): pid=11631 uid=0 auid=0 ses=22362 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447017001.518:690478): pid=11630 uid=0 auid=0 ses=22361 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447017001.518:690479): pid=11630 uid=0 auid=0 ses=22361 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447017001.524:690480): pid=11631 uid=0 auid=0 ses=22362 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447017001.528:690481): pid=11631 uid=0 auid=0 ses=22362 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447017001.529:690482): pid=11630 uid=0 auid=0 ses=22361 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447017001.534:690483): pid=11630 uid=0 auid=0 ses=22361 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447017183.025:690484): pid=12231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12231 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447017183.025:690485): pid=12231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12231 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447017183.025:690486): pid=12231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12231 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447017183.070:690487): pid=12230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=12231 suid=74 rport=37670 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447017183.070:690488): pid=12230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=12231 suid=74 rport=37670 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447017183.195:690489): pid=12230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=37670 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447017183.195:690490): pid=12230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=37670 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447017183.204:690491): pid=12230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447017183.204:690492): pid=12230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12231 suid=74 rport=37670 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447017183.206:690493): pid=12230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447017183.207:690494): pid=12230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447017183.207:690495): pid=12230 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22363 res=1
type=USER_ROLE_CHANGE msg=audit(1447017183.276:690496): pid=12230 uid=0 auid=0 ses=22363 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447017183.296:690497): pid=12230 uid=0 auid=0 ses=22363 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447017183.299:690498): pid=12230 uid=0 auid=0 ses=22363 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447017183.299:690499): pid=12230 uid=0 auid=0 ses=22363 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447017183.300:690500): pid=12233 uid=0 auid=0 ses=22363 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12233 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447017183.300:690501): pid=12233 uid=0 auid=0 ses=22363 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12233 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447017183.300:690502): pid=12233 uid=0 auid=0 ses=22363 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12233 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447017183.301:690503): pid=12233 uid=0 auid=0 ses=22363 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447017183.319:690504): pid=12230 uid=0 auid=0 ses=22363 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447017183.319:690505): pid=12230 uid=0 auid=0 ses=22363 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447017183.322:690506): pid=12230 uid=0 auid=0 ses=22363 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447017183.323:690507): pid=12230 uid=0 auid=0 ses=22363 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447017183.323:690508): pid=12230 uid=0 auid=0 ses=22363 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12230 suid=0 rport=37670 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447017183.323:690509): pid=12230 uid=0 auid=0 ses=22363 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12230 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447017183.324:690510): pid=12230 uid=0 auid=0 ses=22363 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12230 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447017183.324:690511): pid=12230 uid=0 auid=0 ses=22363 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12230 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447017183.345:690512): pid=12241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12241 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447017183.345:690513): pid=12241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12241 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447017183.345:690514): pid=12241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12241 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447017183.389:690515): pid=12240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=12241 suid=74 rport=37671 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447017183.389:690516): pid=12240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=12241 suid=74 rport=37671 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447017183.514:690517): pid=12240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=37671 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447017183.514:690518): pid=12240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=37671 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447017183.520:690519): pid=12240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447017183.521:690520): pid=12240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12241 suid=74 rport=37671 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447017183.523:690521): pid=12240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447017183.524:690522): pid=12240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447017183.524:690523): pid=12240 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22364 res=1
type=USER_ROLE_CHANGE msg=audit(1447017183.592:690524): pid=12240 uid=0 auid=0 ses=22364 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447017183.614:690525): pid=12240 uid=0 auid=0 ses=22364 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447017183.618:690526): pid=12240 uid=0 auid=0 ses=22364 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447017183.618:690527): pid=12240 uid=0 auid=0 ses=22364 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447017183.620:690528): pid=12243 uid=0 auid=0 ses=22364 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12243 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447017183.620:690529): pid=12243 uid=0 auid=0 ses=22364 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12243 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447017183.620:690530): pid=12243 uid=0 auid=0 ses=22364 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12243 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447017183.620:690531): pid=12243 uid=0 auid=0 ses=22364 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447017184.910:690532): pid=12240 uid=0 auid=0 ses=22364 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447017184.910:690533): pid=12240 uid=0 auid=0 ses=22364 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447017184.917:690534): pid=12240 uid=0 auid=0 ses=22364 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447017184.917:690535): pid=12240 uid=0 auid=0 ses=22364 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447017184.917:690536): pid=12240 uid=0 auid=0 ses=22364 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12240 suid=0 rport=37671 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447017184.917:690537): pid=12240 uid=0 auid=0 ses=22364 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12240 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447017184.917:690538): pid=12240 uid=0 auid=0 ses=22364 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12240 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447017184.917:690539): pid=12240 uid=0 auid=0 ses=22364 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12240 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447017184.948:690540): pid=12315 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12315 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447017184.948:690541): pid=12315 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12315 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447017184.948:690542): pid=12315 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12315 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447017184.992:690543): pid=12314 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=12315 suid=74 rport=37673 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447017184.993:690544): pid=12314 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=12315 suid=74 rport=37673 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447017185.122:690545): pid=12314 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=37673 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447017185.122:690546): pid=12314 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=37673 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447017185.132:690547): pid=12314 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447017185.133:690548): pid=12314 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12315 suid=74 rport=37673 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447017185.134:690549): pid=12314 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447017185.134:690550): pid=12314 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447017185.134:690551): pid=12314 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22365 res=1
type=USER_ROLE_CHANGE msg=audit(1447017185.202:690552): pid=12314 uid=0 auid=0 ses=22365 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447017185.223:690553): pid=12314 uid=0 auid=0 ses=22365 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447017185.225:690554): pid=12314 uid=0 auid=0 ses=22365 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447017185.225:690555): pid=12314 uid=0 auid=0 ses=22365 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447017185.227:690556): pid=12320 uid=0 auid=0 ses=22365 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12320 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447017185.227:690557): pid=12320 uid=0 auid=0 ses=22365 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12320 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447017185.227:690558): pid=12320 uid=0 auid=0 ses=22365 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12320 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447017185.228:690559): pid=12320 uid=0 auid=0 ses=22365 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447017185.251:690560): pid=12314 uid=0 auid=0 ses=22365 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447017185.252:690561): pid=12314 uid=0 auid=0 ses=22365 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447017185.256:690562): pid=12314 uid=0 auid=0 ses=22365 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447017185.256:690563): pid=12314 uid=0 auid=0 ses=22365 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447017185.256:690564): pid=12314 uid=0 auid=0 ses=22365 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12314 suid=0 rport=37673 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447017185.256:690565): pid=12314 uid=0 auid=0 ses=22365 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12314 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447017185.257:690566): pid=12314 uid=0 auid=0 ses=22365 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12314 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447017185.257:690567): pid=12314 uid=0 auid=0 ses=22365 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12314 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447017601.561:690568): pid=13552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447017601.561:690569): pid=13553 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447017601.561:690571): pid=13552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447017601.561:690570): pid=13553 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447017601.562:690572): pid=13553 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22366 res=1
type=LOGIN msg=audit(1447017601.562:690573): pid=13552 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22367 res=1
type=USER_START msg=audit(1447017601.583:690574): pid=13552 uid=0 auid=0 ses=22367 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447017601.583:690575): pid=13553 uid=0 auid=0 ses=22366 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447017601.583:690576): pid=13552 uid=0 auid=0 ses=22367 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447017601.583:690577): pid=13553 uid=0 auid=0 ses=22366 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447017601.593:690578): pid=13553 uid=0 auid=0 ses=22366 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447017601.595:690579): pid=13553 uid=0 auid=0 ses=22366 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447017601.603:690580): pid=13552 uid=0 auid=0 ses=22367 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447017601.604:690581): pid=13552 uid=0 auid=0 ses=22367 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1447018171.700:690582): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447018201.617:690584): pid=15517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447018201.617:690583): pid=15516 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447018201.617:690585): pid=15516 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447018201.617:690586): pid=15517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447018201.617:690587): pid=15516 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22368 res=1
type=LOGIN msg=audit(1447018201.617:690588): pid=15517 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22369 res=1
type=USER_START msg=audit(1447018201.633:690589): pid=15517 uid=0 auid=0 ses=22369 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447018201.633:690590): pid=15516 uid=0 auid=0 ses=22368 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447018201.634:690591): pid=15517 uid=0 auid=0 ses=22369 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447018201.634:690592): pid=15516 uid=0 auid=0 ses=22368 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447018201.639:690593): pid=15517 uid=0 auid=0 ses=22369 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447018201.641:690594): pid=15517 uid=0 auid=0 ses=22369 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447018201.650:690595): pid=15516 uid=0 auid=0 ses=22368 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447018201.652:690596): pid=15516 uid=0 auid=0 ses=22368 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447018382.557:690597): pid=16079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16079 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447018382.557:690598): pid=16079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16079 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447018382.558:690599): pid=16079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16079 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447018382.601:690600): pid=16078 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=16079 suid=74 rport=39651 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447018382.602:690601): pid=16078 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=16079 suid=74 rport=39651 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447018382.730:690602): pid=16078 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=39651 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447018382.730:690603): pid=16078 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=39651 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447018382.739:690604): pid=16078 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447018382.740:690605): pid=16078 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16079 suid=74 rport=39651 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447018382.742:690606): pid=16078 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447018382.742:690607): pid=16078 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447018382.743:690608): pid=16078 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22370 res=1
type=USER_ROLE_CHANGE msg=audit(1447018382.813:690609): pid=16078 uid=0 auid=0 ses=22370 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447018382.834:690610): pid=16078 uid=0 auid=0 ses=22370 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447018382.838:690611): pid=16078 uid=0 auid=0 ses=22370 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447018382.838:690612): pid=16078 uid=0 auid=0 ses=22370 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447018382.840:690613): pid=16081 uid=0 auid=0 ses=22370 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16081 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447018382.840:690614): pid=16081 uid=0 auid=0 ses=22370 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16081 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447018382.840:690615): pid=16081 uid=0 auid=0 ses=22370 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16081 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447018382.841:690616): pid=16081 uid=0 auid=0 ses=22370 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447018382.871:690617): pid=16078 uid=0 auid=0 ses=22370 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447018382.871:690618): pid=16078 uid=0 auid=0 ses=22370 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447018382.876:690619): pid=16078 uid=0 auid=0 ses=22370 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447018382.876:690620): pid=16078 uid=0 auid=0 ses=22370 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447018382.876:690621): pid=16078 uid=0 auid=0 ses=22370 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16078 suid=0 rport=39651 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447018382.876:690622): pid=16078 uid=0 auid=0 ses=22370 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16078 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447018382.876:690623): pid=16078 uid=0 auid=0 ses=22370 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16078 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447018382.876:690624): pid=16078 uid=0 auid=0 ses=22370 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16078 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447018382.897:690625): pid=16089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16089 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447018382.897:690626): pid=16089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16089 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447018382.897:690627): pid=16089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16089 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447018382.941:690628): pid=16088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=16089 suid=74 rport=39652 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447018382.941:690629): pid=16088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=16089 suid=74 rport=39652 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447018383.071:690630): pid=16088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=39652 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447018383.071:690631): pid=16088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=39652 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447018383.081:690632): pid=16088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447018383.083:690633): pid=16088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16089 suid=74 rport=39652 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447018383.085:690634): pid=16088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447018383.085:690635): pid=16088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447018383.085:690636): pid=16088 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22371 res=1
type=USER_ROLE_CHANGE msg=audit(1447018383.153:690637): pid=16088 uid=0 auid=0 ses=22371 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447018383.176:690638): pid=16088 uid=0 auid=0 ses=22371 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447018383.178:690639): pid=16088 uid=0 auid=0 ses=22371 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447018383.179:690640): pid=16088 uid=0 auid=0 ses=22371 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447018383.180:690641): pid=16091 uid=0 auid=0 ses=22371 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16091 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447018383.180:690642): pid=16091 uid=0 auid=0 ses=22371 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16091 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447018383.180:690643): pid=16091 uid=0 auid=0 ses=22371 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16091 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447018383.182:690644): pid=16091 uid=0 auid=0 ses=22371 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447018384.445:690645): pid=16088 uid=0 auid=0 ses=22371 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447018384.445:690646): pid=16088 uid=0 auid=0 ses=22371 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447018384.451:690647): pid=16088 uid=0 auid=0 ses=22371 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447018384.451:690648): pid=16088 uid=0 auid=0 ses=22371 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447018384.452:690649): pid=16088 uid=0 auid=0 ses=22371 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16088 suid=0 rport=39652 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447018384.452:690650): pid=16088 uid=0 auid=0 ses=22371 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16088 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447018384.452:690651): pid=16088 uid=0 auid=0 ses=22371 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16088 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447018384.452:690652): pid=16088 uid=0 auid=0 ses=22371 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16088 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447018384.481:690653): pid=16141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16141 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447018384.481:690654): pid=16141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16141 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447018384.481:690655): pid=16141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16141 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447018384.526:690656): pid=16140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=16141 suid=74 rport=39654 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447018384.526:690657): pid=16140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=16141 suid=74 rport=39654 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447018384.649:690658): pid=16140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=39654 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447018384.649:690659): pid=16140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=39654 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447018384.654:690660): pid=16140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447018384.654:690661): pid=16140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16141 suid=74 rport=39654 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447018384.657:690662): pid=16140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447018384.657:690663): pid=16140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447018384.657:690664): pid=16140 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22372 res=1
type=USER_ROLE_CHANGE msg=audit(1447018384.723:690665): pid=16140 uid=0 auid=0 ses=22372 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447018384.743:690666): pid=16140 uid=0 auid=0 ses=22372 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447018384.746:690667): pid=16140 uid=0 auid=0 ses=22372 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447018384.746:690668): pid=16140 uid=0 auid=0 ses=22372 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447018384.747:690669): pid=16143 uid=0 auid=0 ses=22372 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16143 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447018384.747:690670): pid=16143 uid=0 auid=0 ses=22372 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16143 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447018384.747:690671): pid=16143 uid=0 auid=0 ses=22372 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16143 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447018384.748:690672): pid=16143 uid=0 auid=0 ses=22372 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447018384.763:690673): pid=16140 uid=0 auid=0 ses=22372 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447018384.763:690674): pid=16140 uid=0 auid=0 ses=22372 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447018384.767:690675): pid=16140 uid=0 auid=0 ses=22372 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447018384.767:690676): pid=16140 uid=0 auid=0 ses=22372 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447018384.767:690677): pid=16140 uid=0 auid=0 ses=22372 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16140 suid=0 rport=39654 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447018384.767:690678): pid=16140 uid=0 auid=0 ses=22372 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16140 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447018384.767:690679): pid=16140 uid=0 auid=0 ses=22372 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16140 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447018384.767:690680): pid=16140 uid=0 auid=0 ses=22372 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16140 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447018801.672:690682): pid=17435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447018801.672:690681): pid=17436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447018801.672:690683): pid=17435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447018801.672:690684): pid=17436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447018801.673:690685): pid=17436 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22373 res=1
type=LOGIN msg=audit(1447018801.673:690686): pid=17435 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22374 res=1
type=USER_START msg=audit(1447018801.694:690687): pid=17436 uid=0 auid=0 ses=22373 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447018801.695:690688): pid=17436 uid=0 auid=0 ses=22373 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447018801.695:690689): pid=17435 uid=0 auid=0 ses=22374 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447018801.695:690690): pid=17435 uid=0 auid=0 ses=22374 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447018801.706:690691): pid=17436 uid=0 auid=0 ses=22373 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447018801.708:690692): pid=17436 uid=0 auid=0 ses=22373 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447018801.709:690693): pid=17435 uid=0 auid=0 ses=22374 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447018801.713:690694): pid=17435 uid=0 auid=0 ses=22374 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447019401.727:690695): pid=19281 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447019401.727:690696): pid=19281 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447019401.727:690697): pid=19281 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22375 res=1
type=USER_ACCT msg=audit(1447019401.728:690698): pid=19282 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447019401.728:690699): pid=19282 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447019401.728:690700): pid=19282 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22376 res=1
type=USER_START msg=audit(1447019401.744:690701): pid=19282 uid=0 auid=0 ses=22376 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447019401.745:690702): pid=19282 uid=0 auid=0 ses=22376 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447019401.745:690703): pid=19281 uid=0 auid=0 ses=22375 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447019401.745:690704): pid=19281 uid=0 auid=0 ses=22375 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447019401.752:690705): pid=19282 uid=0 auid=0 ses=22376 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447019401.754:690706): pid=19282 uid=0 auid=0 ses=22376 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447019401.758:690707): pid=19281 uid=0 auid=0 ses=22375 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447019401.763:690708): pid=19281 uid=0 auid=0 ses=22375 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447019582.418:690709): pid=19841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=19841 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447019582.418:690710): pid=19841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=19841 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447019582.418:690711): pid=19841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=19841 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447019582.461:690712): pid=19840 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=19841 suid=74 rport=41629 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447019582.462:690713): pid=19840 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=19841 suid=74 rport=41629 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447019582.591:690714): pid=19840 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=41629 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447019582.591:690715): pid=19840 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=41629 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447019582.599:690716): pid=19840 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447019582.601:690717): pid=19840 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19841 suid=74 rport=41629 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447019582.603:690718): pid=19840 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447019582.604:690719): pid=19840 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447019582.604:690720): pid=19840 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22377 res=1
type=USER_ROLE_CHANGE msg=audit(1447019582.673:690721): pid=19840 uid=0 auid=0 ses=22377 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447019582.701:690722): pid=19840 uid=0 auid=0 ses=22377 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447019582.703:690723): pid=19840 uid=0 auid=0 ses=22377 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447019582.703:690724): pid=19840 uid=0 auid=0 ses=22377 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447019582.706:690725): pid=19843 uid=0 auid=0 ses=22377 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=19843 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447019582.706:690726): pid=19843 uid=0 auid=0 ses=22377 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=19843 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447019582.706:690727): pid=19843 uid=0 auid=0 ses=22377 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=19843 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447019582.706:690728): pid=19843 uid=0 auid=0 ses=22377 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447019582.726:690729): pid=19840 uid=0 auid=0 ses=22377 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447019582.726:690730): pid=19840 uid=0 auid=0 ses=22377 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447019582.729:690731): pid=19840 uid=0 auid=0 ses=22377 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447019582.730:690732): pid=19840 uid=0 auid=0 ses=22377 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447019582.732:690733): pid=19840 uid=0 auid=0 ses=22377 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19840 suid=0 rport=41629 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447019582.732:690734): pid=19840 uid=0 auid=0 ses=22377 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=19840 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447019582.732:690735): pid=19840 uid=0 auid=0 ses=22377 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=19840 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447019582.732:690736): pid=19840 uid=0 auid=0 ses=22377 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=19840 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447019582.751:690737): pid=19851 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=19851 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447019582.751:690738): pid=19851 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=19851 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447019582.751:690739): pid=19851 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=19851 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447019582.795:690740): pid=19850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=19851 suid=74 rport=41630 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447019582.797:690741): pid=19850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=19851 suid=74 rport=41630 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447019582.924:690742): pid=19850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=41630 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447019582.924:690743): pid=19850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=41630 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447019582.935:690744): pid=19850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447019582.936:690745): pid=19850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19851 suid=74 rport=41630 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447019582.938:690746): pid=19850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447019582.939:690747): pid=19850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447019582.939:690748): pid=19850 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22378 res=1
type=USER_ROLE_CHANGE msg=audit(1447019583.008:690749): pid=19850 uid=0 auid=0 ses=22378 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447019583.028:690750): pid=19850 uid=0 auid=0 ses=22378 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447019583.031:690751): pid=19850 uid=0 auid=0 ses=22378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447019583.031:690752): pid=19850 uid=0 auid=0 ses=22378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447019583.032:690753): pid=19853 uid=0 auid=0 ses=22378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=19853 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447019583.032:690754): pid=19853 uid=0 auid=0 ses=22378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=19853 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447019583.032:690755): pid=19853 uid=0 auid=0 ses=22378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=19853 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447019583.033:690756): pid=19853 uid=0 auid=0 ses=22378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447019584.319:690757): pid=19850 uid=0 auid=0 ses=22378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447019584.319:690758): pid=19850 uid=0 auid=0 ses=22378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447019584.323:690759): pid=19850 uid=0 auid=0 ses=22378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447019584.324:690760): pid=19850 uid=0 auid=0 ses=22378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447019584.324:690761): pid=19850 uid=0 auid=0 ses=22378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19850 suid=0 rport=41630 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447019584.324:690762): pid=19850 uid=0 auid=0 ses=22378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=19850 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447019584.324:690763): pid=19850 uid=0 auid=0 ses=22378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=19850 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447019584.324:690764): pid=19850 uid=0 auid=0 ses=22378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=19850 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447019584.355:690765): pid=19903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=19903 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447019584.356:690766): pid=19903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=19903 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447019584.356:690767): pid=19903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=19903 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447019584.401:690768): pid=19902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=19903 suid=74 rport=41633 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447019584.401:690769): pid=19902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=19903 suid=74 rport=41633 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447019584.521:690770): pid=19902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=41633 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447019584.521:690771): pid=19902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=41633 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447019584.526:690772): pid=19902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447019584.526:690773): pid=19902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19903 suid=74 rport=41633 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447019584.528:690774): pid=19902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447019584.529:690775): pid=19902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447019584.529:690776): pid=19902 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22379 res=1
type=USER_ROLE_CHANGE msg=audit(1447019584.595:690777): pid=19902 uid=0 auid=0 ses=22379 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447019584.616:690778): pid=19902 uid=0 auid=0 ses=22379 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447019584.619:690779): pid=19902 uid=0 auid=0 ses=22379 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447019584.619:690780): pid=19902 uid=0 auid=0 ses=22379 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447019584.621:690781): pid=19905 uid=0 auid=0 ses=22379 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=19905 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447019584.621:690782): pid=19905 uid=0 auid=0 ses=22379 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=19905 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447019584.621:690783): pid=19905 uid=0 auid=0 ses=22379 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=19905 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447019584.622:690784): pid=19905 uid=0 auid=0 ses=22379 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447019584.638:690785): pid=19902 uid=0 auid=0 ses=22379 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447019584.638:690786): pid=19902 uid=0 auid=0 ses=22379 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447019584.642:690787): pid=19902 uid=0 auid=0 ses=22379 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447019584.642:690788): pid=19902 uid=0 auid=0 ses=22379 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447019584.642:690789): pid=19902 uid=0 auid=0 ses=22379 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19902 suid=0 rport=41633 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447019584.642:690790): pid=19902 uid=0 auid=0 ses=22379 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=19902 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447019584.643:690791): pid=19902 uid=0 auid=0 ses=22379 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=19902 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447019584.643:690792): pid=19902 uid=0 auid=0 ses=22379 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=19902 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447020001.779:690793): pid=21199 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447020001.780:690794): pid=21199 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447020001.781:690795): pid=21199 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22380 res=1
type=USER_ACCT msg=audit(1447020001.781:690796): pid=21198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447020001.781:690797): pid=21198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447020001.781:690798): pid=21198 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22381 res=1
type=USER_START msg=audit(1447020001.800:690799): pid=21198 uid=0 auid=0 ses=22381 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447020001.801:690800): pid=21198 uid=0 auid=0 ses=22381 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447020001.801:690801): pid=21199 uid=0 auid=0 ses=22380 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447020001.801:690802): pid=21199 uid=0 auid=0 ses=22380 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447020001.811:690803): pid=21199 uid=0 auid=0 ses=22380 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447020001.812:690804): pid=21199 uid=0 auid=0 ses=22380 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447020001.819:690805): pid=21198 uid=0 auid=0 ses=22381 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447020001.820:690806): pid=21198 uid=0 auid=0 ses=22381 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447020061.831:690807): pid=21401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447020061.831:690808): pid=21401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447020061.831:690809): pid=21401 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22382 res=1
type=USER_START msg=audit(1447020061.844:690810): pid=21401 uid=0 auid=0 ses=22382 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447020061.844:690811): pid=21401 uid=0 auid=0 ses=22382 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447020061.866:690812): pid=21401 uid=0 auid=0 ses=22382 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447020061.867:690813): pid=21401 uid=0 auid=0 ses=22382 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1447020275.668:690814): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447020601.879:690816): pid=23100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447020601.879:690815): pid=23101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447020601.879:690817): pid=23101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447020601.879:690818): pid=23100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447020601.879:690819): pid=23101 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22383 res=1
type=LOGIN msg=audit(1447020601.879:690820): pid=23100 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22384 res=1
type=USER_START msg=audit(1447020601.895:690821): pid=23100 uid=0 auid=0 ses=22384 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447020601.895:690822): pid=23100 uid=0 auid=0 ses=22384 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447020601.895:690823): pid=23101 uid=0 auid=0 ses=22383 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447020601.895:690824): pid=23101 uid=0 auid=0 ses=22383 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447020601.905:690825): pid=23101 uid=0 auid=0 ses=22383 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447020601.907:690826): pid=23101 uid=0 auid=0 ses=22383 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447020601.907:690827): pid=23100 uid=0 auid=0 ses=22384 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447020626.936:690828): pid=23100 uid=0 auid=0 ses=22384 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=CRYPTO_KEY_USER msg=audit(1447020782.512:690829): pid=23661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=23661 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447020782.512:690830): pid=23661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=23661 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447020782.512:690831): pid=23661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=23661 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447020782.556:690832): pid=23660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=23661 suid=74 rport=43609 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447020782.557:690833): pid=23660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=23661 suid=74 rport=43609 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447020782.686:690834): pid=23660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=43609 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447020782.686:690835): pid=23660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=43609 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447020782.695:690836): pid=23660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447020782.697:690837): pid=23660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23661 suid=74 rport=43609 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447020782.697:690838): pid=23660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447020782.698:690839): pid=23660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447020782.698:690840): pid=23660 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22385 res=1
type=USER_ROLE_CHANGE msg=audit(1447020782.767:690841): pid=23660 uid=0 auid=0 ses=22385 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447020782.787:690842): pid=23660 uid=0 auid=0 ses=22385 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447020782.789:690843): pid=23660 uid=0 auid=0 ses=22385 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447020782.789:690844): pid=23660 uid=0 auid=0 ses=22385 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447020782.791:690845): pid=23663 uid=0 auid=0 ses=22385 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=23663 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447020782.791:690846): pid=23663 uid=0 auid=0 ses=22385 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=23663 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447020782.791:690847): pid=23663 uid=0 auid=0 ses=22385 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=23663 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447020782.792:690848): pid=23663 uid=0 auid=0 ses=22385 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447020782.813:690849): pid=23660 uid=0 auid=0 ses=22385 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447020782.813:690850): pid=23660 uid=0 auid=0 ses=22385 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447020782.817:690851): pid=23660 uid=0 auid=0 ses=22385 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447020782.817:690852): pid=23660 uid=0 auid=0 ses=22385 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447020782.818:690853): pid=23660 uid=0 auid=0 ses=22385 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23660 suid=0 rport=43609 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447020782.818:690854): pid=23660 uid=0 auid=0 ses=22385 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=23660 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447020782.818:690855): pid=23660 uid=0 auid=0 ses=22385 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=23660 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447020782.818:690856): pid=23660 uid=0 auid=0 ses=22385 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=23660 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447020782.839:690857): pid=23671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=23671 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447020782.840:690858): pid=23671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=23671 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447020782.840:690859): pid=23671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=23671 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447020782.885:690860): pid=23670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=23671 suid=74 rport=43611 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447020782.885:690861): pid=23670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=23671 suid=74 rport=43611 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447020783.015:690862): pid=23670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=43611 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447020783.016:690863): pid=23670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=43611 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447020783.024:690864): pid=23670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447020783.025:690865): pid=23670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23671 suid=74 rport=43611 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447020783.026:690866): pid=23670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447020783.026:690867): pid=23670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447020783.026:690868): pid=23670 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22386 res=1
type=USER_ROLE_CHANGE msg=audit(1447020783.090:690869): pid=23670 uid=0 auid=0 ses=22386 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447020783.109:690870): pid=23670 uid=0 auid=0 ses=22386 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447020783.111:690871): pid=23670 uid=0 auid=0 ses=22386 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447020783.112:690872): pid=23670 uid=0 auid=0 ses=22386 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447020783.113:690873): pid=23673 uid=0 auid=0 ses=22386 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=23673 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447020783.113:690874): pid=23673 uid=0 auid=0 ses=22386 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=23673 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447020783.113:690875): pid=23673 uid=0 auid=0 ses=22386 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=23673 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447020783.114:690876): pid=23673 uid=0 auid=0 ses=22386 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447020784.380:690877): pid=23670 uid=0 auid=0 ses=22386 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447020784.380:690878): pid=23670 uid=0 auid=0 ses=22386 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447020784.385:690879): pid=23670 uid=0 auid=0 ses=22386 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447020784.385:690880): pid=23670 uid=0 auid=0 ses=22386 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447020784.385:690881): pid=23670 uid=0 auid=0 ses=22386 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23670 suid=0 rport=43611 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447020784.385:690882): pid=23670 uid=0 auid=0 ses=22386 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=23670 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447020784.385:690883): pid=23670 uid=0 auid=0 ses=22386 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=23670 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447020784.385:690884): pid=23670 uid=0 auid=0 ses=22386 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=23670 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447020784.421:690885): pid=23723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=23723 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447020784.421:690886): pid=23723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=23723 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447020784.422:690887): pid=23723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=23723 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447020784.466:690888): pid=23722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=23723 suid=74 rport=43614 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447020784.466:690889): pid=23722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=23723 suid=74 rport=43614 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447020784.586:690890): pid=23722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=43614 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447020784.586:690891): pid=23722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=43614 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447020784.591:690892): pid=23722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447020784.592:690893): pid=23722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23723 suid=74 rport=43614 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447020784.593:690894): pid=23722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447020784.593:690895): pid=23722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447020784.593:690896): pid=23722 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22387 res=1
type=USER_ROLE_CHANGE msg=audit(1447020784.661:690897): pid=23722 uid=0 auid=0 ses=22387 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447020784.681:690898): pid=23722 uid=0 auid=0 ses=22387 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447020784.685:690899): pid=23722 uid=0 auid=0 ses=22387 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447020784.685:690900): pid=23722 uid=0 auid=0 ses=22387 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447020784.687:690901): pid=23725 uid=0 auid=0 ses=22387 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=23725 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447020784.687:690902): pid=23725 uid=0 auid=0 ses=22387 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=23725 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447020784.687:690903): pid=23725 uid=0 auid=0 ses=22387 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=23725 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447020784.688:690904): pid=23725 uid=0 auid=0 ses=22387 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447020784.704:690905): pid=23722 uid=0 auid=0 ses=22387 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447020784.704:690906): pid=23722 uid=0 auid=0 ses=22387 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447020784.708:690907): pid=23722 uid=0 auid=0 ses=22387 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447020784.708:690908): pid=23722 uid=0 auid=0 ses=22387 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447020784.709:690909): pid=23722 uid=0 auid=0 ses=22387 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23722 suid=0 rport=43614 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447020784.709:690910): pid=23722 uid=0 auid=0 ses=22387 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=23722 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447020784.709:690911): pid=23722 uid=0 auid=0 ses=22387 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=23722 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447020784.709:690912): pid=23722 uid=0 auid=0 ses=22387 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=23722 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447021201.956:690913): pid=25024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447021201.956:690914): pid=25023 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447021201.956:690915): pid=25024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447021201.956:690916): pid=25023 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447021201.957:690918): pid=25024 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22388 res=1
type=LOGIN msg=audit(1447021201.957:690917): pid=25023 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22389 res=1
type=USER_START msg=audit(1447021201.973:690919): pid=25023 uid=0 auid=0 ses=22389 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447021201.973:690920): pid=25024 uid=0 auid=0 ses=22388 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447021201.973:690921): pid=25023 uid=0 auid=0 ses=22389 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447021201.973:690922): pid=25024 uid=0 auid=0 ses=22388 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447021201.983:690923): pid=25024 uid=0 auid=0 ses=22388 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447021201.985:690924): pid=25024 uid=0 auid=0 ses=22388 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447021201.987:690925): pid=25023 uid=0 auid=0 ses=22389 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447021227.015:690926): pid=25023 uid=0 auid=0 ses=22389 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=USER_ACCT msg=audit(1447021801.028:690927): pid=26867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447021801.028:690928): pid=26866 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447021801.028:690929): pid=26867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447021801.028:690930): pid=26866 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447021801.028:690931): pid=26867 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22390 res=1
type=LOGIN msg=audit(1447021801.028:690932): pid=26866 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22391 res=1
type=USER_START msg=audit(1447021801.047:690933): pid=26866 uid=0 auid=0 ses=22391 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447021801.047:690934): pid=26866 uid=0 auid=0 ses=22391 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447021801.048:690935): pid=26867 uid=0 auid=0 ses=22390 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447021801.048:690936): pid=26867 uid=0 auid=0 ses=22390 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447021801.054:690937): pid=26867 uid=0 auid=0 ses=22390 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447021801.055:690938): pid=26867 uid=0 auid=0 ses=22390 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447021801.061:690939): pid=26866 uid=0 auid=0 ses=22391 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447021801.063:690940): pid=26866 uid=0 auid=0 ses=22391 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447021982.974:690941): pid=27429 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=27429 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447021982.974:690942): pid=27429 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=27429 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447021982.974:690943): pid=27429 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27429 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447021983.020:690944): pid=27428 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=27429 suid=74 rport=45590 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447021983.020:690945): pid=27428 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=27429 suid=74 rport=45590 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447021983.147:690946): pid=27428 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=45590 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447021983.147:690947): pid=27428 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=45590 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447021983.157:690948): pid=27428 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447021983.159:690949): pid=27428 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27429 suid=74 rport=45590 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447021983.160:690950): pid=27428 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447021983.161:690951): pid=27428 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447021983.161:690952): pid=27428 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22392 res=1
type=USER_ROLE_CHANGE msg=audit(1447021983.229:690953): pid=27428 uid=0 auid=0 ses=22392 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447021983.248:690954): pid=27428 uid=0 auid=0 ses=22392 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447021983.251:690955): pid=27428 uid=0 auid=0 ses=22392 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447021983.251:690956): pid=27428 uid=0 auid=0 ses=22392 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447021983.253:690957): pid=27431 uid=0 auid=0 ses=22392 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=27431 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447021983.253:690958): pid=27431 uid=0 auid=0 ses=22392 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=27431 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447021983.253:690959): pid=27431 uid=0 auid=0 ses=22392 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27431 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447021983.254:690960): pid=27431 uid=0 auid=0 ses=22392 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447021983.273:690961): pid=27428 uid=0 auid=0 ses=22392 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447021983.273:690962): pid=27428 uid=0 auid=0 ses=22392 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447021983.277:690963): pid=27428 uid=0 auid=0 ses=22392 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447021983.277:690964): pid=27428 uid=0 auid=0 ses=22392 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447021983.278:690965): pid=27428 uid=0 auid=0 ses=22392 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27428 suid=0 rport=45590 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447021983.278:690966): pid=27428 uid=0 auid=0 ses=22392 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=27428 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447021983.278:690967): pid=27428 uid=0 auid=0 ses=22392 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=27428 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447021983.278:690968): pid=27428 uid=0 auid=0 ses=22392 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27428 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447021983.304:690969): pid=27439 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=27439 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447021983.304:690970): pid=27439 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=27439 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447021983.304:690971): pid=27439 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27439 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447021983.349:690972): pid=27438 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=27439 suid=74 rport=45592 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447021983.349:690973): pid=27438 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=27439 suid=74 rport=45592 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447021983.468:690974): pid=27438 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=45592 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447021983.469:690975): pid=27438 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=45592 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447021983.473:690976): pid=27438 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447021983.474:690977): pid=27438 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27439 suid=74 rport=45592 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447021983.475:690978): pid=27438 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447021983.475:690979): pid=27438 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447021983.475:690980): pid=27438 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22393 res=1
type=USER_ROLE_CHANGE msg=audit(1447021983.544:690981): pid=27438 uid=0 auid=0 ses=22393 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447021983.566:690982): pid=27438 uid=0 auid=0 ses=22393 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447021983.569:690983): pid=27438 uid=0 auid=0 ses=22393 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447021983.569:690984): pid=27438 uid=0 auid=0 ses=22393 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447021983.571:690985): pid=27441 uid=0 auid=0 ses=22393 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=27441 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447021983.571:690986): pid=27441 uid=0 auid=0 ses=22393 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=27441 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447021983.571:690987): pid=27441 uid=0 auid=0 ses=22393 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27441 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447021983.572:690988): pid=27441 uid=0 auid=0 ses=22393 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447021984.849:690989): pid=27438 uid=0 auid=0 ses=22393 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447021984.849:690990): pid=27438 uid=0 auid=0 ses=22393 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447021984.852:690991): pid=27438 uid=0 auid=0 ses=22393 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447021984.852:690992): pid=27438 uid=0 auid=0 ses=22393 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447021984.853:690993): pid=27438 uid=0 auid=0 ses=22393 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27438 suid=0 rport=45592 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447021984.853:690994): pid=27438 uid=0 auid=0 ses=22393 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=27438 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447021984.853:690995): pid=27438 uid=0 auid=0 ses=22393 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=27438 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447021984.853:690996): pid=27438 uid=0 auid=0 ses=22393 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27438 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447021984.887:690997): pid=27491 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=27491 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447021984.888:690998): pid=27491 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=27491 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447021984.888:690999): pid=27491 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27491 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447021984.932:691000): pid=27490 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=27491 suid=74 rport=45595 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447021984.932:691001): pid=27490 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=27491 suid=74 rport=45595 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447021985.058:691002): pid=27490 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=45595 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447021985.058:691003): pid=27490 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=45595 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447021985.063:691004): pid=27490 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447021985.063:691005): pid=27490 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27491 suid=74 rport=45595 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447021985.065:691006): pid=27490 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447021985.065:691007): pid=27490 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447021985.065:691008): pid=27490 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22394 res=1
type=USER_ROLE_CHANGE msg=audit(1447021985.130:691009): pid=27490 uid=0 auid=0 ses=22394 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447021985.149:691010): pid=27490 uid=0 auid=0 ses=22394 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447021985.151:691011): pid=27490 uid=0 auid=0 ses=22394 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447021985.151:691012): pid=27490 uid=0 auid=0 ses=22394 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447021985.153:691013): pid=27493 uid=0 auid=0 ses=22394 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=27493 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447021985.153:691014): pid=27493 uid=0 auid=0 ses=22394 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=27493 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447021985.153:691015): pid=27493 uid=0 auid=0 ses=22394 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27493 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447021985.154:691016): pid=27493 uid=0 auid=0 ses=22394 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447021985.170:691017): pid=27490 uid=0 auid=0 ses=22394 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447021985.170:691018): pid=27490 uid=0 auid=0 ses=22394 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447021985.173:691019): pid=27490 uid=0 auid=0 ses=22394 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447021985.174:691020): pid=27490 uid=0 auid=0 ses=22394 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447021985.174:691021): pid=27490 uid=0 auid=0 ses=22394 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27490 suid=0 rport=45595 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447021985.175:691022): pid=27490 uid=0 auid=0 ses=22394 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=27490 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447021985.175:691023): pid=27490 uid=0 auid=0 ses=22394 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=27490 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447021985.175:691024): pid=27490 uid=0 auid=0 ses=22394 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27490 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447022401.081:691025): pid=28783 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447022401.081:691026): pid=28783 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447022401.083:691027): pid=28783 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22395 res=1
type=USER_ACCT msg=audit(1447022401.084:691028): pid=28782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447022401.084:691029): pid=28782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447022401.084:691030): pid=28782 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22396 res=1
type=USER_START msg=audit(1447022401.107:691031): pid=28783 uid=0 auid=0 ses=22395 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447022401.107:691032): pid=28783 uid=0 auid=0 ses=22395 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447022401.109:691033): pid=28782 uid=0 auid=0 ses=22396 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447022401.109:691034): pid=28782 uid=0 auid=0 ses=22396 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447022401.119:691035): pid=28783 uid=0 auid=0 ses=22395 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447022401.120:691036): pid=28783 uid=0 auid=0 ses=22395 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447022401.131:691037): pid=28782 uid=0 auid=0 ses=22396 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447022401.132:691038): pid=28782 uid=0 auid=0 ses=22396 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1447022408.743:691039): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447023001.148:691040): pid=30628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447023001.148:691041): pid=30628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447023001.148:691042): pid=30628 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22397 res=1
type=USER_ACCT msg=audit(1447023001.152:691043): pid=30629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447023001.152:691044): pid=30629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447023001.152:691045): pid=30629 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22398 res=1
type=USER_START msg=audit(1447023001.164:691046): pid=30629 uid=0 auid=0 ses=22398 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447023001.164:691047): pid=30628 uid=0 auid=0 ses=22397 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447023001.164:691048): pid=30629 uid=0 auid=0 ses=22398 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447023001.164:691049): pid=30628 uid=0 auid=0 ses=22397 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447023001.169:691050): pid=30629 uid=0 auid=0 ses=22398 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447023001.172:691051): pid=30629 uid=0 auid=0 ses=22398 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447023001.182:691052): pid=30628 uid=0 auid=0 ses=22397 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447023001.183:691053): pid=30628 uid=0 auid=0 ses=22397 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447023182.441:691054): pid=31190 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=31190 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447023182.441:691055): pid=31190 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=31190 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447023182.442:691056): pid=31190 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=31190 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447023182.487:691057): pid=31189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=31190 suid=74 rport=47570 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447023182.487:691058): pid=31189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=31190 suid=74 rport=47570 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447023182.610:691059): pid=31189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=47570 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447023182.610:691060): pid=31189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=47570 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447023182.614:691061): pid=31189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447023182.615:691062): pid=31189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=31190 suid=74 rport=47570 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447023182.618:691063): pid=31189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447023182.619:691064): pid=31189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447023182.619:691065): pid=31189 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22399 res=1
type=USER_ROLE_CHANGE msg=audit(1447023182.691:691066): pid=31189 uid=0 auid=0 ses=22399 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447023182.711:691067): pid=31189 uid=0 auid=0 ses=22399 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447023182.713:691068): pid=31189 uid=0 auid=0 ses=22399 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447023182.713:691069): pid=31189 uid=0 auid=0 ses=22399 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447023182.715:691070): pid=31192 uid=0 auid=0 ses=22399 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=31192 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447023182.715:691071): pid=31192 uid=0 auid=0 ses=22399 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=31192 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447023182.715:691072): pid=31192 uid=0 auid=0 ses=22399 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=31192 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447023182.716:691073): pid=31192 uid=0 auid=0 ses=22399 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447023182.733:691074): pid=31189 uid=0 auid=0 ses=22399 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447023182.734:691075): pid=31189 uid=0 auid=0 ses=22399 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447023182.737:691076): pid=31189 uid=0 auid=0 ses=22399 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447023182.737:691077): pid=31189 uid=0 auid=0 ses=22399 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447023182.738:691078): pid=31189 uid=0 auid=0 ses=22399 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=31189 suid=0 rport=47570 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447023182.738:691079): pid=31189 uid=0 auid=0 ses=22399 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=31189 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447023182.738:691080): pid=31189 uid=0 auid=0 ses=22399 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=31189 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447023182.738:691081): pid=31189 uid=0 auid=0 ses=22399 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=31189 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447023182.762:691082): pid=31200 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=31200 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447023182.762:691083): pid=31200 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=31200 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447023182.762:691084): pid=31200 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=31200 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447023182.806:691085): pid=31199 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=31200 suid=74 rport=47572 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447023182.806:691086): pid=31199 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=31200 suid=74 rport=47572 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447023182.928:691087): pid=31199 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=47572 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447023182.928:691088): pid=31199 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=47572 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447023182.933:691089): pid=31199 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447023182.934:691090): pid=31199 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=31200 suid=74 rport=47572 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447023182.935:691091): pid=31199 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447023182.935:691092): pid=31199 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447023182.935:691093): pid=31199 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22400 res=1
type=USER_ROLE_CHANGE msg=audit(1447023183.004:691094): pid=31199 uid=0 auid=0 ses=22400 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447023183.024:691095): pid=31199 uid=0 auid=0 ses=22400 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447023183.027:691096): pid=31199 uid=0 auid=0 ses=22400 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447023183.027:691097): pid=31199 uid=0 auid=0 ses=22400 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447023183.029:691098): pid=31202 uid=0 auid=0 ses=22400 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=31202 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447023183.029:691099): pid=31202 uid=0 auid=0 ses=22400 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=31202 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447023183.029:691100): pid=31202 uid=0 auid=0 ses=22400 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=31202 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447023183.030:691101): pid=31202 uid=0 auid=0 ses=22400 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447023184.312:691102): pid=31199 uid=0 auid=0 ses=22400 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447023184.312:691103): pid=31199 uid=0 auid=0 ses=22400 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447023184.317:691104): pid=31199 uid=0 auid=0 ses=22400 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447023184.317:691105): pid=31199 uid=0 auid=0 ses=22400 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447023184.318:691106): pid=31199 uid=0 auid=0 ses=22400 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=31199 suid=0 rport=47572 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447023184.318:691107): pid=31199 uid=0 auid=0 ses=22400 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=31199 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447023184.318:691108): pid=31199 uid=0 auid=0 ses=22400 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=31199 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447023184.318:691109): pid=31199 uid=0 auid=0 ses=22400 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=31199 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447023184.354:691110): pid=31252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=31252 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447023184.355:691111): pid=31252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=31252 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447023184.355:691112): pid=31252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=31252 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447023184.401:691113): pid=31251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=31252 suid=74 rport=47574 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447023184.401:691114): pid=31251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=31252 suid=74 rport=47574 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447023184.531:691115): pid=31251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=47574 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447023184.531:691116): pid=31251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=47574 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447023184.541:691117): pid=31251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447023184.542:691118): pid=31251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=31252 suid=74 rport=47574 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447023184.543:691119): pid=31251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447023184.544:691120): pid=31251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447023184.544:691121): pid=31251 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22401 res=1
type=USER_ROLE_CHANGE msg=audit(1447023184.613:691122): pid=31251 uid=0 auid=0 ses=22401 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447023184.639:691123): pid=31251 uid=0 auid=0 ses=22401 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447023184.643:691124): pid=31251 uid=0 auid=0 ses=22401 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447023184.643:691125): pid=31251 uid=0 auid=0 ses=22401 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447023184.644:691126): pid=31254 uid=0 auid=0 ses=22401 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=31254 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447023184.644:691127): pid=31254 uid=0 auid=0 ses=22401 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=31254 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447023184.644:691128): pid=31254 uid=0 auid=0 ses=22401 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=31254 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447023184.645:691129): pid=31254 uid=0 auid=0 ses=22401 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447023184.662:691130): pid=31251 uid=0 auid=0 ses=22401 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447023184.662:691131): pid=31251 uid=0 auid=0 ses=22401 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447023184.664:691132): pid=31251 uid=0 auid=0 ses=22401 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447023184.664:691133): pid=31251 uid=0 auid=0 ses=22401 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447023184.666:691134): pid=31251 uid=0 auid=0 ses=22401 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=31251 suid=0 rport=47574 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447023184.666:691135): pid=31251 uid=0 auid=0 ses=22401 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=31251 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447023184.666:691136): pid=31251 uid=0 auid=0 ses=22401 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=31251 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447023184.666:691137): pid=31251 uid=0 auid=0 ses=22401 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=31251 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447023601.202:691138): pid=32537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447023601.202:691139): pid=32538 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447023601.202:691140): pid=32537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447023601.202:691141): pid=32538 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447023601.203:691142): pid=32538 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22402 res=1
type=LOGIN msg=audit(1447023601.203:691143): pid=32537 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22403 res=1
type=USER_START msg=audit(1447023601.224:691144): pid=32538 uid=0 auid=0 ses=22402 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447023601.224:691145): pid=32538 uid=0 auid=0 ses=22402 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447023601.226:691146): pid=32537 uid=0 auid=0 ses=22403 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447023601.226:691147): pid=32537 uid=0 auid=0 ses=22403 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447023601.233:691148): pid=32538 uid=0 auid=0 ses=22402 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447023601.235:691149): pid=32538 uid=0 auid=0 ses=22402 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447023601.246:691150): pid=32537 uid=0 auid=0 ses=22403 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447023601.247:691151): pid=32537 uid=0 auid=0 ses=22403 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447023661.255:691152): pid=32741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447023661.255:691153): pid=32741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447023661.256:691154): pid=32741 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22404 res=1
type=USER_START msg=audit(1447023661.267:691155): pid=32741 uid=0 auid=0 ses=22404 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447023661.267:691156): pid=32741 uid=0 auid=0 ses=22404 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447023661.295:691157): pid=32741 uid=0 auid=0 ses=22404 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447023661.296:691158): pid=32741 uid=0 auid=0 ses=22404 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447024201.312:691159): pid=2045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447024201.313:691160): pid=2045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447024201.313:691161): pid=2045 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22405 res=1
type=USER_ACCT msg=audit(1447024201.315:691162): pid=2044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447024201.315:691163): pid=2044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447024201.315:691164): pid=2044 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22406 res=1
type=USER_START msg=audit(1447024201.328:691165): pid=2044 uid=0 auid=0 ses=22406 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447024201.328:691166): pid=2045 uid=0 auid=0 ses=22405 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447024201.328:691167): pid=2044 uid=0 auid=0 ses=22406 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447024201.328:691168): pid=2045 uid=0 auid=0 ses=22405 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447024201.333:691169): pid=2045 uid=0 auid=0 ses=22405 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447024201.335:691170): pid=2045 uid=0 auid=0 ses=22405 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447024201.341:691171): pid=2044 uid=0 auid=0 ses=22406 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447024201.342:691172): pid=2044 uid=0 auid=0 ses=22406 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447024383.197:691173): pid=2645 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=2645 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447024383.198:691174): pid=2645 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=2645 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447024383.198:691175): pid=2645 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=2645 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447024383.242:691176): pid=2644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=2645 suid=74 rport=49552 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447024383.243:691177): pid=2644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=2645 suid=74 rport=49552 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447024383.366:691178): pid=2644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=49552 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447024383.366:691179): pid=2644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=49552 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447024383.370:691180): pid=2644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447024383.371:691181): pid=2644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2645 suid=74 rport=49552 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447024383.374:691182): pid=2644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447024383.374:691183): pid=2644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447024383.374:691184): pid=2644 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22407 res=1
type=USER_ROLE_CHANGE msg=audit(1447024383.443:691185): pid=2644 uid=0 auid=0 ses=22407 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447024383.467:691186): pid=2644 uid=0 auid=0 ses=22407 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447024383.471:691187): pid=2644 uid=0 auid=0 ses=22407 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447024383.471:691188): pid=2644 uid=0 auid=0 ses=22407 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447024383.473:691189): pid=2647 uid=0 auid=0 ses=22407 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=2647 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447024383.473:691190): pid=2647 uid=0 auid=0 ses=22407 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=2647 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447024383.473:691191): pid=2647 uid=0 auid=0 ses=22407 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=2647 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447024383.474:691192): pid=2647 uid=0 auid=0 ses=22407 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447024383.493:691193): pid=2644 uid=0 auid=0 ses=22407 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447024383.493:691194): pid=2644 uid=0 auid=0 ses=22407 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447024383.497:691195): pid=2644 uid=0 auid=0 ses=22407 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447024383.497:691196): pid=2644 uid=0 auid=0 ses=22407 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447024383.497:691197): pid=2644 uid=0 auid=0 ses=22407 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2644 suid=0 rport=49552 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447024383.497:691198): pid=2644 uid=0 auid=0 ses=22407 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=2644 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447024383.497:691199): pid=2644 uid=0 auid=0 ses=22407 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=2644 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447024383.497:691200): pid=2644 uid=0 auid=0 ses=22407 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=2644 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447024383.519:691201): pid=2655 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=2655 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447024383.520:691202): pid=2655 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=2655 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447024383.520:691203): pid=2655 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=2655 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447024383.566:691204): pid=2654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=2655 suid=74 rport=49553 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447024383.566:691205): pid=2654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=2655 suid=74 rport=49553 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447024383.687:691206): pid=2654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=49553 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447024383.687:691207): pid=2654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=49553 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447024383.692:691208): pid=2654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447024383.693:691209): pid=2654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2655 suid=74 rport=49553 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447024383.695:691210): pid=2654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447024383.695:691211): pid=2654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447024383.695:691212): pid=2654 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22408 res=1
type=USER_ROLE_CHANGE msg=audit(1447024383.763:691213): pid=2654 uid=0 auid=0 ses=22408 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447024383.783:691214): pid=2654 uid=0 auid=0 ses=22408 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447024383.785:691215): pid=2654 uid=0 auid=0 ses=22408 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447024383.786:691216): pid=2654 uid=0 auid=0 ses=22408 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447024383.787:691217): pid=2657 uid=0 auid=0 ses=22408 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=2657 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447024383.787:691218): pid=2657 uid=0 auid=0 ses=22408 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=2657 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447024383.787:691219): pid=2657 uid=0 auid=0 ses=22408 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=2657 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447024383.788:691220): pid=2657 uid=0 auid=0 ses=22408 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447024385.059:691221): pid=2654 uid=0 auid=0 ses=22408 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447024385.060:691222): pid=2654 uid=0 auid=0 ses=22408 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447024385.066:691223): pid=2654 uid=0 auid=0 ses=22408 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447024385.066:691224): pid=2654 uid=0 auid=0 ses=22408 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447024385.067:691225): pid=2654 uid=0 auid=0 ses=22408 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2654 suid=0 rport=49553 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447024385.067:691226): pid=2654 uid=0 auid=0 ses=22408 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=2654 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447024385.067:691227): pid=2654 uid=0 auid=0 ses=22408 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=2654 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447024385.067:691228): pid=2654 uid=0 auid=0 ses=22408 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=2654 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447024385.095:691229): pid=2729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=2729 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447024385.095:691230): pid=2729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=2729 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447024385.095:691231): pid=2729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=2729 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447024385.140:691232): pid=2728 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=2729 suid=74 rport=49557 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447024385.140:691233): pid=2728 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=2729 suid=74 rport=49557 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447024385.266:691234): pid=2728 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=49557 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447024385.266:691235): pid=2728 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=49557 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447024385.273:691236): pid=2728 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447024385.273:691237): pid=2728 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2729 suid=74 rport=49557 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447024385.274:691238): pid=2728 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447024385.274:691239): pid=2728 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447024385.274:691240): pid=2728 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22409 res=1
type=USER_ROLE_CHANGE msg=audit(1447024385.341:691241): pid=2728 uid=0 auid=0 ses=22409 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447024385.368:691242): pid=2728 uid=0 auid=0 ses=22409 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447024385.370:691243): pid=2728 uid=0 auid=0 ses=22409 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447024385.370:691244): pid=2728 uid=0 auid=0 ses=22409 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447024385.372:691245): pid=2734 uid=0 auid=0 ses=22409 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=2734 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447024385.372:691246): pid=2734 uid=0 auid=0 ses=22409 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=2734 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447024385.372:691247): pid=2734 uid=0 auid=0 ses=22409 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=2734 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447024385.372:691248): pid=2734 uid=0 auid=0 ses=22409 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447024385.390:691249): pid=2728 uid=0 auid=0 ses=22409 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447024385.390:691250): pid=2728 uid=0 auid=0 ses=22409 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447024385.397:691251): pid=2728 uid=0 auid=0 ses=22409 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447024385.397:691252): pid=2728 uid=0 auid=0 ses=22409 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447024385.398:691253): pid=2728 uid=0 auid=0 ses=22409 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2728 suid=0 rport=49557 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447024385.398:691254): pid=2728 uid=0 auid=0 ses=22409 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=2728 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447024385.398:691255): pid=2728 uid=0 auid=0 ses=22409 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=2728 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447024385.398:691256): pid=2728 uid=0 auid=0 ses=22409 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=2728 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=SYSCALL msg=audit(1447024492.726:691257): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447024801.363:691258): pid=3966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447024801.363:691259): pid=3967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447024801.363:691260): pid=3966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447024801.363:691261): pid=3967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447024801.364:691262): pid=3967 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22410 res=1
type=LOGIN msg=audit(1447024801.364:691263): pid=3966 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22411 res=1
type=USER_START msg=audit(1447024801.388:691264): pid=3966 uid=0 auid=0 ses=22411 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447024801.388:691265): pid=3967 uid=0 auid=0 ses=22410 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447024801.389:691266): pid=3966 uid=0 auid=0 ses=22411 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447024801.389:691267): pid=3967 uid=0 auid=0 ses=22410 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447024801.399:691268): pid=3967 uid=0 auid=0 ses=22410 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447024801.401:691269): pid=3967 uid=0 auid=0 ses=22410 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447024801.405:691270): pid=3966 uid=0 auid=0 ses=22411 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447024801.408:691271): pid=3966 uid=0 auid=0 ses=22411 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447025401.422:691272): pid=5812 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447025401.422:691273): pid=5813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447025401.422:691274): pid=5812 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447025401.422:691275): pid=5813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447025401.422:691276): pid=5812 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22412 res=1
type=LOGIN msg=audit(1447025401.422:691277): pid=5813 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22413 res=1
type=USER_START msg=audit(1447025401.437:691278): pid=5812 uid=0 auid=0 ses=22412 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447025401.438:691279): pid=5812 uid=0 auid=0 ses=22412 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447025401.438:691280): pid=5813 uid=0 auid=0 ses=22413 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447025401.438:691281): pid=5813 uid=0 auid=0 ses=22413 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447025401.448:691282): pid=5813 uid=0 auid=0 ses=22413 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447025401.449:691283): pid=5813 uid=0 auid=0 ses=22413 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447025401.451:691284): pid=5812 uid=0 auid=0 ses=22412 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447025401.454:691285): pid=5812 uid=0 auid=0 ses=22412 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1447025552.759:691286): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=CRYPTO_KEY_USER msg=audit(1447025583.057:691287): pid=6375 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=6375 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447025583.057:691288): pid=6375 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=6375 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447025583.058:691289): pid=6375 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=6375 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447025583.102:691290): pid=6374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=6375 suid=74 rport=51531 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447025583.102:691291): pid=6374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=6375 suid=74 rport=51531 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447025583.232:691292): pid=6374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=51531 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447025583.232:691293): pid=6374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=51531 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447025583.238:691294): pid=6374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447025583.241:691295): pid=6374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6375 suid=74 rport=51531 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447025583.241:691296): pid=6374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447025583.242:691297): pid=6374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447025583.242:691298): pid=6374 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22414 res=1
type=USER_ROLE_CHANGE msg=audit(1447025583.312:691299): pid=6374 uid=0 auid=0 ses=22414 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447025583.331:691300): pid=6374 uid=0 auid=0 ses=22414 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447025583.333:691301): pid=6374 uid=0 auid=0 ses=22414 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447025583.333:691302): pid=6374 uid=0 auid=0 ses=22414 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447025583.335:691303): pid=6377 uid=0 auid=0 ses=22414 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=6377 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447025583.335:691304): pid=6377 uid=0 auid=0 ses=22414 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=6377 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447025583.335:691305): pid=6377 uid=0 auid=0 ses=22414 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=6377 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447025583.337:691306): pid=6377 uid=0 auid=0 ses=22414 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447025583.357:691307): pid=6374 uid=0 auid=0 ses=22414 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447025583.357:691308): pid=6374 uid=0 auid=0 ses=22414 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447025583.360:691309): pid=6374 uid=0 auid=0 ses=22414 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447025583.360:691310): pid=6374 uid=0 auid=0 ses=22414 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447025583.361:691311): pid=6374 uid=0 auid=0 ses=22414 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6374 suid=0 rport=51531 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447025583.361:691312): pid=6374 uid=0 auid=0 ses=22414 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=6374 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447025583.361:691313): pid=6374 uid=0 auid=0 ses=22414 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=6374 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447025583.361:691314): pid=6374 uid=0 auid=0 ses=22414 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=6374 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447025583.384:691315): pid=6385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=6385 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447025583.384:691316): pid=6385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=6385 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447025583.384:691317): pid=6385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=6385 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447025583.430:691318): pid=6384 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=6385 suid=74 rport=51533 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447025583.430:691319): pid=6384 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=6385 suid=74 rport=51533 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447025583.556:691320): pid=6384 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=51533 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447025583.556:691321): pid=6384 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=51533 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447025583.562:691322): pid=6384 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447025583.562:691323): pid=6384 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6385 suid=74 rport=51533 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447025583.564:691324): pid=6384 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447025583.564:691325): pid=6384 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447025583.564:691326): pid=6384 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22415 res=1
type=USER_ROLE_CHANGE msg=audit(1447025583.627:691327): pid=6384 uid=0 auid=0 ses=22415 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447025583.652:691328): pid=6384 uid=0 auid=0 ses=22415 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447025583.654:691329): pid=6384 uid=0 auid=0 ses=22415 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447025583.654:691330): pid=6384 uid=0 auid=0 ses=22415 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447025583.656:691331): pid=6387 uid=0 auid=0 ses=22415 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=6387 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447025583.656:691332): pid=6387 uid=0 auid=0 ses=22415 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=6387 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447025583.656:691333): pid=6387 uid=0 auid=0 ses=22415 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=6387 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447025583.656:691334): pid=6387 uid=0 auid=0 ses=22415 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447025584.933:691335): pid=6384 uid=0 auid=0 ses=22415 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447025584.933:691336): pid=6384 uid=0 auid=0 ses=22415 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447025584.938:691337): pid=6384 uid=0 auid=0 ses=22415 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447025584.938:691338): pid=6384 uid=0 auid=0 ses=22415 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447025584.939:691339): pid=6384 uid=0 auid=0 ses=22415 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6384 suid=0 rport=51533 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447025584.939:691340): pid=6384 uid=0 auid=0 ses=22415 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=6384 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447025584.939:691341): pid=6384 uid=0 auid=0 ses=22415 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=6384 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447025584.939:691342): pid=6384 uid=0 auid=0 ses=22415 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=6384 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447025584.970:691343): pid=6437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=6437 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447025584.971:691344): pid=6437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=6437 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447025584.971:691345): pid=6437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=6437 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447025585.016:691346): pid=6436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=6437 suid=74 rport=51535 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447025585.016:691347): pid=6436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=6437 suid=74 rport=51535 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447025585.142:691348): pid=6436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=51535 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447025585.142:691349): pid=6436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=51535 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447025585.147:691350): pid=6436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447025585.148:691351): pid=6436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6437 suid=74 rport=51535 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447025585.149:691352): pid=6436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447025585.149:691353): pid=6436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447025585.150:691354): pid=6436 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22416 res=1
type=USER_ROLE_CHANGE msg=audit(1447025585.214:691355): pid=6436 uid=0 auid=0 ses=22416 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447025585.235:691356): pid=6436 uid=0 auid=0 ses=22416 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447025585.238:691357): pid=6436 uid=0 auid=0 ses=22416 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447025585.238:691358): pid=6436 uid=0 auid=0 ses=22416 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447025585.239:691359): pid=6439 uid=0 auid=0 ses=22416 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=6439 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447025585.239:691360): pid=6439 uid=0 auid=0 ses=22416 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=6439 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447025585.239:691361): pid=6439 uid=0 auid=0 ses=22416 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=6439 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447025585.240:691362): pid=6439 uid=0 auid=0 ses=22416 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447025585.254:691363): pid=6436 uid=0 auid=0 ses=22416 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447025585.255:691364): pid=6436 uid=0 auid=0 ses=22416 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447025585.258:691365): pid=6436 uid=0 auid=0 ses=22416 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447025585.258:691366): pid=6436 uid=0 auid=0 ses=22416 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447025585.258:691367): pid=6436 uid=0 auid=0 ses=22416 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6436 suid=0 rport=51535 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447025585.258:691368): pid=6436 uid=0 auid=0 ses=22416 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=6436 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447025585.258:691369): pid=6436 uid=0 auid=0 ses=22416 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=6436 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447025585.258:691370): pid=6436 uid=0 auid=0 ses=22416 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=6436 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447026001.479:691371): pid=7729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447026001.479:691372): pid=7730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447026001.479:691373): pid=7730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447026001.479:691374): pid=7729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447026001.480:691375): pid=7730 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22417 res=1
type=LOGIN msg=audit(1447026001.480:691376): pid=7729 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22418 res=1
type=USER_START msg=audit(1447026001.499:691377): pid=7730 uid=0 auid=0 ses=22417 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447026001.499:691378): pid=7730 uid=0 auid=0 ses=22417 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447026001.500:691379): pid=7729 uid=0 auid=0 ses=22418 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447026001.500:691380): pid=7729 uid=0 auid=0 ses=22418 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447026001.510:691381): pid=7730 uid=0 auid=0 ses=22417 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447026001.514:691382): pid=7730 uid=0 auid=0 ses=22417 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447026001.515:691383): pid=7729 uid=0 auid=0 ses=22418 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447026001.519:691384): pid=7729 uid=0 auid=0 ses=22418 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447026601.538:691385): pid=9576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447026601.538:691386): pid=9576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447026601.538:691387): pid=9576 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22419 res=1
type=USER_ACCT msg=audit(1447026601.539:691388): pid=9575 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447026601.539:691389): pid=9575 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447026601.540:691390): pid=9575 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22420 res=1
type=USER_START msg=audit(1447026601.554:691391): pid=9576 uid=0 auid=0 ses=22419 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447026601.554:691392): pid=9576 uid=0 auid=0 ses=22419 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447026601.556:691393): pid=9575 uid=0 auid=0 ses=22420 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447026601.557:691394): pid=9575 uid=0 auid=0 ses=22420 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447026601.563:691395): pid=9576 uid=0 auid=0 ses=22419 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447026601.564:691396): pid=9576 uid=0 auid=0 ses=22419 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447026601.570:691397): pid=9575 uid=0 auid=0 ses=22420 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447026601.571:691398): pid=9575 uid=0 auid=0 ses=22420 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1447026621.746:691399): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447026781.578:691400): pid=10135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447026781.578:691401): pid=10135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447026781.578:691402): pid=10135 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22421 res=1
type=USER_START msg=audit(1447026781.588:691403): pid=10135 uid=0 auid=0 ses=22421 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447026781.588:691404): pid=10135 uid=0 auid=0 ses=22421 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447026781.660:691405): pid=10135 uid=0 auid=0 ses=22421 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447026781.662:691406): pid=10135 uid=0 auid=0 ses=22421 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447026783.040:691407): pid=10150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=10150 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447026783.040:691408): pid=10150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=10150 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447026783.040:691409): pid=10150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=10150 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447026783.085:691410): pid=10149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=10150 suid=74 rport=53512 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447026783.085:691411): pid=10149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=10150 suid=74 rport=53512 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447026783.215:691412): pid=10149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=53512 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447026783.215:691413): pid=10149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=53512 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447026783.224:691414): pid=10149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447026783.225:691415): pid=10149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10150 suid=74 rport=53512 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447026783.228:691416): pid=10149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447026783.228:691417): pid=10149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447026783.228:691418): pid=10149 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22422 res=1
type=USER_ROLE_CHANGE msg=audit(1447026783.296:691419): pid=10149 uid=0 auid=0 ses=22422 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447026783.322:691420): pid=10149 uid=0 auid=0 ses=22422 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447026783.324:691421): pid=10149 uid=0 auid=0 ses=22422 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447026783.324:691422): pid=10149 uid=0 auid=0 ses=22422 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447026783.326:691423): pid=10152 uid=0 auid=0 ses=22422 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=10152 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447026783.326:691424): pid=10152 uid=0 auid=0 ses=22422 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=10152 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447026783.326:691425): pid=10152 uid=0 auid=0 ses=22422 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=10152 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447026783.328:691426): pid=10152 uid=0 auid=0 ses=22422 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447026783.348:691427): pid=10149 uid=0 auid=0 ses=22422 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447026783.348:691428): pid=10149 uid=0 auid=0 ses=22422 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447026783.353:691429): pid=10149 uid=0 auid=0 ses=22422 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447026783.353:691430): pid=10149 uid=0 auid=0 ses=22422 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447026783.353:691431): pid=10149 uid=0 auid=0 ses=22422 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10149 suid=0 rport=53512 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447026783.354:691432): pid=10149 uid=0 auid=0 ses=22422 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=10149 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447026783.354:691433): pid=10149 uid=0 auid=0 ses=22422 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=10149 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447026783.354:691434): pid=10149 uid=0 auid=0 ses=22422 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=10149 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447026783.374:691435): pid=10160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=10160 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447026783.374:691436): pid=10160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=10160 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447026783.374:691437): pid=10160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=10160 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447026783.419:691438): pid=10159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=10160 suid=74 rport=53513 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447026783.419:691439): pid=10159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=10160 suid=74 rport=53513 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447026783.547:691440): pid=10159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=53513 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447026783.548:691441): pid=10159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=53513 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447026783.555:691442): pid=10159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447026783.555:691443): pid=10159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10160 suid=74 rport=53513 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447026783.558:691444): pid=10159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447026783.558:691445): pid=10159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447026783.559:691446): pid=10159 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22423 res=1
type=USER_ROLE_CHANGE msg=audit(1447026783.622:691447): pid=10159 uid=0 auid=0 ses=22423 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447026783.641:691448): pid=10159 uid=0 auid=0 ses=22423 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447026783.644:691449): pid=10159 uid=0 auid=0 ses=22423 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447026783.644:691450): pid=10159 uid=0 auid=0 ses=22423 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447026783.645:691451): pid=10162 uid=0 auid=0 ses=22423 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=10162 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447026783.645:691452): pid=10162 uid=0 auid=0 ses=22423 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=10162 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447026783.645:691453): pid=10162 uid=0 auid=0 ses=22423 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=10162 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447026783.646:691454): pid=10162 uid=0 auid=0 ses=22423 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447026784.927:691455): pid=10159 uid=0 auid=0 ses=22423 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447026784.927:691456): pid=10159 uid=0 auid=0 ses=22423 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447026784.931:691457): pid=10159 uid=0 auid=0 ses=22423 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447026784.931:691458): pid=10159 uid=0 auid=0 ses=22423 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447026784.931:691459): pid=10159 uid=0 auid=0 ses=22423 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10159 suid=0 rport=53513 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447026784.932:691460): pid=10159 uid=0 auid=0 ses=22423 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=10159 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447026784.932:691461): pid=10159 uid=0 auid=0 ses=22423 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=10159 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447026784.932:691462): pid=10159 uid=0 auid=0 ses=22423 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=10159 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447026784.970:691463): pid=10212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=10212 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447026784.970:691464): pid=10212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=10212 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447026784.971:691465): pid=10212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=10212 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447026785.014:691466): pid=10211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=10212 suid=74 rport=53515 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447026785.015:691467): pid=10211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=10212 suid=74 rport=53515 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447026785.144:691468): pid=10211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=53515 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447026785.144:691469): pid=10211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=53515 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447026785.153:691470): pid=10211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447026785.154:691471): pid=10211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10212 suid=74 rport=53515 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447026785.157:691472): pid=10211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447026785.158:691473): pid=10211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447026785.158:691474): pid=10211 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22424 res=1
type=USER_ROLE_CHANGE msg=audit(1447026785.226:691475): pid=10211 uid=0 auid=0 ses=22424 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447026785.251:691476): pid=10211 uid=0 auid=0 ses=22424 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447026785.255:691477): pid=10211 uid=0 auid=0 ses=22424 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447026785.255:691478): pid=10211 uid=0 auid=0 ses=22424 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447026785.256:691479): pid=10214 uid=0 auid=0 ses=22424 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=10214 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447026785.257:691480): pid=10214 uid=0 auid=0 ses=22424 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=10214 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447026785.257:691481): pid=10214 uid=0 auid=0 ses=22424 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=10214 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447026785.257:691482): pid=10214 uid=0 auid=0 ses=22424 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447026785.273:691483): pid=10211 uid=0 auid=0 ses=22424 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447026785.273:691484): pid=10211 uid=0 auid=0 ses=22424 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447026785.276:691485): pid=10211 uid=0 auid=0 ses=22424 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447026785.276:691486): pid=10211 uid=0 auid=0 ses=22424 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447026785.277:691487): pid=10211 uid=0 auid=0 ses=22424 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10211 suid=0 rport=53515 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447026785.277:691488): pid=10211 uid=0 auid=0 ses=22424 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=10211 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447026785.277:691489): pid=10211 uid=0 auid=0 ses=22424 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=10211 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447026785.277:691490): pid=10211 uid=0 auid=0 ses=22424 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=10211 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447027201.680:691492): pid=11514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447027201.680:691491): pid=11515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447027201.680:691493): pid=11514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447027201.680:691494): pid=11515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447027201.681:691495): pid=11515 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22425 res=1
type=LOGIN msg=audit(1447027201.681:691496): pid=11514 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22426 res=1
type=USER_START msg=audit(1447027201.698:691497): pid=11514 uid=0 auid=0 ses=22426 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447027201.699:691498): pid=11514 uid=0 auid=0 ses=22426 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447027201.701:691499): pid=11515 uid=0 auid=0 ses=22425 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447027201.701:691500): pid=11515 uid=0 auid=0 ses=22425 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447027201.711:691501): pid=11515 uid=0 auid=0 ses=22425 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447027201.713:691502): pid=11515 uid=0 auid=0 ses=22425 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447027201.717:691503): pid=11514 uid=0 auid=0 ses=22426 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447027226.742:691504): pid=11514 uid=0 auid=0 ses=22426 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=USER_ACCT msg=audit(1447027261.751:691505): pid=11717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447027261.751:691506): pid=11717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447027261.752:691507): pid=11717 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22427 res=1
type=USER_START msg=audit(1447027261.763:691508): pid=11717 uid=0 auid=0 ses=22427 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447027261.763:691509): pid=11717 uid=0 auid=0 ses=22427 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447027261.795:691510): pid=11717 uid=0 auid=0 ses=22427 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447027261.796:691511): pid=11717 uid=0 auid=0 ses=22427 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447027801.817:691512): pid=13422 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447027801.817:691513): pid=13422 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447027801.818:691514): pid=13422 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22428 res=1
type=USER_ACCT msg=audit(1447027801.818:691515): pid=13421 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447027801.818:691516): pid=13421 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447027801.818:691517): pid=13421 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22429 res=1
type=USER_START msg=audit(1447027801.832:691518): pid=13422 uid=0 auid=0 ses=22428 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447027801.833:691519): pid=13422 uid=0 auid=0 ses=22428 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447027801.833:691520): pid=13421 uid=0 auid=0 ses=22429 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447027801.834:691521): pid=13421 uid=0 auid=0 ses=22429 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447027801.839:691522): pid=13422 uid=0 auid=0 ses=22428 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447027801.841:691523): pid=13422 uid=0 auid=0 ses=22428 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447027801.847:691524): pid=13421 uid=0 auid=0 ses=22429 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447027801.849:691525): pid=13421 uid=0 auid=0 ses=22429 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447027982.384:691526): pid=13982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=13982 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447027982.385:691527): pid=13982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=13982 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447027982.385:691528): pid=13982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=13982 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447027982.429:691529): pid=13981 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=13982 suid=74 rport=55492 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447027982.429:691530): pid=13981 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=13982 suid=74 rport=55492 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447027982.554:691531): pid=13981 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=55492 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447027982.554:691532): pid=13981 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=55492 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447027982.560:691533): pid=13981 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447027982.562:691534): pid=13981 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13982 suid=74 rport=55492 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447027982.563:691535): pid=13981 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447027982.564:691536): pid=13981 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447027982.564:691537): pid=13981 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22430 res=1
type=USER_ROLE_CHANGE msg=audit(1447027982.632:691538): pid=13981 uid=0 auid=0 ses=22430 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447027982.653:691539): pid=13981 uid=0 auid=0 ses=22430 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447027982.655:691540): pid=13981 uid=0 auid=0 ses=22430 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447027982.655:691541): pid=13981 uid=0 auid=0 ses=22430 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447027982.656:691542): pid=13984 uid=0 auid=0 ses=22430 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=13984 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447027982.657:691543): pid=13984 uid=0 auid=0 ses=22430 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=13984 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447027982.657:691544): pid=13984 uid=0 auid=0 ses=22430 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=13984 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447027982.657:691545): pid=13984 uid=0 auid=0 ses=22430 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447027982.676:691546): pid=13981 uid=0 auid=0 ses=22430 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447027982.677:691547): pid=13981 uid=0 auid=0 ses=22430 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447027982.681:691548): pid=13981 uid=0 auid=0 ses=22430 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447027982.681:691549): pid=13981 uid=0 auid=0 ses=22430 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447027982.681:691550): pid=13981 uid=0 auid=0 ses=22430 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13981 suid=0 rport=55492 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447027982.681:691551): pid=13981 uid=0 auid=0 ses=22430 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=13981 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447027982.681:691552): pid=13981 uid=0 auid=0 ses=22430 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=13981 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447027982.681:691553): pid=13981 uid=0 auid=0 ses=22430 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=13981 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447027982.703:691554): pid=13992 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=13992 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447027982.703:691555): pid=13992 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=13992 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447027982.703:691556): pid=13992 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=13992 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447027982.747:691557): pid=13991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=13992 suid=74 rport=55494 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447027982.747:691558): pid=13991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=13992 suid=74 rport=55494 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447027982.876:691559): pid=13991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=55494 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447027982.876:691560): pid=13991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=55494 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447027982.885:691561): pid=13991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447027982.886:691562): pid=13991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13992 suid=74 rport=55494 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447027982.888:691563): pid=13991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447027982.888:691564): pid=13991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447027982.888:691565): pid=13991 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22431 res=1
type=USER_ROLE_CHANGE msg=audit(1447027982.958:691566): pid=13991 uid=0 auid=0 ses=22431 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447027982.980:691567): pid=13991 uid=0 auid=0 ses=22431 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447027982.983:691568): pid=13991 uid=0 auid=0 ses=22431 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447027982.983:691569): pid=13991 uid=0 auid=0 ses=22431 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447027982.985:691570): pid=13994 uid=0 auid=0 ses=22431 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=13994 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447027982.985:691571): pid=13994 uid=0 auid=0 ses=22431 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=13994 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447027982.985:691572): pid=13994 uid=0 auid=0 ses=22431 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=13994 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447027982.986:691573): pid=13994 uid=0 auid=0 ses=22431 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447027984.265:691574): pid=13991 uid=0 auid=0 ses=22431 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447027984.265:691575): pid=13991 uid=0 auid=0 ses=22431 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447027984.271:691576): pid=13991 uid=0 auid=0 ses=22431 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447027984.271:691577): pid=13991 uid=0 auid=0 ses=22431 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447027984.272:691578): pid=13991 uid=0 auid=0 ses=22431 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13991 suid=0 rport=55494 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447027984.272:691579): pid=13991 uid=0 auid=0 ses=22431 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=13991 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447027984.272:691580): pid=13991 uid=0 auid=0 ses=22431 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=13991 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447027984.272:691581): pid=13991 uid=0 auid=0 ses=22431 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=13991 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447027984.299:691582): pid=14044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=14044 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447027984.299:691583): pid=14044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=14044 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447027984.299:691584): pid=14044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=14044 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447027984.343:691585): pid=14043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=14044 suid=74 rport=55495 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447027984.344:691586): pid=14043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=14044 suid=74 rport=55495 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447027984.468:691587): pid=14043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=55495 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447027984.468:691588): pid=14043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=55495 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447027984.472:691589): pid=14043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447027984.473:691590): pid=14043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14044 suid=74 rport=55495 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447027984.475:691591): pid=14043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447027984.475:691592): pid=14043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447027984.475:691593): pid=14043 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22432 res=1
type=USER_ROLE_CHANGE msg=audit(1447027984.539:691594): pid=14043 uid=0 auid=0 ses=22432 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447027984.561:691595): pid=14043 uid=0 auid=0 ses=22432 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447027984.563:691596): pid=14043 uid=0 auid=0 ses=22432 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447027984.563:691597): pid=14043 uid=0 auid=0 ses=22432 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447027984.564:691598): pid=14046 uid=0 auid=0 ses=22432 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=14046 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447027984.564:691599): pid=14046 uid=0 auid=0 ses=22432 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=14046 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447027984.564:691600): pid=14046 uid=0 auid=0 ses=22432 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=14046 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447027984.565:691601): pid=14046 uid=0 auid=0 ses=22432 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447027984.580:691602): pid=14043 uid=0 auid=0 ses=22432 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447027984.580:691603): pid=14043 uid=0 auid=0 ses=22432 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447027984.584:691604): pid=14043 uid=0 auid=0 ses=22432 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447027984.584:691605): pid=14043 uid=0 auid=0 ses=22432 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447027984.584:691606): pid=14043 uid=0 auid=0 ses=22432 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14043 suid=0 rport=55495 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447027984.584:691607): pid=14043 uid=0 auid=0 ses=22432 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=14043 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447027984.585:691608): pid=14043 uid=0 auid=0 ses=22432 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=14043 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447027984.585:691609): pid=14043 uid=0 auid=0 ses=22432 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=14043 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447028401.874:691610): pid=15464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447028401.874:691611): pid=15463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447028401.874:691612): pid=15464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447028401.874:691613): pid=15463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447028401.875:691614): pid=15464 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22433 res=1
type=LOGIN msg=audit(1447028401.875:691615): pid=15463 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22434 res=1
type=USER_START msg=audit(1447028401.892:691616): pid=15463 uid=0 auid=0 ses=22434 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447028401.893:691617): pid=15464 uid=0 auid=0 ses=22433 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447028401.893:691618): pid=15463 uid=0 auid=0 ses=22434 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447028401.893:691619): pid=15464 uid=0 auid=0 ses=22433 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447028401.903:691620): pid=15464 uid=0 auid=0 ses=22433 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447028401.907:691621): pid=15464 uid=0 auid=0 ses=22433 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447028401.909:691622): pid=15463 uid=0 auid=0 ses=22434 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447028401.916:691623): pid=15463 uid=0 auid=0 ses=22434 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1447028755.753:691624): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447029001.935:691625): pid=17308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447029001.935:691626): pid=17309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447029001.935:691627): pid=17309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447029001.935:691628): pid=17308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447029001.936:691629): pid=17309 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22435 res=1
type=LOGIN msg=audit(1447029001.936:691630): pid=17308 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22436 res=1
type=USER_START msg=audit(1447029001.952:691631): pid=17308 uid=0 auid=0 ses=22436 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447029001.952:691632): pid=17309 uid=0 auid=0 ses=22435 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447029001.953:691633): pid=17308 uid=0 auid=0 ses=22436 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447029001.953:691634): pid=17309 uid=0 auid=0 ses=22435 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447029001.960:691635): pid=17309 uid=0 auid=0 ses=22435 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447029001.962:691636): pid=17309 uid=0 auid=0 ses=22435 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447029001.967:691637): pid=17308 uid=0 auid=0 ses=22436 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447029026.993:691638): pid=17308 uid=0 auid=0 ses=22436 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=CRYPTO_KEY_USER msg=audit(1447029182.503:691639): pid=17871 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=17871 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447029182.503:691640): pid=17871 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=17871 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447029182.503:691641): pid=17871 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=17871 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447029182.547:691642): pid=17870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=17871 suid=74 rport=57473 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447029182.547:691643): pid=17870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=17871 suid=74 rport=57473 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447029182.676:691644): pid=17870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=57473 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447029182.676:691645): pid=17870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=57473 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447029182.685:691646): pid=17870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447029182.686:691647): pid=17870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=17871 suid=74 rport=57473 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447029182.689:691648): pid=17870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447029182.690:691649): pid=17870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447029182.690:691650): pid=17870 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22437 res=1
type=USER_ROLE_CHANGE msg=audit(1447029182.760:691651): pid=17870 uid=0 auid=0 ses=22437 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447029182.781:691652): pid=17870 uid=0 auid=0 ses=22437 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447029182.784:691653): pid=17870 uid=0 auid=0 ses=22437 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447029182.784:691654): pid=17870 uid=0 auid=0 ses=22437 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447029182.785:691655): pid=17873 uid=0 auid=0 ses=22437 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=17873 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447029182.785:691656): pid=17873 uid=0 auid=0 ses=22437 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=17873 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447029182.785:691657): pid=17873 uid=0 auid=0 ses=22437 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=17873 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447029182.786:691658): pid=17873 uid=0 auid=0 ses=22437 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447029182.805:691659): pid=17870 uid=0 auid=0 ses=22437 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447029182.805:691660): pid=17870 uid=0 auid=0 ses=22437 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447029182.808:691661): pid=17870 uid=0 auid=0 ses=22437 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447029182.808:691662): pid=17870 uid=0 auid=0 ses=22437 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447029182.809:691663): pid=17870 uid=0 auid=0 ses=22437 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=17870 suid=0 rport=57473 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447029182.809:691664): pid=17870 uid=0 auid=0 ses=22437 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=17870 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447029182.809:691665): pid=17870 uid=0 auid=0 ses=22437 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=17870 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447029182.809:691666): pid=17870 uid=0 auid=0 ses=22437 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=17870 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447029182.831:691667): pid=17881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=17881 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447029182.831:691668): pid=17881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=17881 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447029182.831:691669): pid=17881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=17881 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447029182.876:691670): pid=17880 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=17881 suid=74 rport=57474 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447029182.876:691671): pid=17880 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=17881 suid=74 rport=57474 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447029183.005:691672): pid=17880 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=57474 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447029183.005:691673): pid=17880 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=57474 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447029183.015:691674): pid=17880 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447029183.016:691675): pid=17880 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=17881 suid=74 rport=57474 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447029183.017:691676): pid=17880 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447029183.018:691677): pid=17880 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447029183.018:691678): pid=17880 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22438 res=1
type=USER_ROLE_CHANGE msg=audit(1447029183.090:691679): pid=17880 uid=0 auid=0 ses=22438 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447029183.117:691680): pid=17880 uid=0 auid=0 ses=22438 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447029183.120:691681): pid=17880 uid=0 auid=0 ses=22438 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447029183.120:691682): pid=17880 uid=0 auid=0 ses=22438 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447029183.122:691683): pid=17883 uid=0 auid=0 ses=22438 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=17883 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447029183.122:691684): pid=17883 uid=0 auid=0 ses=22438 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=17883 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447029183.122:691685): pid=17883 uid=0 auid=0 ses=22438 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=17883 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447029183.124:691686): pid=17883 uid=0 auid=0 ses=22438 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447029184.398:691687): pid=17880 uid=0 auid=0 ses=22438 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447029184.398:691688): pid=17880 uid=0 auid=0 ses=22438 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447029184.402:691689): pid=17880 uid=0 auid=0 ses=22438 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447029184.402:691690): pid=17880 uid=0 auid=0 ses=22438 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447029184.403:691691): pid=17880 uid=0 auid=0 ses=22438 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=17880 suid=0 rport=57474 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447029184.403:691692): pid=17880 uid=0 auid=0 ses=22438 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=17880 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447029184.403:691693): pid=17880 uid=0 auid=0 ses=22438 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=17880 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447029184.403:691694): pid=17880 uid=0 auid=0 ses=22438 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=17880 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447029184.433:691695): pid=17933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=17933 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447029184.433:691696): pid=17933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=17933 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447029184.433:691697): pid=17933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=17933 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447029184.478:691698): pid=17932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=17933 suid=74 rport=57476 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447029184.479:691699): pid=17932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=17933 suid=74 rport=57476 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447029184.608:691700): pid=17932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=57476 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447029184.608:691701): pid=17932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=57476 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447029184.618:691702): pid=17932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447029184.619:691703): pid=17932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=17933 suid=74 rport=57476 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447029184.621:691704): pid=17932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447029184.621:691705): pid=17932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447029184.621:691706): pid=17932 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22439 res=1
type=USER_ROLE_CHANGE msg=audit(1447029184.684:691707): pid=17932 uid=0 auid=0 ses=22439 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447029184.706:691708): pid=17932 uid=0 auid=0 ses=22439 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447029184.708:691709): pid=17932 uid=0 auid=0 ses=22439 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447029184.708:691710): pid=17932 uid=0 auid=0 ses=22439 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447029184.710:691711): pid=17935 uid=0 auid=0 ses=22439 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=17935 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447029184.710:691712): pid=17935 uid=0 auid=0 ses=22439 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=17935 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447029184.710:691713): pid=17935 uid=0 auid=0 ses=22439 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=17935 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447029184.711:691714): pid=17935 uid=0 auid=0 ses=22439 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447029184.728:691715): pid=17932 uid=0 auid=0 ses=22439 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447029184.728:691716): pid=17932 uid=0 auid=0 ses=22439 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447029184.731:691717): pid=17932 uid=0 auid=0 ses=22439 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447029184.732:691718): pid=17932 uid=0 auid=0 ses=22439 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447029184.732:691719): pid=17932 uid=0 auid=0 ses=22439 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=17932 suid=0 rport=57476 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447029184.732:691720): pid=17932 uid=0 auid=0 ses=22439 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=17932 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447029184.732:691721): pid=17932 uid=0 auid=0 ses=22439 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=17932 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447029184.732:691722): pid=17932 uid=0 auid=0 ses=22439 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=17932 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447029601.017:691723): pid=19225 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447029601.017:691724): pid=19224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447029601.017:691725): pid=19225 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447029601.017:691726): pid=19224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447029601.018:691727): pid=19225 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22440 res=1
type=LOGIN msg=audit(1447029601.018:691728): pid=19224 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22441 res=1
type=USER_START msg=audit(1447029601.040:691729): pid=19224 uid=0 auid=0 ses=22441 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447029601.040:691730): pid=19225 uid=0 auid=0 ses=22440 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447029601.040:691731): pid=19225 uid=0 auid=0 ses=22440 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447029601.040:691732): pid=19224 uid=0 auid=0 ses=22441 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447029601.050:691733): pid=19225 uid=0 auid=0 ses=22440 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447029601.051:691734): pid=19225 uid=0 auid=0 ses=22440 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447029601.056:691735): pid=19224 uid=0 auid=0 ses=22441 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447029601.058:691736): pid=19224 uid=0 auid=0 ses=22441 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447030201.071:691737): pid=21071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447030201.071:691738): pid=21071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447030201.071:691739): pid=21071 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22442 res=1
type=USER_ACCT msg=audit(1447030201.073:691740): pid=21070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447030201.073:691741): pid=21070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447030201.073:691742): pid=21070 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22443 res=1
type=USER_START msg=audit(1447030201.092:691743): pid=21071 uid=0 auid=0 ses=22442 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447030201.092:691744): pid=21071 uid=0 auid=0 ses=22442 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447030201.093:691745): pid=21070 uid=0 auid=0 ses=22443 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447030201.093:691746): pid=21070 uid=0 auid=0 ses=22443 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447030201.098:691747): pid=21071 uid=0 auid=0 ses=22442 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447030201.100:691748): pid=21071 uid=0 auid=0 ses=22442 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447030201.108:691749): pid=21070 uid=0 auid=0 ses=22443 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447030201.109:691750): pid=21070 uid=0 auid=0 ses=22443 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447030383.146:691751): pid=21631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=21631 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447030383.146:691752): pid=21631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=21631 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447030383.146:691753): pid=21631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=21631 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447030383.191:691754): pid=21630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=21631 suid=74 rport=59454 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447030383.191:691755): pid=21630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=21631 suid=74 rport=59454 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447030383.316:691756): pid=21630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59454 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447030383.316:691757): pid=21630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=59454 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447030383.324:691758): pid=21630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447030383.325:691759): pid=21630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21631 suid=74 rport=59454 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447030383.327:691760): pid=21630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447030383.327:691761): pid=21630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447030383.327:691762): pid=21630 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22444 res=1
type=USER_ROLE_CHANGE msg=audit(1447030383.395:691763): pid=21630 uid=0 auid=0 ses=22444 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447030383.414:691764): pid=21630 uid=0 auid=0 ses=22444 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447030383.417:691765): pid=21630 uid=0 auid=0 ses=22444 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447030383.417:691766): pid=21630 uid=0 auid=0 ses=22444 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447030383.418:691767): pid=21633 uid=0 auid=0 ses=22444 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=21633 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447030383.418:691768): pid=21633 uid=0 auid=0 ses=22444 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=21633 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447030383.418:691769): pid=21633 uid=0 auid=0 ses=22444 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=21633 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447030383.419:691770): pid=21633 uid=0 auid=0 ses=22444 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447030383.439:691771): pid=21630 uid=0 auid=0 ses=22444 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447030383.439:691772): pid=21630 uid=0 auid=0 ses=22444 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447030383.443:691773): pid=21630 uid=0 auid=0 ses=22444 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447030383.444:691774): pid=21630 uid=0 auid=0 ses=22444 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447030383.444:691775): pid=21630 uid=0 auid=0 ses=22444 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21630 suid=0 rport=59454 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447030383.444:691776): pid=21630 uid=0 auid=0 ses=22444 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=21630 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447030383.444:691777): pid=21630 uid=0 auid=0 ses=22444 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=21630 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447030383.444:691778): pid=21630 uid=0 auid=0 ses=22444 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=21630 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447030383.464:691779): pid=21641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=21641 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447030383.464:691780): pid=21641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=21641 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447030383.464:691781): pid=21641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=21641 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447030383.509:691782): pid=21640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=21641 suid=74 rport=59455 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447030383.510:691783): pid=21640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=21641 suid=74 rport=59455 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447030383.638:691784): pid=21640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59455 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447030383.638:691785): pid=21640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=59455 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447030383.644:691786): pid=21640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447030383.645:691787): pid=21640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21641 suid=74 rport=59455 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447030383.648:691788): pid=21640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447030383.648:691789): pid=21640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447030383.648:691790): pid=21640 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22445 res=1
type=USER_ROLE_CHANGE msg=audit(1447030383.713:691791): pid=21640 uid=0 auid=0 ses=22445 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447030383.737:691792): pid=21640 uid=0 auid=0 ses=22445 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447030383.740:691793): pid=21640 uid=0 auid=0 ses=22445 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447030383.740:691794): pid=21640 uid=0 auid=0 ses=22445 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447030383.741:691795): pid=21643 uid=0 auid=0 ses=22445 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=21643 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447030383.741:691796): pid=21643 uid=0 auid=0 ses=22445 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=21643 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447030383.741:691797): pid=21643 uid=0 auid=0 ses=22445 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=21643 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447030383.742:691798): pid=21643 uid=0 auid=0 ses=22445 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447030384.997:691799): pid=21640 uid=0 auid=0 ses=22445 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447030384.997:691800): pid=21640 uid=0 auid=0 ses=22445 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447030385.003:691801): pid=21640 uid=0 auid=0 ses=22445 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447030385.004:691802): pid=21640 uid=0 auid=0 ses=22445 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447030385.004:691803): pid=21640 uid=0 auid=0 ses=22445 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21640 suid=0 rport=59455 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447030385.004:691804): pid=21640 uid=0 auid=0 ses=22445 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=21640 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447030385.004:691805): pid=21640 uid=0 auid=0 ses=22445 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=21640 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447030385.004:691806): pid=21640 uid=0 auid=0 ses=22445 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=21640 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447030385.036:691807): pid=21693 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=21693 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447030385.036:691808): pid=21693 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=21693 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447030385.036:691809): pid=21693 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=21693 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447030385.081:691810): pid=21692 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=21693 suid=74 rport=59457 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447030385.081:691811): pid=21692 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=21693 suid=74 rport=59457 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447030385.208:691812): pid=21692 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59457 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447030385.208:691813): pid=21692 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=59457 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447030385.218:691814): pid=21692 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447030385.219:691815): pid=21692 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21693 suid=74 rport=59457 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447030385.220:691816): pid=21692 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447030385.221:691817): pid=21692 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447030385.221:691818): pid=21692 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22446 res=1
type=USER_ROLE_CHANGE msg=audit(1447030385.291:691819): pid=21692 uid=0 auid=0 ses=22446 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447030385.312:691820): pid=21692 uid=0 auid=0 ses=22446 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447030385.314:691821): pid=21692 uid=0 auid=0 ses=22446 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447030385.314:691822): pid=21692 uid=0 auid=0 ses=22446 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447030385.316:691823): pid=21695 uid=0 auid=0 ses=22446 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=21695 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447030385.316:691824): pid=21695 uid=0 auid=0 ses=22446 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=21695 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447030385.316:691825): pid=21695 uid=0 auid=0 ses=22446 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=21695 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447030385.317:691826): pid=21695 uid=0 auid=0 ses=22446 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447030385.334:691827): pid=21692 uid=0 auid=0 ses=22446 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447030385.334:691828): pid=21692 uid=0 auid=0 ses=22446 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447030385.340:691829): pid=21692 uid=0 auid=0 ses=22446 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447030385.340:691830): pid=21692 uid=0 auid=0 ses=22446 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447030385.340:691831): pid=21692 uid=0 auid=0 ses=22446 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21692 suid=0 rport=59457 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447030385.340:691832): pid=21692 uid=0 auid=0 ses=22446 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=21692 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447030385.340:691833): pid=21692 uid=0 auid=0 ses=22446 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=21692 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447030385.340:691834): pid=21692 uid=0 auid=0 ses=22446 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=21692 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447030801.132:691836): pid=22978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447030801.132:691835): pid=22977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447030801.132:691837): pid=22977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447030801.132:691838): pid=22978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447030801.133:691839): pid=22978 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22447 res=1
type=LOGIN msg=audit(1447030801.133:691840): pid=22977 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22448 res=1
type=USER_START msg=audit(1447030801.150:691841): pid=22978 uid=0 auid=0 ses=22447 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447030801.150:691842): pid=22978 uid=0 auid=0 ses=22447 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447030801.152:691843): pid=22977 uid=0 auid=0 ses=22448 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447030801.152:691844): pid=22977 uid=0 auid=0 ses=22448 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447030801.157:691845): pid=22978 uid=0 auid=0 ses=22447 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447030801.159:691846): pid=22978 uid=0 auid=0 ses=22447 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447030801.167:691847): pid=22977 uid=0 auid=0 ses=22448 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447030801.168:691848): pid=22977 uid=0 auid=0 ses=22448 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447030861.184:691849): pid=23169 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447030861.184:691850): pid=23169 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447030861.185:691851): pid=23169 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22449 res=1
type=USER_START msg=audit(1447030861.198:691852): pid=23169 uid=0 auid=0 ses=22449 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447030861.199:691853): pid=23169 uid=0 auid=0 ses=22449 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447030861.228:691854): pid=23169 uid=0 auid=0 ses=22449 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447030861.230:691855): pid=23169 uid=0 auid=0 ses=22449 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1447030900.758:691856): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447031401.244:691857): pid=24832 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447031401.244:691858): pid=24832 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447031401.245:691859): pid=24832 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22450 res=1
type=USER_ACCT msg=audit(1447031401.247:691860): pid=24831 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447031401.247:691861): pid=24831 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447031401.247:691862): pid=24831 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22451 res=1
type=USER_START msg=audit(1447031401.262:691863): pid=24831 uid=0 auid=0 ses=22451 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447031401.262:691864): pid=24832 uid=0 auid=0 ses=22450 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447031401.262:691865): pid=24831 uid=0 auid=0 ses=22451 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447031401.262:691866): pid=24832 uid=0 auid=0 ses=22450 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447031401.271:691867): pid=24832 uid=0 auid=0 ses=22450 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447031401.273:691868): pid=24832 uid=0 auid=0 ses=22450 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447031401.277:691869): pid=24831 uid=0 auid=0 ses=22451 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447031401.280:691870): pid=24831 uid=0 auid=0 ses=22451 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447031582.430:691871): pid=25392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=25392 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447031582.430:691872): pid=25392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=25392 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447031582.431:691873): pid=25392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=25392 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447031582.474:691874): pid=25391 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=25392 suid=74 rport=61434 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447031582.474:691875): pid=25391 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=25392 suid=74 rport=61434 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447031582.599:691876): pid=25391 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=61434 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447031582.599:691877): pid=25391 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=61434 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447031582.604:691878): pid=25391 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447031582.605:691879): pid=25391 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25392 suid=74 rport=61434 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447031582.606:691880): pid=25391 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447031582.607:691881): pid=25391 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447031582.607:691882): pid=25391 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22452 res=1
type=USER_ROLE_CHANGE msg=audit(1447031582.675:691883): pid=25391 uid=0 auid=0 ses=22452 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447031582.694:691884): pid=25391 uid=0 auid=0 ses=22452 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447031582.697:691885): pid=25391 uid=0 auid=0 ses=22452 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447031582.697:691886): pid=25391 uid=0 auid=0 ses=22452 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447031582.699:691887): pid=25394 uid=0 auid=0 ses=22452 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=25394 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447031582.699:691888): pid=25394 uid=0 auid=0 ses=22452 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=25394 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447031582.699:691889): pid=25394 uid=0 auid=0 ses=22452 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=25394 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447031582.700:691890): pid=25394 uid=0 auid=0 ses=22452 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447031582.720:691891): pid=25391 uid=0 auid=0 ses=22452 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447031582.720:691892): pid=25391 uid=0 auid=0 ses=22452 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447031582.724:691893): pid=25391 uid=0 auid=0 ses=22452 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447031582.724:691894): pid=25391 uid=0 auid=0 ses=22452 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447031582.725:691895): pid=25391 uid=0 auid=0 ses=22452 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25391 suid=0 rport=61434 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447031582.725:691896): pid=25391 uid=0 auid=0 ses=22452 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=25391 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447031582.725:691897): pid=25391 uid=0 auid=0 ses=22452 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=25391 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447031582.725:691898): pid=25391 uid=0 auid=0 ses=22452 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=25391 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447031582.746:691899): pid=25402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=25402 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447031582.747:691900): pid=25402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=25402 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447031582.747:691901): pid=25402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=25402 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447031582.790:691902): pid=25401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=25402 suid=74 rport=61435 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447031582.790:691903): pid=25401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=25402 suid=74 rport=61435 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447031582.918:691904): pid=25401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=61435 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447031582.918:691905): pid=25401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=61435 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447031582.926:691906): pid=25401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447031582.926:691907): pid=25401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25402 suid=74 rport=61435 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447031582.927:691908): pid=25401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447031582.927:691909): pid=25401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447031582.928:691910): pid=25401 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22453 res=1
type=USER_ROLE_CHANGE msg=audit(1447031582.992:691911): pid=25401 uid=0 auid=0 ses=22453 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447031583.010:691912): pid=25401 uid=0 auid=0 ses=22453 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447031583.013:691913): pid=25401 uid=0 auid=0 ses=22453 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447031583.013:691914): pid=25401 uid=0 auid=0 ses=22453 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447031583.014:691915): pid=25405 uid=0 auid=0 ses=22453 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=25405 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447031583.015:691916): pid=25405 uid=0 auid=0 ses=22453 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=25405 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447031583.015:691917): pid=25405 uid=0 auid=0 ses=22453 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=25405 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447031583.015:691918): pid=25405 uid=0 auid=0 ses=22453 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447031584.303:691919): pid=25401 uid=0 auid=0 ses=22453 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447031584.304:691920): pid=25401 uid=0 auid=0 ses=22453 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447031584.308:691921): pid=25401 uid=0 auid=0 ses=22453 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447031584.308:691922): pid=25401 uid=0 auid=0 ses=22453 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447031584.308:691923): pid=25401 uid=0 auid=0 ses=22453 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25401 suid=0 rport=61435 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447031584.308:691924): pid=25401 uid=0 auid=0 ses=22453 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=25401 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447031584.308:691925): pid=25401 uid=0 auid=0 ses=22453 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=25401 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447031584.309:691926): pid=25401 uid=0 auid=0 ses=22453 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=25401 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447031584.342:691927): pid=25506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=25506 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447031584.342:691928): pid=25506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=25506 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447031584.343:691929): pid=25506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=25506 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447031584.387:691930): pid=25505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=25506 suid=74 rport=61437 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447031584.387:691931): pid=25505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=25506 suid=74 rport=61437 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447031584.511:691932): pid=25505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=61437 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447031584.511:691933): pid=25505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=61437 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447031584.518:691934): pid=25505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447031584.519:691935): pid=25505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25506 suid=74 rport=61437 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447031584.520:691936): pid=25505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447031584.521:691937): pid=25505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447031584.521:691938): pid=25505 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22454 res=1
type=USER_ROLE_CHANGE msg=audit(1447031584.588:691939): pid=25505 uid=0 auid=0 ses=22454 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447031584.608:691940): pid=25505 uid=0 auid=0 ses=22454 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447031584.611:691941): pid=25505 uid=0 auid=0 ses=22454 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447031584.611:691942): pid=25505 uid=0 auid=0 ses=22454 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447031584.612:691943): pid=25508 uid=0 auid=0 ses=22454 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=25508 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447031584.612:691944): pid=25508 uid=0 auid=0 ses=22454 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=25508 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447031584.612:691945): pid=25508 uid=0 auid=0 ses=22454 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=25508 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447031584.613:691946): pid=25508 uid=0 auid=0 ses=22454 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447031584.630:691947): pid=25505 uid=0 auid=0 ses=22454 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447031584.630:691948): pid=25505 uid=0 auid=0 ses=22454 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447031584.633:691949): pid=25505 uid=0 auid=0 ses=22454 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447031584.633:691950): pid=25505 uid=0 auid=0 ses=22454 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447031584.634:691951): pid=25505 uid=0 auid=0 ses=22454 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25505 suid=0 rport=61437 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447031584.634:691952): pid=25505 uid=0 auid=0 ses=22454 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=25505 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447031584.634:691953): pid=25505 uid=0 auid=0 ses=22454 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=25505 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447031584.634:691954): pid=25505 uid=0 auid=0 ses=22454 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=25505 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=SYSCALL msg=audit(1447031948.683:691955): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447032001.303:691956): pid=26754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447032001.303:691957): pid=26753 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447032001.303:691959): pid=26753 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447032001.303:691958): pid=26754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447032001.304:691960): pid=26754 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22455 res=1
type=LOGIN msg=audit(1447032001.304:691961): pid=26753 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22456 res=1
type=USER_START msg=audit(1447032001.321:691962): pid=26753 uid=0 auid=0 ses=22456 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447032001.321:691963): pid=26754 uid=0 auid=0 ses=22455 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447032001.322:691964): pid=26753 uid=0 auid=0 ses=22456 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447032001.322:691965): pid=26754 uid=0 auid=0 ses=22455 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447032001.331:691966): pid=26754 uid=0 auid=0 ses=22455 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447032001.333:691967): pid=26754 uid=0 auid=0 ses=22455 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447032001.340:691968): pid=26753 uid=0 auid=0 ses=22456 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447032001.341:691969): pid=26753 uid=0 auid=0 ses=22456 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447032601.356:691970): pid=28598 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447032601.356:691971): pid=28599 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447032601.357:691972): pid=28598 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447032601.357:691973): pid=28599 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447032601.357:691974): pid=28599 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22457 res=1
type=LOGIN msg=audit(1447032601.357:691975): pid=28598 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22458 res=1
type=USER_START msg=audit(1447032601.375:691976): pid=28599 uid=0 auid=0 ses=22457 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447032601.375:691977): pid=28598 uid=0 auid=0 ses=22458 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447032601.376:691978): pid=28599 uid=0 auid=0 ses=22457 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447032601.376:691979): pid=28598 uid=0 auid=0 ses=22458 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447032601.382:691980): pid=28599 uid=0 auid=0 ses=22457 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447032601.384:691981): pid=28599 uid=0 auid=0 ses=22457 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447032601.389:691982): pid=28598 uid=0 auid=0 ses=22458 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447032601.390:691983): pid=28598 uid=0 auid=0 ses=22458 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447032783.333:691984): pid=29161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=29161 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447032783.333:691985): pid=29161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=29161 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447032783.333:691986): pid=29161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=29161 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447032783.378:691987): pid=29160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=29161 suid=74 rport=63415 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447032783.378:691988): pid=29160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=29161 suid=74 rport=63415 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447032783.507:691989): pid=29160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=63415 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447032783.507:691990): pid=29160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=63415 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447032783.515:691991): pid=29160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447032783.517:691992): pid=29160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29161 suid=74 rport=63415 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447032783.519:691993): pid=29160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447032783.519:691994): pid=29160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447032783.519:691995): pid=29160 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22459 res=1
type=USER_ROLE_CHANGE msg=audit(1447032783.587:691996): pid=29160 uid=0 auid=0 ses=22459 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447032783.611:691997): pid=29160 uid=0 auid=0 ses=22459 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447032783.614:691998): pid=29160 uid=0 auid=0 ses=22459 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447032783.614:691999): pid=29160 uid=0 auid=0 ses=22459 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447032783.616:692000): pid=29163 uid=0 auid=0 ses=22459 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=29163 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447032783.616:692001): pid=29163 uid=0 auid=0 ses=22459 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=29163 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447032783.616:692002): pid=29163 uid=0 auid=0 ses=22459 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=29163 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447032783.617:692003): pid=29163 uid=0 auid=0 ses=22459 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447032783.635:692004): pid=29160 uid=0 auid=0 ses=22459 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447032783.635:692005): pid=29160 uid=0 auid=0 ses=22459 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447032783.638:692006): pid=29160 uid=0 auid=0 ses=22459 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447032783.638:692007): pid=29160 uid=0 auid=0 ses=22459 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447032783.639:692008): pid=29160 uid=0 auid=0 ses=22459 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29160 suid=0 rport=63415 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447032783.639:692009): pid=29160 uid=0 auid=0 ses=22459 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=29160 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447032783.640:692010): pid=29160 uid=0 auid=0 ses=22459 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=29160 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447032783.640:692011): pid=29160 uid=0 auid=0 ses=22459 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=29160 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447032783.660:692012): pid=29171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=29171 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447032783.660:692013): pid=29171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=29171 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447032783.661:692014): pid=29171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=29171 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447032783.706:692015): pid=29170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=29171 suid=74 rport=63416 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447032783.706:692016): pid=29170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=29171 suid=74 rport=63416 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447032783.833:692017): pid=29170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=63416 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447032783.833:692018): pid=29170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=63416 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447032783.843:692019): pid=29170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447032783.844:692020): pid=29170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29171 suid=74 rport=63416 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447032783.844:692021): pid=29170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447032783.845:692022): pid=29170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447032783.845:692023): pid=29170 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22460 res=1
type=USER_ROLE_CHANGE msg=audit(1447032783.912:692024): pid=29170 uid=0 auid=0 ses=22460 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447032783.931:692025): pid=29170 uid=0 auid=0 ses=22460 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447032783.935:692026): pid=29170 uid=0 auid=0 ses=22460 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447032783.935:692027): pid=29170 uid=0 auid=0 ses=22460 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447032783.937:692028): pid=29173 uid=0 auid=0 ses=22460 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=29173 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447032783.937:692029): pid=29173 uid=0 auid=0 ses=22460 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=29173 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447032783.937:692030): pid=29173 uid=0 auid=0 ses=22460 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=29173 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447032783.938:692031): pid=29173 uid=0 auid=0 ses=22460 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447032785.204:692032): pid=29170 uid=0 auid=0 ses=22460 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447032785.204:692033): pid=29170 uid=0 auid=0 ses=22460 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447032785.207:692034): pid=29170 uid=0 auid=0 ses=22460 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447032785.207:692035): pid=29170 uid=0 auid=0 ses=22460 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447032785.208:692036): pid=29170 uid=0 auid=0 ses=22460 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29170 suid=0 rport=63416 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447032785.208:692037): pid=29170 uid=0 auid=0 ses=22460 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=29170 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447032785.208:692038): pid=29170 uid=0 auid=0 ses=22460 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=29170 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447032785.208:692039): pid=29170 uid=0 auid=0 ses=22460 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=29170 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447032785.244:692040): pid=29223 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=29223 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447032785.244:692041): pid=29223 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=29223 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447032785.244:692042): pid=29223 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=29223 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447032785.288:692043): pid=29222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=29223 suid=74 rport=63418 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447032785.288:692044): pid=29222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=29223 suid=74 rport=63418 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447032785.416:692045): pid=29222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=63418 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447032785.416:692046): pid=29222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=63418 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447032785.425:692047): pid=29222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447032785.426:692048): pid=29222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29223 suid=74 rport=63418 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447032785.428:692049): pid=29222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447032785.428:692050): pid=29222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447032785.428:692051): pid=29222 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22461 res=1
type=USER_ROLE_CHANGE msg=audit(1447032785.499:692052): pid=29222 uid=0 auid=0 ses=22461 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447032785.519:692053): pid=29222 uid=0 auid=0 ses=22461 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447032785.521:692054): pid=29222 uid=0 auid=0 ses=22461 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447032785.521:692055): pid=29222 uid=0 auid=0 ses=22461 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447032785.522:692056): pid=29228 uid=0 auid=0 ses=22461 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=29228 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447032785.522:692057): pid=29228 uid=0 auid=0 ses=22461 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=29228 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447032785.522:692058): pid=29228 uid=0 auid=0 ses=22461 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=29228 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447032785.523:692059): pid=29228 uid=0 auid=0 ses=22461 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447032785.544:692060): pid=29222 uid=0 auid=0 ses=22461 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447032785.544:692061): pid=29222 uid=0 auid=0 ses=22461 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447032785.547:692062): pid=29222 uid=0 auid=0 ses=22461 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447032785.547:692063): pid=29222 uid=0 auid=0 ses=22461 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447032785.548:692064): pid=29222 uid=0 auid=0 ses=22461 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29222 suid=0 rport=63418 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447032785.548:692065): pid=29222 uid=0 auid=0 ses=22461 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=29222 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447032785.548:692066): pid=29222 uid=0 auid=0 ses=22461 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=29222 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447032785.548:692067): pid=29222 uid=0 auid=0 ses=22461 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=29222 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447033201.414:692069): pid=30516 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447033201.414:692068): pid=30517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447033201.414:692070): pid=30516 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447033201.414:692071): pid=30517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447033201.415:692072): pid=30517 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22462 res=1
type=LOGIN msg=audit(1447033201.415:692073): pid=30516 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22463 res=1
type=USER_START msg=audit(1447033201.434:692074): pid=30517 uid=0 auid=0 ses=22462 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447033201.434:692075): pid=30516 uid=0 auid=0 ses=22463 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447033201.434:692076): pid=30517 uid=0 auid=0 ses=22462 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447033201.434:692077): pid=30516 uid=0 auid=0 ses=22463 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447033201.442:692078): pid=30517 uid=0 auid=0 ses=22462 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447033201.445:692079): pid=30517 uid=0 auid=0 ses=22462 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447033201.455:692080): pid=30516 uid=0 auid=0 ses=22463 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447033201.456:692081): pid=30516 uid=0 auid=0 ses=22463 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447033801.477:692083): pid=32362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447033801.477:692082): pid=32363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447033801.477:692084): pid=32363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447033801.477:692085): pid=32362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447033801.477:692086): pid=32363 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22464 res=1
type=LOGIN msg=audit(1447033801.477:692087): pid=32362 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22465 res=1
type=USER_START msg=audit(1447033801.496:692088): pid=32362 uid=0 auid=0 ses=22465 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447033801.497:692089): pid=32362 uid=0 auid=0 ses=22465 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447033801.499:692090): pid=32363 uid=0 auid=0 ses=22464 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447033801.499:692091): pid=32363 uid=0 auid=0 ses=22464 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447033801.508:692092): pid=32363 uid=0 auid=0 ses=22464 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447033801.508:692093): pid=32362 uid=0 auid=0 ses=22465 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447033801.509:692094): pid=32363 uid=0 auid=0 ses=22464 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447033801.512:692095): pid=32362 uid=0 auid=0 ses=22465 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447033983.405:692096): pid=474 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=474 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447033983.405:692097): pid=474 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=474 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447033983.405:692098): pid=474 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=474 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447033983.450:692099): pid=473 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=474 suid=74 rport=65395 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447033983.450:692100): pid=473 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=474 suid=74 rport=65395 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447033983.570:692101): pid=473 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=65395 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447033983.570:692102): pid=473 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=65395 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447033983.575:692103): pid=473 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447033983.576:692104): pid=473 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=474 suid=74 rport=65395 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447033983.577:692105): pid=473 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447033983.577:692106): pid=473 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447033983.577:692107): pid=473 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22466 res=1
type=USER_ROLE_CHANGE msg=audit(1447033983.650:692108): pid=473 uid=0 auid=0 ses=22466 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447033983.673:692109): pid=473 uid=0 auid=0 ses=22466 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447033983.677:692110): pid=473 uid=0 auid=0 ses=22466 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447033983.677:692111): pid=473 uid=0 auid=0 ses=22466 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447033983.679:692112): pid=476 uid=0 auid=0 ses=22466 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=476 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447033983.679:692113): pid=476 uid=0 auid=0 ses=22466 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=476 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447033983.679:692114): pid=476 uid=0 auid=0 ses=22466 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=476 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447033983.680:692115): pid=476 uid=0 auid=0 ses=22466 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447033983.699:692116): pid=473 uid=0 auid=0 ses=22466 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447033983.699:692117): pid=473 uid=0 auid=0 ses=22466 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447033983.703:692118): pid=473 uid=0 auid=0 ses=22466 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447033983.703:692119): pid=473 uid=0 auid=0 ses=22466 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447033983.703:692120): pid=473 uid=0 auid=0 ses=22466 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=473 suid=0 rport=65395 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447033983.703:692121): pid=473 uid=0 auid=0 ses=22466 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=473 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447033983.703:692122): pid=473 uid=0 auid=0 ses=22466 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=473 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447033983.704:692123): pid=473 uid=0 auid=0 ses=22466 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=473 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447033983.726:692124): pid=489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=489 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447033983.727:692125): pid=489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=489 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447033983.727:692126): pid=489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=489 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447033983.770:692127): pid=488 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=489 suid=74 rport=65398 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447033983.771:692128): pid=488 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=489 suid=74 rport=65398 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447033983.889:692129): pid=488 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=65398 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447033983.889:692130): pid=488 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=65398 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447033983.896:692131): pid=488 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447033983.898:692132): pid=488 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=489 suid=74 rport=65398 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447033983.899:692133): pid=488 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447033983.900:692134): pid=488 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447033983.900:692135): pid=488 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22467 res=1
type=USER_ROLE_CHANGE msg=audit(1447033983.967:692136): pid=488 uid=0 auid=0 ses=22467 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447033983.995:692137): pid=488 uid=0 auid=0 ses=22467 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447033983.997:692138): pid=488 uid=0 auid=0 ses=22467 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447033983.997:692139): pid=488 uid=0 auid=0 ses=22467 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447033983.999:692140): pid=491 uid=0 auid=0 ses=22467 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=491 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447033983.999:692141): pid=491 uid=0 auid=0 ses=22467 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=491 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447033983.999:692142): pid=491 uid=0 auid=0 ses=22467 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=491 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447033984.000:692143): pid=491 uid=0 auid=0 ses=22467 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447033985.276:692144): pid=488 uid=0 auid=0 ses=22467 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447033985.277:692145): pid=488 uid=0 auid=0 ses=22467 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447033985.281:692146): pid=488 uid=0 auid=0 ses=22467 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447033985.281:692147): pid=488 uid=0 auid=0 ses=22467 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447033985.281:692148): pid=488 uid=0 auid=0 ses=22467 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=488 suid=0 rport=65398 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447033985.281:692149): pid=488 uid=0 auid=0 ses=22467 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=488 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447033985.281:692150): pid=488 uid=0 auid=0 ses=22467 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=488 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447033985.281:692151): pid=488 uid=0 auid=0 ses=22467 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=488 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447033985.317:692152): pid=591 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=591 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447033985.317:692153): pid=591 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=591 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447033985.318:692154): pid=591 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=591 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447033985.361:692155): pid=556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=591 suid=74 rport=65400 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447033985.362:692156): pid=556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=591 suid=74 rport=65400 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447033985.491:692157): pid=556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=65400 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447033985.491:692158): pid=556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=65400 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447033985.501:692159): pid=556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447033985.501:692160): pid=556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=591 suid=74 rport=65400 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447033985.503:692161): pid=556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447033985.503:692162): pid=556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447033985.503:692163): pid=556 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22468 res=1
type=USER_ROLE_CHANGE msg=audit(1447033985.569:692164): pid=556 uid=0 auid=0 ses=22468 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447033985.590:692165): pid=556 uid=0 auid=0 ses=22468 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447033985.592:692166): pid=556 uid=0 auid=0 ses=22468 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447033985.592:692167): pid=556 uid=0 auid=0 ses=22468 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447033985.594:692168): pid=596 uid=0 auid=0 ses=22468 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=596 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447033985.594:692169): pid=596 uid=0 auid=0 ses=22468 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=596 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447033985.594:692170): pid=596 uid=0 auid=0 ses=22468 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=596 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447033985.596:692171): pid=596 uid=0 auid=0 ses=22468 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447033985.613:692172): pid=556 uid=0 auid=0 ses=22468 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447033985.613:692173): pid=556 uid=0 auid=0 ses=22468 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447033985.617:692174): pid=556 uid=0 auid=0 ses=22468 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447033985.617:692175): pid=556 uid=0 auid=0 ses=22468 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447033985.618:692176): pid=556 uid=0 auid=0 ses=22468 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=556 suid=0 rport=65400 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447033985.618:692177): pid=556 uid=0 auid=0 ses=22468 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=556 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447033985.618:692178): pid=556 uid=0 auid=0 ses=22468 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=556 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447033985.618:692179): pid=556 uid=0 auid=0 ses=22468 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=556 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=SYSCALL msg=audit(1447034042.677:692180): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447034401.530:692181): pid=1936 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447034401.530:692182): pid=1935 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447034401.530:692183): pid=1935 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447034401.530:692184): pid=1936 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447034401.532:692185): pid=1935 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22469 res=1
type=LOGIN msg=audit(1447034401.532:692186): pid=1936 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22470 res=1
type=USER_START msg=audit(1447034401.551:692187): pid=1936 uid=0 auid=0 ses=22470 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447034401.551:692188): pid=1936 uid=0 auid=0 ses=22470 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447034401.553:692189): pid=1935 uid=0 auid=0 ses=22469 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447034401.553:692190): pid=1935 uid=0 auid=0 ses=22469 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447034401.563:692191): pid=1936 uid=0 auid=0 ses=22470 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447034401.568:692192): pid=1935 uid=0 auid=0 ses=22469 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447034401.569:692193): pid=1935 uid=0 auid=0 ses=22469 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447034401.572:692194): pid=1936 uid=0 auid=0 ses=22470 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447034461.581:692195): pid=2171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447034461.581:692196): pid=2171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447034461.582:692197): pid=2171 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22471 res=1
type=USER_START msg=audit(1447034461.592:692198): pid=2171 uid=0 auid=0 ses=22471 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447034461.592:692199): pid=2171 uid=0 auid=0 ses=22471 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447034461.624:692200): pid=2171 uid=0 auid=0 ses=22471 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447034461.625:692201): pid=2171 uid=0 auid=0 ses=22471 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447035001.639:692202): pid=3841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447035001.640:692203): pid=3841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447035001.640:692204): pid=3841 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22472 res=1
type=USER_ACCT msg=audit(1447035001.640:692205): pid=3842 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447035001.640:692206): pid=3842 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447035001.640:692207): pid=3842 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22473 res=1
type=USER_START msg=audit(1447035001.655:692208): pid=3841 uid=0 auid=0 ses=22472 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447035001.656:692209): pid=3841 uid=0 auid=0 ses=22472 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447035001.656:692210): pid=3842 uid=0 auid=0 ses=22473 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447035001.656:692211): pid=3842 uid=0 auid=0 ses=22473 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447035001.663:692212): pid=3842 uid=0 auid=0 ses=22473 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447035001.664:692213): pid=3842 uid=0 auid=0 ses=22473 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447035001.667:692214): pid=3841 uid=0 auid=0 ses=22472 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447035026.695:692215): pid=3841 uid=0 auid=0 ses=22472 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=CRYPTO_KEY_USER msg=audit(1447035182.458:692216): pid=4403 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=4403 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447035182.458:692217): pid=4403 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=4403 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447035182.458:692218): pid=4403 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=4403 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447035182.501:692219): pid=4402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=4403 suid=74 rport=34610 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447035182.502:692220): pid=4402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=4403 suid=74 rport=34610 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447035182.630:692221): pid=4402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34610 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447035182.630:692222): pid=4402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=34610 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447035182.639:692223): pid=4402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447035182.640:692224): pid=4402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4403 suid=74 rport=34610 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447035182.641:692225): pid=4402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447035182.643:692226): pid=4402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447035182.643:692227): pid=4402 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22474 res=1
type=USER_ROLE_CHANGE msg=audit(1447035182.711:692228): pid=4402 uid=0 auid=0 ses=22474 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447035182.734:692229): pid=4402 uid=0 auid=0 ses=22474 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447035182.737:692230): pid=4402 uid=0 auid=0 ses=22474 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447035182.737:692231): pid=4402 uid=0 auid=0 ses=22474 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447035182.738:692232): pid=4405 uid=0 auid=0 ses=22474 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=4405 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447035182.738:692233): pid=4405 uid=0 auid=0 ses=22474 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=4405 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447035182.738:692234): pid=4405 uid=0 auid=0 ses=22474 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=4405 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447035182.739:692235): pid=4405 uid=0 auid=0 ses=22474 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447035182.758:692236): pid=4402 uid=0 auid=0 ses=22474 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447035182.758:692237): pid=4402 uid=0 auid=0 ses=22474 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447035182.762:692238): pid=4402 uid=0 auid=0 ses=22474 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447035182.762:692239): pid=4402 uid=0 auid=0 ses=22474 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447035182.762:692240): pid=4402 uid=0 auid=0 ses=22474 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4402 suid=0 rport=34610 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447035182.763:692241): pid=4402 uid=0 auid=0 ses=22474 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=4402 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447035182.763:692242): pid=4402 uid=0 auid=0 ses=22474 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=4402 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447035182.763:692243): pid=4402 uid=0 auid=0 ses=22474 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=4402 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447035182.786:692244): pid=4413 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=4413 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447035182.786:692245): pid=4413 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=4413 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447035182.787:692246): pid=4413 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=4413 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447035182.831:692247): pid=4412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=4413 suid=74 rport=34611 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447035182.832:692248): pid=4412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=4413 suid=74 rport=34611 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447035182.959:692249): pid=4412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34611 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447035182.959:692250): pid=4412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=34611 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447035182.967:692251): pid=4412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447035182.968:692252): pid=4412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4413 suid=74 rport=34611 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447035182.971:692253): pid=4412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447035182.972:692254): pid=4412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447035182.972:692255): pid=4412 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22475 res=1
type=USER_ROLE_CHANGE msg=audit(1447035183.034:692256): pid=4412 uid=0 auid=0 ses=22475 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447035183.057:692257): pid=4412 uid=0 auid=0 ses=22475 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447035183.060:692258): pid=4412 uid=0 auid=0 ses=22475 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447035183.060:692259): pid=4412 uid=0 auid=0 ses=22475 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447035183.061:692260): pid=4415 uid=0 auid=0 ses=22475 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=4415 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447035183.062:692261): pid=4415 uid=0 auid=0 ses=22475 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=4415 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447035183.062:692262): pid=4415 uid=0 auid=0 ses=22475 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=4415 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447035183.062:692263): pid=4415 uid=0 auid=0 ses=22475 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447035184.353:692264): pid=4412 uid=0 auid=0 ses=22475 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447035184.353:692265): pid=4412 uid=0 auid=0 ses=22475 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447035184.359:692266): pid=4412 uid=0 auid=0 ses=22475 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447035184.359:692267): pid=4412 uid=0 auid=0 ses=22475 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447035184.360:692268): pid=4412 uid=0 auid=0 ses=22475 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4412 suid=0 rport=34611 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447035184.360:692269): pid=4412 uid=0 auid=0 ses=22475 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=4412 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447035184.360:692270): pid=4412 uid=0 auid=0 ses=22475 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=4412 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447035184.360:692271): pid=4412 uid=0 auid=0 ses=22475 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=4412 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447035184.392:692272): pid=4465 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=4465 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447035184.392:692273): pid=4465 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=4465 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447035184.392:692274): pid=4465 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=4465 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447035184.438:692275): pid=4464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=4465 suid=74 rport=34612 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447035184.438:692276): pid=4464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=4465 suid=74 rport=34612 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447035184.568:692277): pid=4464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34612 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447035184.568:692278): pid=4464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=34612 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447035184.578:692279): pid=4464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447035184.580:692280): pid=4464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4465 suid=74 rport=34612 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447035184.582:692281): pid=4464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447035184.583:692282): pid=4464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447035184.583:692283): pid=4464 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22476 res=1
type=USER_ROLE_CHANGE msg=audit(1447035184.647:692284): pid=4464 uid=0 auid=0 ses=22476 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447035184.674:692285): pid=4464 uid=0 auid=0 ses=22476 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447035184.678:692286): pid=4464 uid=0 auid=0 ses=22476 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447035184.678:692287): pid=4464 uid=0 auid=0 ses=22476 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447035184.680:692288): pid=4467 uid=0 auid=0 ses=22476 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=4467 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447035184.680:692289): pid=4467 uid=0 auid=0 ses=22476 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=4467 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447035184.680:692290): pid=4467 uid=0 auid=0 ses=22476 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=4467 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447035184.681:692291): pid=4467 uid=0 auid=0 ses=22476 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447035184.698:692292): pid=4464 uid=0 auid=0 ses=22476 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447035184.698:692293): pid=4464 uid=0 auid=0 ses=22476 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447035184.702:692294): pid=4464 uid=0 auid=0 ses=22476 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447035184.703:692295): pid=4464 uid=0 auid=0 ses=22476 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447035184.703:692296): pid=4464 uid=0 auid=0 ses=22476 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4464 suid=0 rport=34612 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447035184.703:692297): pid=4464 uid=0 auid=0 ses=22476 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=4464 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447035184.703:692298): pid=4464 uid=0 auid=0 ses=22476 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=4464 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447035184.703:692299): pid=4464 uid=0 auid=0 ses=22476 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=4464 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447035601.717:692300): pid=5798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447035601.717:692301): pid=5797 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447035601.717:692302): pid=5797 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447035601.717:692303): pid=5798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447035601.718:692304): pid=5798 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22477 res=1
type=LOGIN msg=audit(1447035601.718:692305): pid=5797 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22478 res=1
type=USER_START msg=audit(1447035601.737:692306): pid=5797 uid=0 auid=0 ses=22478 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447035601.737:692307): pid=5797 uid=0 auid=0 ses=22478 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447035601.737:692308): pid=5798 uid=0 auid=0 ses=22477 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447035601.737:692309): pid=5798 uid=0 auid=0 ses=22477 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447035601.746:692310): pid=5798 uid=0 auid=0 ses=22477 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447035601.747:692311): pid=5798 uid=0 auid=0 ses=22477 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447035601.755:692312): pid=5797 uid=0 auid=0 ses=22478 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447035601.758:692313): pid=5797 uid=0 auid=0 ses=22478 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1447036184.701:692314): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447036201.775:692315): pid=7643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447036201.775:692316): pid=7642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447036201.775:692317): pid=7643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447036201.775:692318): pid=7642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447036201.775:692320): pid=7643 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22479 res=1
type=LOGIN msg=audit(1447036201.775:692319): pid=7642 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22480 res=1
type=USER_START msg=audit(1447036201.792:692321): pid=7642 uid=0 auid=0 ses=22480 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447036201.792:692322): pid=7642 uid=0 auid=0 ses=22480 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447036201.793:692323): pid=7643 uid=0 auid=0 ses=22479 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447036201.793:692324): pid=7643 uid=0 auid=0 ses=22479 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447036201.800:692325): pid=7643 uid=0 auid=0 ses=22479 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447036201.801:692326): pid=7643 uid=0 auid=0 ses=22479 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447036201.806:692327): pid=7642 uid=0 auid=0 ses=22480 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447036201.809:692328): pid=7642 uid=0 auid=0 ses=22480 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447036383.310:692329): pid=8204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=8204 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447036383.310:692330): pid=8204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=8204 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447036383.310:692331): pid=8204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=8204 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447036383.354:692332): pid=8203 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=8204 suid=74 rport=36593 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447036383.354:692333): pid=8203 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=8204 suid=74 rport=36593 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447036383.483:692334): pid=8203 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=36593 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447036383.483:692335): pid=8203 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=36593 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447036383.488:692336): pid=8203 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447036383.489:692337): pid=8203 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8204 suid=74 rport=36593 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447036383.491:692338): pid=8203 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447036383.491:692339): pid=8203 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447036383.492:692340): pid=8203 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22481 res=1
type=USER_ROLE_CHANGE msg=audit(1447036383.559:692341): pid=8203 uid=0 auid=0 ses=22481 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447036383.587:692342): pid=8203 uid=0 auid=0 ses=22481 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447036383.590:692343): pid=8203 uid=0 auid=0 ses=22481 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447036383.590:692344): pid=8203 uid=0 auid=0 ses=22481 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447036383.592:692345): pid=8206 uid=0 auid=0 ses=22481 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=8206 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447036383.592:692346): pid=8206 uid=0 auid=0 ses=22481 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=8206 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447036383.592:692347): pid=8206 uid=0 auid=0 ses=22481 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=8206 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447036383.592:692348): pid=8206 uid=0 auid=0 ses=22481 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447036383.611:692349): pid=8203 uid=0 auid=0 ses=22481 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447036383.611:692350): pid=8203 uid=0 auid=0 ses=22481 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447036383.616:692351): pid=8203 uid=0 auid=0 ses=22481 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447036383.616:692352): pid=8203 uid=0 auid=0 ses=22481 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447036383.617:692353): pid=8203 uid=0 auid=0 ses=22481 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8203 suid=0 rport=36593 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447036383.617:692354): pid=8203 uid=0 auid=0 ses=22481 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=8203 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447036383.617:692355): pid=8203 uid=0 auid=0 ses=22481 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=8203 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447036383.617:692356): pid=8203 uid=0 auid=0 ses=22481 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=8203 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447036383.637:692357): pid=8214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=8214 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447036383.637:692358): pid=8214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=8214 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447036383.638:692359): pid=8214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=8214 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447036383.682:692360): pid=8213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=8214 suid=74 rport=36595 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447036383.682:692361): pid=8213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=8214 suid=74 rport=36595 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447036383.814:692362): pid=8213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=36595 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447036383.814:692363): pid=8213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=36595 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447036383.822:692364): pid=8213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447036383.823:692365): pid=8213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8214 suid=74 rport=36595 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447036383.825:692366): pid=8213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447036383.825:692367): pid=8213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447036383.825:692368): pid=8213 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22482 res=1
type=USER_ROLE_CHANGE msg=audit(1447036383.893:692369): pid=8213 uid=0 auid=0 ses=22482 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447036383.919:692370): pid=8213 uid=0 auid=0 ses=22482 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447036383.922:692371): pid=8213 uid=0 auid=0 ses=22482 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447036383.922:692372): pid=8213 uid=0 auid=0 ses=22482 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447036383.923:692373): pid=8216 uid=0 auid=0 ses=22482 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=8216 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447036383.924:692374): pid=8216 uid=0 auid=0 ses=22482 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=8216 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447036383.924:692375): pid=8216 uid=0 auid=0 ses=22482 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=8216 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447036383.924:692376): pid=8216 uid=0 auid=0 ses=22482 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447036385.190:692377): pid=8213 uid=0 auid=0 ses=22482 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447036385.191:692378): pid=8213 uid=0 auid=0 ses=22482 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447036385.197:692379): pid=8213 uid=0 auid=0 ses=22482 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447036385.198:692380): pid=8213 uid=0 auid=0 ses=22482 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447036385.198:692381): pid=8213 uid=0 auid=0 ses=22482 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8213 suid=0 rport=36595 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447036385.198:692382): pid=8213 uid=0 auid=0 ses=22482 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=8213 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447036385.198:692383): pid=8213 uid=0 auid=0 ses=22482 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=8213 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447036385.198:692384): pid=8213 uid=0 auid=0 ses=22482 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=8213 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447036385.232:692385): pid=8266 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=8266 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447036385.232:692386): pid=8266 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=8266 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447036385.232:692387): pid=8266 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=8266 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447036385.276:692388): pid=8265 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=8266 suid=74 rport=36598 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447036385.277:692389): pid=8265 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=8266 suid=74 rport=36598 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447036385.405:692390): pid=8265 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=36598 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447036385.405:692391): pid=8265 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=36598 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447036385.413:692392): pid=8265 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447036385.414:692393): pid=8265 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8266 suid=74 rport=36598 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447036385.415:692394): pid=8265 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447036385.416:692395): pid=8265 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447036385.416:692396): pid=8265 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22483 res=1
type=USER_ROLE_CHANGE msg=audit(1447036385.482:692397): pid=8265 uid=0 auid=0 ses=22483 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447036385.500:692398): pid=8265 uid=0 auid=0 ses=22483 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447036385.503:692399): pid=8265 uid=0 auid=0 ses=22483 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447036385.503:692400): pid=8265 uid=0 auid=0 ses=22483 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447036385.504:692401): pid=8268 uid=0 auid=0 ses=22483 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=8268 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447036385.504:692402): pid=8268 uid=0 auid=0 ses=22483 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=8268 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447036385.504:692403): pid=8268 uid=0 auid=0 ses=22483 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=8268 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447036385.505:692404): pid=8268 uid=0 auid=0 ses=22483 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447036385.521:692405): pid=8265 uid=0 auid=0 ses=22483 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447036385.521:692406): pid=8265 uid=0 auid=0 ses=22483 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447036385.524:692407): pid=8265 uid=0 auid=0 ses=22483 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447036385.524:692408): pid=8265 uid=0 auid=0 ses=22483 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447036385.524:692409): pid=8265 uid=0 auid=0 ses=22483 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8265 suid=0 rport=36598 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447036385.524:692410): pid=8265 uid=0 auid=0 ses=22483 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=8265 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447036385.525:692411): pid=8265 uid=0 auid=0 ses=22483 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=8265 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447036385.525:692412): pid=8265 uid=0 auid=0 ses=22483 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=8265 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447036535.813:692413): pid=8759 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=8759 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447036535.814:692414): pid=8759 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=8759 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447036535.814:692415): pid=8759 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=8759 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447036535.858:692416): pid=8758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=8759 suid=74 rport=37142 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447036535.859:692417): pid=8758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=8759 suid=74 rport=37142 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447036535.984:692418): pid=8758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=37142 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447036535.984:692419): pid=8758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=37142 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447036535.992:692420): pid=8758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447036535.993:692421): pid=8758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8759 suid=74 rport=37142 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447036535.998:692422): pid=8758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447036535.998:692423): pid=8758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447036535.998:692424): pid=8758 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22484 res=1
type=USER_ROLE_CHANGE msg=audit(1447036536.068:692425): pid=8758 uid=0 auid=0 ses=22484 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447036536.089:692426): pid=8758 uid=0 auid=0 ses=22484 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447036536.092:692427): pid=8758 uid=0 auid=0 ses=22484 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447036536.092:692428): pid=8758 uid=0 auid=0 ses=22484 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447036536.094:692429): pid=8761 uid=0 auid=0 ses=22484 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=8761 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447036536.094:692430): pid=8761 uid=0 auid=0 ses=22484 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=8761 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447036536.094:692431): pid=8761 uid=0 auid=0 ses=22484 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=8761 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447036536.094:692432): pid=8761 uid=0 auid=0 ses=22484 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447036536.115:692433): pid=8758 uid=0 auid=0 ses=22484 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447036536.115:692434): pid=8758 uid=0 auid=0 ses=22484 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447036536.120:692435): pid=8758 uid=0 auid=0 ses=22484 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447036536.120:692436): pid=8758 uid=0 auid=0 ses=22484 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447036536.120:692437): pid=8758 uid=0 auid=0 ses=22484 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8758 suid=0 rport=37142 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447036536.120:692438): pid=8758 uid=0 auid=0 ses=22484 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=8758 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447036536.120:692439): pid=8758 uid=0 auid=0 ses=22484 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=8758 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447036536.121:692440): pid=8758 uid=0 auid=0 ses=22484 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=8758 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447036536.144:692441): pid=8769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=8769 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447036536.144:692442): pid=8769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=8769 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447036536.144:692443): pid=8769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=8769 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447036536.189:692444): pid=8768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=8769 suid=74 rport=37145 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447036536.189:692445): pid=8768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=8769 suid=74 rport=37145 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447036536.318:692446): pid=8768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=37145 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447036536.318:692447): pid=8768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=37145 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447036536.326:692448): pid=8768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447036536.327:692449): pid=8768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8769 suid=74 rport=37145 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447036536.331:692450): pid=8768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447036536.331:692451): pid=8768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447036536.331:692452): pid=8768 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22485 res=1
type=USER_ROLE_CHANGE msg=audit(1447036536.400:692453): pid=8768 uid=0 auid=0 ses=22485 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447036536.418:692454): pid=8768 uid=0 auid=0 ses=22485 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447036536.420:692455): pid=8768 uid=0 auid=0 ses=22485 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447036536.420:692456): pid=8768 uid=0 auid=0 ses=22485 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447036536.421:692457): pid=8771 uid=0 auid=0 ses=22485 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=8771 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447036536.421:692458): pid=8771 uid=0 auid=0 ses=22485 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=8771 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447036536.422:692459): pid=8771 uid=0 auid=0 ses=22485 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=8771 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447036536.422:692460): pid=8771 uid=0 auid=0 ses=22485 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=SYSCALL msg=audit(1447036537.341:692461): arch=c000003e syscall=59 success=yes exit=0 a0=14d8500 a1=14d5680 a2=14cd5e0 a3=7fff73182c90 items=3 ppid=8771 pid=8839 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22485 comm="service" exe="/usr/bin/bash" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key="privileged"
type=EXECVE msg=audit(1447036537.341:692461): argc=4 a0="/bin/sh" a1="/sbin/service" a2="snmpd" a3="status"
type=CWD msg=audit(1447036537.341:692461):  cwd="/root"
type=PATH msg=audit(1447036537.341:692461): item=0 name="/sbin/service" inode=663302 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:bin_t:s0 objtype=NORMAL
type=PATH msg=audit(1447036537.341:692461): item=1 name=(null) inode=25167244 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:shell_exec_t:s0 objtype=NORMAL
type=PATH msg=audit(1447036537.341:692461): item=2 name=(null) inode=2292 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=SYSCALL msg=audit(1447036537.364:692462): arch=c000003e syscall=59 success=yes exit=0 a0=26da740 a1=2703e90 a2=26dbf50 a3=7ffff2167b00 items=2 ppid=8771 pid=8839 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22485 comm="systemctl" exe="/usr/bin/systemctl" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key="privileged"
type=EXECVE msg=audit(1447036537.364:692462): argc=3 a0="/bin/systemctl" a1="status" a2="snmpd.service"
type=CWD msg=audit(1447036537.364:692462):  cwd="/"
type=PATH msg=audit(1447036537.364:692462): item=0 name="/bin/systemctl" inode=25275302 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:systemd_systemctl_exec_t:s0 objtype=NORMAL
type=PATH msg=audit(1447036537.364:692462): item=1 name=(null) inode=2292 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=SYSCALL msg=audit(1447036537.380:692463): arch=c000003e syscall=59 success=yes exit=0 a0=14d8130 a1=14d8b90 a2=14cd5e0 a3=7fff731826e0 items=2 ppid=8771 pid=8853 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22485 comm="systemctl" exe="/usr/bin/systemctl" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key="privileged"
type=EXECVE msg=audit(1447036537.380:692463): argc=3 a0="/bin/systemctl" a1="is-enabled" a2="snmpd"
type=CWD msg=audit(1447036537.380:692463):  cwd="/root"
type=PATH msg=audit(1447036537.380:692463): item=0 name="/bin/systemctl" inode=25275302 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:systemd_systemctl_exec_t:s0 objtype=NORMAL
type=PATH msg=audit(1447036537.380:692463): item=1 name=(null) inode=2292 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=SYSCALL msg=audit(1447036537.384:692464): arch=c000003e syscall=59 success=yes exit=0 a0=14cbc30 a1=14d5680 a2=14cd5e0 a3=7fff73182c90 items=3 ppid=8771 pid=8854 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22485 comm="service" exe="/usr/bin/bash" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key="privileged"
type=EXECVE msg=audit(1447036537.384:692464): argc=4 a0="/bin/sh" a1="/sbin/service" a2="crond" a3="status"
type=CWD msg=audit(1447036537.384:692464):  cwd="/root"
type=PATH msg=audit(1447036537.384:692464): item=0 name="/sbin/service" inode=663302 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:bin_t:s0 objtype=NORMAL
type=PATH msg=audit(1447036537.384:692464): item=1 name=(null) inode=25167244 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:shell_exec_t:s0 objtype=NORMAL
type=PATH msg=audit(1447036537.384:692464): item=2 name=(null) inode=2292 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=SYSCALL msg=audit(1447036537.407:692465): arch=c000003e syscall=59 success=yes exit=0 a0=c2e740 a1=c57e90 a2=c2ff50 a3=7ffffd9b9350 items=2 ppid=8771 pid=8854 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22485 comm="systemctl" exe="/usr/bin/systemctl" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key="privileged"
type=EXECVE msg=audit(1447036537.407:692465): argc=3 a0="/bin/systemctl" a1="status" a2="crond.service"
type=CWD msg=audit(1447036537.407:692465):  cwd="/"
type=PATH msg=audit(1447036537.407:692465): item=0 name="/bin/systemctl" inode=25275302 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:systemd_systemctl_exec_t:s0 objtype=NORMAL
type=PATH msg=audit(1447036537.407:692465): item=1 name=(null) inode=2292 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=SYSCALL msg=audit(1447036537.419:692466): arch=c000003e syscall=59 success=yes exit=0 a0=14d8f70 a1=14d8b90 a2=14cd5e0 a3=7fff731826e0 items=2 ppid=8771 pid=8868 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22485 comm="systemctl" exe="/usr/bin/systemctl" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key="privileged"
type=EXECVE msg=audit(1447036537.419:692466): argc=3 a0="/bin/systemctl" a1="is-enabled" a2="crond"
type=CWD msg=audit(1447036537.419:692466):  cwd="/root"
type=PATH msg=audit(1447036537.419:692466): item=0 name="/bin/systemctl" inode=25275302 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:systemd_systemctl_exec_t:s0 objtype=NORMAL
type=PATH msg=audit(1447036537.419:692466): item=1 name=(null) inode=2292 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=SYSCALL msg=audit(1447036537.424:692467): arch=c000003e syscall=59 success=yes exit=0 a0=14d84c0 a1=14d5680 a2=14cd5e0 a3=7fff73182c90 items=3 ppid=8771 pid=8869 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22485 comm="service" exe="/usr/bin/bash" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key="privileged"
type=EXECVE msg=audit(1447036537.424:692467): argc=4 a0="/bin/sh" a1="/sbin/service" a2="firewalld" a3="status"
type=CWD msg=audit(1447036537.424:692467):  cwd="/root"
type=PATH msg=audit(1447036537.424:692467): item=0 name="/sbin/service" inode=663302 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:bin_t:s0 objtype=NORMAL
type=PATH msg=audit(1447036537.424:692467): item=1 name=(null) inode=25167244 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:shell_exec_t:s0 objtype=NORMAL
type=PATH msg=audit(1447036537.424:692467): item=2 name=(null) inode=2292 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=SYSCALL msg=audit(1447036537.451:692468): arch=c000003e syscall=59 success=yes exit=0 a0=1760740 a1=1789e90 a2=1761f50 a3=7fffd3d39be0 items=2 ppid=8771 pid=8869 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22485 comm="systemctl" exe="/usr/bin/systemctl" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key="privileged"
type=EXECVE msg=audit(1447036537.451:692468): argc=3 a0="/bin/systemctl" a1="status" a2="firewalld.service"
type=CWD msg=audit(1447036537.451:692468):  cwd="/"
type=PATH msg=audit(1447036537.451:692468): item=0 name="/bin/systemctl" inode=25275302 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:systemd_systemctl_exec_t:s0 objtype=NORMAL
type=PATH msg=audit(1447036537.451:692468): item=1 name=(null) inode=2292 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=SYSCALL msg=audit(1447036537.460:692469): arch=c000003e syscall=59 success=yes exit=0 a0=14d84e0 a1=14d8bf0 a2=14cd5e0 a3=7fff731826e0 items=2 ppid=8771 pid=8883 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22485 comm="systemctl" exe="/usr/bin/systemctl" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key="privileged"
type=EXECVE msg=audit(1447036537.460:692469): argc=3 a0="/bin/systemctl" a1="is-enabled" a2="firewalld"
type=CWD msg=audit(1447036537.460:692469):  cwd="/root"
type=PATH msg=audit(1447036537.460:692469): item=0 name="/bin/systemctl" inode=25275302 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:systemd_systemctl_exec_t:s0 objtype=NORMAL
type=PATH msg=audit(1447036537.460:692469): item=1 name=(null) inode=2292 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=SYSCALL msg=audit(1447036537.463:692470): arch=c000003e syscall=59 success=yes exit=0 a0=14d7fd0 a1=14d5680 a2=14cd5e0 a3=7fff73182c90 items=3 ppid=8771 pid=8884 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22485 comm="service" exe="/usr/bin/bash" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key="privileged"
type=EXECVE msg=audit(1447036537.463:692470): argc=4 a0="/bin/sh" a1="/sbin/service" a2="ntpd" a3="status"
type=CWD msg=audit(1447036537.463:692470):  cwd="/root"
type=PATH msg=audit(1447036537.463:692470): item=0 name="/sbin/service" inode=663302 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:bin_t:s0 objtype=NORMAL
type=PATH msg=audit(1447036537.463:692470): item=1 name=(null) inode=25167244 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:shell_exec_t:s0 objtype=NORMAL
type=PATH msg=audit(1447036537.463:692470): item=2 name=(null) inode=2292 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=SYSCALL msg=audit(1447036537.481:692471): arch=c000003e syscall=59 success=yes exit=0 a0=1180740 a1=11a9e90 a2=1181f50 a3=7fff67ddd350 items=2 ppid=8771 pid=8884 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22485 comm="systemctl" exe="/usr/bin/systemctl" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key="privileged"
type=EXECVE msg=audit(1447036537.481:692471): argc=3 a0="/bin/systemctl" a1="status" a2="ntpd.service"
type=CWD msg=audit(1447036537.481:692471):  cwd="/"
type=PATH msg=audit(1447036537.481:692471): item=0 name="/bin/systemctl" inode=25275302 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:systemd_systemctl_exec_t:s0 objtype=NORMAL
type=PATH msg=audit(1447036537.481:692471): item=1 name=(null) inode=2292 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=SYSCALL msg=audit(1447036537.531:692472): arch=c000003e syscall=59 success=yes exit=0 a0=14d88a0 a1=14d5d00 a2=14cd5e0 a3=7fff731826e0 items=2 ppid=8771 pid=8907 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22485 comm="systemctl" exe="/usr/bin/systemctl" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key="privileged"
type=EXECVE msg=audit(1447036537.531:692472): argc=3 a0="/bin/systemctl" a1="is-enabled" a2="ntpd"
type=CWD msg=audit(1447036537.531:692472):  cwd="/root"
type=PATH msg=audit(1447036537.531:692472): item=0 name="/bin/systemctl" inode=25275302 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:systemd_systemctl_exec_t:s0 objtype=NORMAL
type=PATH msg=audit(1447036537.531:692472): item=1 name=(null) inode=2292 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=SYSCALL msg=audit(1447036538.420:692473): arch=c000003e syscall=59 success=yes exit=0 a0=14d7cb0 a1=14db9a0 a2=14cd5e0 a3=7fff73180e90 items=2 ppid=8771 pid=8995 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22485 comm="systemctl" exe="/usr/bin/systemctl" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key="privileged"
type=EXECVE msg=audit(1447036538.420:692473): argc=3 a0="/bin/systemctl" a1="is-enabled" a2="auditd"
type=CWD msg=audit(1447036538.420:692473):  cwd="/root"
type=PATH msg=audit(1447036538.420:692473): item=0 name="/bin/systemctl" inode=25275302 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:systemd_systemctl_exec_t:s0 objtype=NORMAL
type=PATH msg=audit(1447036538.420:692473): item=1 name=(null) inode=2292 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=SYSCALL msg=audit(1447036538.424:692474): arch=c000003e syscall=59 success=yes exit=0 a0=14dbcd0 a1=14da040 a2=14cd5e0 a3=7fff73181530 items=3 ppid=8771 pid=8996 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22485 comm="service" exe="/usr/bin/bash" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key="privileged"
type=EXECVE msg=audit(1447036538.424:692474): argc=4 a0="/bin/sh" a1="/sbin/service" a2="auditd" a3="status"
type=CWD msg=audit(1447036538.424:692474):  cwd="/root"
type=PATH msg=audit(1447036538.424:692474): item=0 name="/sbin/service" inode=663302 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:bin_t:s0 objtype=NORMAL
type=PATH msg=audit(1447036538.424:692474): item=1 name=(null) inode=25167244 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:shell_exec_t:s0 objtype=NORMAL
type=PATH msg=audit(1447036538.424:692474): item=2 name=(null) inode=2292 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=SYSCALL msg=audit(1447036538.441:692475): arch=c000003e syscall=59 success=yes exit=0 a0=ced740 a1=d16e90 a2=ceef50 a3=7fffa8890a70 items=2 ppid=8771 pid=8996 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22485 comm="systemctl" exe="/usr/bin/systemctl" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key="privileged"
type=EXECVE msg=audit(1447036538.441:692475): argc=3 a0="/bin/systemctl" a1="status" a2="auditd.service"
type=CWD msg=audit(1447036538.441:692475):  cwd="/"
type=PATH msg=audit(1447036538.441:692475): item=0 name="/bin/systemctl" inode=25275302 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:systemd_systemctl_exec_t:s0 objtype=NORMAL
type=PATH msg=audit(1447036538.441:692475): item=1 name=(null) inode=2292 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=SYSCALL msg=audit(1447036538.700:692476): arch=c000003e syscall=59 success=yes exit=0 a0=14e6250 a1=14d5c20 a2=14cd5e0 a3=7fff73182c90 items=2 ppid=8771 pid=9141 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22485 comm="systemctl" exe="/usr/bin/systemctl" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key="privileged"
type=EXECVE msg=audit(1447036538.700:692476): argc=3 a0="/bin/systemctl" a1="is-enabled" a2="os_watcher"
type=CWD msg=audit(1447036538.700:692476):  cwd="/root"
type=PATH msg=audit(1447036538.700:692476): item=0 name="/bin/systemctl" inode=25275302 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:systemd_systemctl_exec_t:s0 objtype=NORMAL
type=PATH msg=audit(1447036538.700:692476): item=1 name=(null) inode=2292 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=USER_END msg=audit(1447036538.775:692477): pid=8768 uid=0 auid=0 ses=22485 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447036538.775:692478): pid=8768 uid=0 auid=0 ses=22485 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447036538.778:692479): pid=8768 uid=0 auid=0 ses=22485 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447036538.779:692480): pid=8768 uid=0 auid=0 ses=22485 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447036538.779:692481): pid=8768 uid=0 auid=0 ses=22485 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8768 suid=0 rport=37145 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447036538.779:692482): pid=8768 uid=0 auid=0 ses=22485 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=8768 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447036538.779:692483): pid=8768 uid=0 auid=0 ses=22485 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=8768 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447036538.779:692484): pid=8768 uid=0 auid=0 ses=22485 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=8768 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447036538.806:692485): pid=9227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=9227 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447036538.806:692486): pid=9227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=9227 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447036538.806:692487): pid=9227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=9227 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447036538.850:692488): pid=9226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=9227 suid=74 rport=37152 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447036538.850:692489): pid=9226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=9227 suid=74 rport=37152 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447036538.973:692490): pid=9226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=37152 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447036538.973:692491): pid=9226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=37152 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447036538.978:692492): pid=9226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447036538.979:692493): pid=9226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9227 suid=74 rport=37152 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447036538.980:692494): pid=9226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447036538.981:692495): pid=9226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447036538.981:692496): pid=9226 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22486 res=1
type=USER_ROLE_CHANGE msg=audit(1447036539.050:692497): pid=9226 uid=0 auid=0 ses=22486 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447036539.069:692498): pid=9226 uid=0 auid=0 ses=22486 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447036539.072:692499): pid=9226 uid=0 auid=0 ses=22486 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447036539.072:692500): pid=9226 uid=0 auid=0 ses=22486 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447036539.073:692501): pid=9229 uid=0 auid=0 ses=22486 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=9229 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447036539.073:692502): pid=9229 uid=0 auid=0 ses=22486 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=9229 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447036539.073:692503): pid=9229 uid=0 auid=0 ses=22486 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=9229 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447036539.074:692504): pid=9229 uid=0 auid=0 ses=22486 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447036539.094:692505): pid=9226 uid=0 auid=0 ses=22486 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447036539.094:692506): pid=9226 uid=0 auid=0 ses=22486 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447036539.097:692507): pid=9226 uid=0 auid=0 ses=22486 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447036539.097:692508): pid=9226 uid=0 auid=0 ses=22486 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447036539.097:692509): pid=9226 uid=0 auid=0 ses=22486 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9226 suid=0 rport=37152 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447036539.097:692510): pid=9226 uid=0 auid=0 ses=22486 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=9226 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447036539.097:692511): pid=9226 uid=0 auid=0 ses=22486 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=9226 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447036539.097:692512): pid=9226 uid=0 auid=0 ses=22486 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=9226 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447036801.830:692513): pid=10038 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447036801.830:692514): pid=10037 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447036801.830:692515): pid=10038 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447036801.830:692516): pid=10037 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447036801.831:692517): pid=10038 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22487 res=1
type=LOGIN msg=audit(1447036801.831:692518): pid=10037 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22488 res=1
type=USER_START msg=audit(1447036801.849:692519): pid=10037 uid=0 auid=0 ses=22488 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447036801.849:692520): pid=10037 uid=0 auid=0 ses=22488 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447036801.850:692521): pid=10038 uid=0 auid=0 ses=22487 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447036801.850:692522): pid=10038 uid=0 auid=0 ses=22487 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447036801.861:692523): pid=10038 uid=0 auid=0 ses=22487 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447036801.862:692524): pid=10038 uid=0 auid=0 ses=22487 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447036801.869:692525): pid=10037 uid=0 auid=0 ses=22488 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447036801.870:692526): pid=10037 uid=0 auid=0 ses=22488 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1447037214.759:692527): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447037401.883:692528): pid=11885 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447037401.883:692529): pid=11885 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447037401.883:692530): pid=11886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447037401.883:692531): pid=11886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447037401.883:692532): pid=11885 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22489 res=1
type=LOGIN msg=audit(1447037401.883:692533): pid=11886 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22490 res=1
type=USER_START msg=audit(1447037401.900:692534): pid=11886 uid=0 auid=0 ses=22490 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447037401.900:692535): pid=11886 uid=0 auid=0 ses=22490 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447037401.901:692536): pid=11885 uid=0 auid=0 ses=22489 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447037401.901:692537): pid=11885 uid=0 auid=0 ses=22489 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447037401.906:692538): pid=11886 uid=0 auid=0 ses=22490 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447037401.907:692539): pid=11886 uid=0 auid=0 ses=22490 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447037401.914:692540): pid=11885 uid=0 auid=0 ses=22489 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447037401.915:692541): pid=11885 uid=0 auid=0 ses=22489 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447037583.405:692542): pid=12446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12446 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447037583.405:692543): pid=12446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12446 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447037583.405:692544): pid=12446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12446 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447037583.450:692545): pid=12445 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=12446 suid=74 rport=38727 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447037583.450:692546): pid=12445 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=12446 suid=74 rport=38727 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447037583.579:692547): pid=12445 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38727 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447037583.579:692548): pid=12445 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=38727 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447037583.587:692549): pid=12445 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447037583.587:692550): pid=12445 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12446 suid=74 rport=38727 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447037583.592:692551): pid=12445 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447037583.593:692552): pid=12445 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447037583.593:692553): pid=12445 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22491 res=1
type=USER_ROLE_CHANGE msg=audit(1447037583.662:692554): pid=12445 uid=0 auid=0 ses=22491 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447037583.685:692555): pid=12445 uid=0 auid=0 ses=22491 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447037583.689:692556): pid=12445 uid=0 auid=0 ses=22491 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447037583.689:692557): pid=12445 uid=0 auid=0 ses=22491 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447037583.691:692558): pid=12448 uid=0 auid=0 ses=22491 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12448 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447037583.691:692559): pid=12448 uid=0 auid=0 ses=22491 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12448 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447037583.691:692560): pid=12448 uid=0 auid=0 ses=22491 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12448 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447037583.692:692561): pid=12448 uid=0 auid=0 ses=22491 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447037583.718:692562): pid=12445 uid=0 auid=0 ses=22491 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447037583.718:692563): pid=12445 uid=0 auid=0 ses=22491 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447037583.721:692564): pid=12445 uid=0 auid=0 ses=22491 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447037583.721:692565): pid=12445 uid=0 auid=0 ses=22491 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447037583.722:692566): pid=12445 uid=0 auid=0 ses=22491 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12445 suid=0 rport=38727 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447037583.722:692567): pid=12445 uid=0 auid=0 ses=22491 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12445 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447037583.722:692568): pid=12445 uid=0 auid=0 ses=22491 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12445 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447037583.722:692569): pid=12445 uid=0 auid=0 ses=22491 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12445 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447037583.745:692570): pid=12456 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12456 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447037583.745:692571): pid=12456 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12456 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447037583.746:692572): pid=12456 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12456 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447037583.790:692573): pid=12455 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=12456 suid=74 rport=38728 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447037583.790:692574): pid=12455 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=12456 suid=74 rport=38728 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447037583.919:692575): pid=12455 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38728 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447037583.919:692576): pid=12455 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=38728 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447037583.929:692577): pid=12455 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447037583.931:692578): pid=12455 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12456 suid=74 rport=38728 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447037583.931:692579): pid=12455 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447037583.932:692580): pid=12455 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447037583.932:692581): pid=12455 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22492 res=1
type=USER_ROLE_CHANGE msg=audit(1447037583.998:692582): pid=12455 uid=0 auid=0 ses=22492 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447037584.020:692583): pid=12455 uid=0 auid=0 ses=22492 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447037584.022:692584): pid=12455 uid=0 auid=0 ses=22492 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447037584.022:692585): pid=12455 uid=0 auid=0 ses=22492 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447037584.023:692586): pid=12458 uid=0 auid=0 ses=22492 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12458 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447037584.023:692587): pid=12458 uid=0 auid=0 ses=22492 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12458 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447037584.023:692588): pid=12458 uid=0 auid=0 ses=22492 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12458 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447037584.024:692589): pid=12458 uid=0 auid=0 ses=22492 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447037585.317:692590): pid=12455 uid=0 auid=0 ses=22492 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447037585.317:692591): pid=12455 uid=0 auid=0 ses=22492 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447037585.321:692592): pid=12455 uid=0 auid=0 ses=22492 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447037585.321:692593): pid=12455 uid=0 auid=0 ses=22492 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447037585.321:692594): pid=12455 uid=0 auid=0 ses=22492 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12455 suid=0 rport=38728 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447037585.322:692595): pid=12455 uid=0 auid=0 ses=22492 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12455 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447037585.322:692596): pid=12455 uid=0 auid=0 ses=22492 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12455 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447037585.322:692597): pid=12455 uid=0 auid=0 ses=22492 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12455 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447037585.350:692598): pid=12508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12508 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447037585.351:692599): pid=12508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12508 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447037585.351:692600): pid=12508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12508 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447037585.396:692601): pid=12507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=12508 suid=74 rport=38729 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447037585.396:692602): pid=12507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=12508 suid=74 rport=38729 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447037585.519:692603): pid=12507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38729 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447037585.519:692604): pid=12507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=38729 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447037585.525:692605): pid=12507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447037585.525:692606): pid=12507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12508 suid=74 rport=38729 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447037585.526:692607): pid=12507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447037585.526:692608): pid=12507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447037585.526:692609): pid=12507 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22493 res=1
type=USER_ROLE_CHANGE msg=audit(1447037585.591:692610): pid=12507 uid=0 auid=0 ses=22493 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447037585.615:692611): pid=12507 uid=0 auid=0 ses=22493 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447037585.619:692612): pid=12507 uid=0 auid=0 ses=22493 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447037585.619:692613): pid=12507 uid=0 auid=0 ses=22493 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447037585.620:692614): pid=12513 uid=0 auid=0 ses=22493 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12513 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447037585.620:692615): pid=12513 uid=0 auid=0 ses=22493 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12513 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447037585.620:692616): pid=12513 uid=0 auid=0 ses=22493 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12513 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447037585.621:692617): pid=12513 uid=0 auid=0 ses=22493 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447037585.640:692618): pid=12507 uid=0 auid=0 ses=22493 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447037585.640:692619): pid=12507 uid=0 auid=0 ses=22493 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447037585.643:692620): pid=12507 uid=0 auid=0 ses=22493 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447037585.644:692621): pid=12507 uid=0 auid=0 ses=22493 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447037585.645:692622): pid=12507 uid=0 auid=0 ses=22493 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12507 suid=0 rport=38729 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447037585.645:692623): pid=12507 uid=0 auid=0 ses=22493 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12507 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447037585.645:692624): pid=12507 uid=0 auid=0 ses=22493 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12507 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447037585.645:692625): pid=12507 uid=0 auid=0 ses=22493 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12507 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447038001.937:692626): pid=13803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447038001.937:692627): pid=13802 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447038001.937:692628): pid=13803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447038001.937:692629): pid=13802 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447038001.938:692630): pid=13802 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22494 res=1
type=LOGIN msg=audit(1447038001.938:692631): pid=13803 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22495 res=1
type=USER_START msg=audit(1447038001.956:692632): pid=13803 uid=0 auid=0 ses=22495 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447038001.956:692633): pid=13803 uid=0 auid=0 ses=22495 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447038001.961:692634): pid=13802 uid=0 auid=0 ses=22494 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447038001.961:692635): pid=13802 uid=0 auid=0 ses=22494 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447038001.965:692636): pid=13803 uid=0 auid=0 ses=22495 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447038001.966:692637): pid=13803 uid=0 auid=0 ses=22495 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447038001.977:692638): pid=13802 uid=0 auid=0 ses=22494 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447038001.978:692639): pid=13802 uid=0 auid=0 ses=22494 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447038061.988:692640): pid=13998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447038061.988:692641): pid=13998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447038061.989:692642): pid=13998 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22496 res=1
type=USER_START msg=audit(1447038061.999:692643): pid=13998 uid=0 auid=0 ses=22496 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447038061.999:692644): pid=13998 uid=0 auid=0 ses=22496 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447038062.028:692645): pid=13998 uid=0 auid=0 ses=22496 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447038062.029:692646): pid=13998 uid=0 auid=0 ses=22496 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1447038287.721:692647): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447038601.042:692648): pid=15766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447038601.042:692649): pid=15765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447038601.042:692650): pid=15766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447038601.042:692651): pid=15765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447038601.043:692652): pid=15765 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22497 res=1
type=LOGIN msg=audit(1447038601.043:692653): pid=15766 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22498 res=1
type=USER_START msg=audit(1447038601.063:692654): pid=15766 uid=0 auid=0 ses=22498 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447038601.063:692655): pid=15765 uid=0 auid=0 ses=22497 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447038601.063:692656): pid=15766 uid=0 auid=0 ses=22498 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447038601.063:692657): pid=15765 uid=0 auid=0 ses=22497 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447038601.071:692658): pid=15766 uid=0 auid=0 ses=22498 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447038601.073:692659): pid=15766 uid=0 auid=0 ses=22498 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447038601.076:692660): pid=15765 uid=0 auid=0 ses=22497 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447038626.102:692661): pid=15765 uid=0 auid=0 ses=22497 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=CRYPTO_KEY_USER msg=audit(1447038782.977:692662): pid=16324 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16324 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447038782.977:692663): pid=16324 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16324 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447038782.977:692664): pid=16324 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16324 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447038783.021:692665): pid=16323 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=16324 suid=74 rport=40707 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447038783.021:692666): pid=16323 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=16324 suid=74 rport=40707 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447038783.146:692667): pid=16323 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=40707 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447038783.146:692668): pid=16323 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=40707 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447038783.150:692669): pid=16323 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447038783.152:692670): pid=16323 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16324 suid=74 rport=40707 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447038783.153:692671): pid=16323 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447038783.153:692672): pid=16323 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447038783.154:692673): pid=16323 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22499 res=1
type=USER_ROLE_CHANGE msg=audit(1447038783.228:692674): pid=16323 uid=0 auid=0 ses=22499 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447038783.254:692675): pid=16323 uid=0 auid=0 ses=22499 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447038783.259:692676): pid=16323 uid=0 auid=0 ses=22499 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447038783.259:692677): pid=16323 uid=0 auid=0 ses=22499 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447038783.262:692678): pid=16358 uid=0 auid=0 ses=22499 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16358 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447038783.262:692679): pid=16358 uid=0 auid=0 ses=22499 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16358 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447038783.262:692680): pid=16358 uid=0 auid=0 ses=22499 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16358 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447038783.263:692681): pid=16358 uid=0 auid=0 ses=22499 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447038783.294:692682): pid=16323 uid=0 auid=0 ses=22499 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447038783.294:692683): pid=16323 uid=0 auid=0 ses=22499 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447038783.297:692684): pid=16323 uid=0 auid=0 ses=22499 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447038783.297:692685): pid=16323 uid=0 auid=0 ses=22499 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447038783.298:692686): pid=16323 uid=0 auid=0 ses=22499 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16323 suid=0 rport=40707 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447038783.298:692687): pid=16323 uid=0 auid=0 ses=22499 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16323 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447038783.298:692688): pid=16323 uid=0 auid=0 ses=22499 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16323 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447038783.298:692689): pid=16323 uid=0 auid=0 ses=22499 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16323 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447038783.319:692690): pid=16373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16373 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447038783.319:692691): pid=16373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16373 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447038783.319:692692): pid=16373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16373 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447038783.364:692693): pid=16372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=16373 suid=74 rport=40708 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447038783.364:692694): pid=16372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=16373 suid=74 rport=40708 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447038783.492:692695): pid=16372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=40708 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447038783.492:692696): pid=16372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=40708 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447038783.501:692697): pid=16372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447038783.503:692698): pid=16372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16373 suid=74 rport=40708 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447038783.503:692699): pid=16372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447038783.504:692700): pid=16372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447038783.504:692701): pid=16372 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22500 res=1
type=USER_ROLE_CHANGE msg=audit(1447038783.573:692702): pid=16372 uid=0 auid=0 ses=22500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447038783.598:692703): pid=16372 uid=0 auid=0 ses=22500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447038783.601:692704): pid=16372 uid=0 auid=0 ses=22500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447038783.601:692705): pid=16372 uid=0 auid=0 ses=22500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447038783.602:692706): pid=16375 uid=0 auid=0 ses=22500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16375 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447038783.602:692707): pid=16375 uid=0 auid=0 ses=22500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16375 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447038783.602:692708): pid=16375 uid=0 auid=0 ses=22500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16375 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447038783.603:692709): pid=16375 uid=0 auid=0 ses=22500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447038784.862:692710): pid=16372 uid=0 auid=0 ses=22500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447038784.862:692711): pid=16372 uid=0 auid=0 ses=22500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447038784.867:692712): pid=16372 uid=0 auid=0 ses=22500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447038784.867:692713): pid=16372 uid=0 auid=0 ses=22500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447038784.867:692714): pid=16372 uid=0 auid=0 ses=22500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16372 suid=0 rport=40708 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447038784.867:692715): pid=16372 uid=0 auid=0 ses=22500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16372 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447038784.868:692716): pid=16372 uid=0 auid=0 ses=22500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16372 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447038784.868:692717): pid=16372 uid=0 auid=0 ses=22500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16372 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447038784.900:692718): pid=16436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16436 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447038784.901:692719): pid=16436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16436 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447038784.901:692720): pid=16436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16436 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447038784.945:692721): pid=16435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=16436 suid=74 rport=40710 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447038784.945:692722): pid=16435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=16436 suid=74 rport=40710 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447038785.074:692723): pid=16435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=40710 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447038785.074:692724): pid=16435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=40710 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447038785.082:692725): pid=16435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447038785.084:692726): pid=16435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16436 suid=74 rport=40710 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447038785.085:692727): pid=16435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447038785.086:692728): pid=16435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447038785.086:692729): pid=16435 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22501 res=1
type=USER_ROLE_CHANGE msg=audit(1447038785.155:692730): pid=16435 uid=0 auid=0 ses=22501 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447038785.171:692731): pid=16435 uid=0 auid=0 ses=22501 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447038785.174:692732): pid=16435 uid=0 auid=0 ses=22501 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447038785.174:692733): pid=16435 uid=0 auid=0 ses=22501 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447038785.175:692734): pid=16438 uid=0 auid=0 ses=22501 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16438 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447038785.176:692735): pid=16438 uid=0 auid=0 ses=22501 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16438 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447038785.176:692736): pid=16438 uid=0 auid=0 ses=22501 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16438 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447038785.176:692737): pid=16438 uid=0 auid=0 ses=22501 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447038785.192:692738): pid=16435 uid=0 auid=0 ses=22501 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447038785.192:692739): pid=16435 uid=0 auid=0 ses=22501 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447038785.197:692740): pid=16435 uid=0 auid=0 ses=22501 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447038785.198:692741): pid=16435 uid=0 auid=0 ses=22501 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447038785.198:692742): pid=16435 uid=0 auid=0 ses=22501 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16435 suid=0 rport=40710 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447038785.199:692743): pid=16435 uid=0 auid=0 ses=22501 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16435 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447038785.199:692744): pid=16435 uid=0 auid=0 ses=22501 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16435 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447038785.199:692745): pid=16435 uid=0 auid=0 ses=22501 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16435 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447039201.126:692746): pid=17685 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447039201.126:692747): pid=17685 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447039201.126:692748): pid=17684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447039201.127:692749): pid=17684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447039201.127:692750): pid=17685 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22502 res=1
type=LOGIN msg=audit(1447039201.127:692751): pid=17684 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22503 res=1
type=USER_START msg=audit(1447039201.144:692752): pid=17685 uid=0 auid=0 ses=22502 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447039201.144:692753): pid=17684 uid=0 auid=0 ses=22503 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447039201.144:692754): pid=17684 uid=0 auid=0 ses=22503 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447039201.144:692755): pid=17685 uid=0 auid=0 ses=22502 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447039201.155:692756): pid=17685 uid=0 auid=0 ses=22502 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447039201.157:692757): pid=17685 uid=0 auid=0 ses=22502 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447039201.159:692758): pid=17684 uid=0 auid=0 ses=22503 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447039201.161:692759): pid=17684 uid=0 auid=0 ses=22503 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1447039335.758:692760): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447039801.177:692761): pid=19528 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447039801.177:692762): pid=19529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447039801.177:692763): pid=19529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447039801.177:692764): pid=19528 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447039801.177:692765): pid=19529 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22504 res=1
type=LOGIN msg=audit(1447039801.177:692766): pid=19528 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22505 res=1
type=USER_START msg=audit(1447039801.192:692767): pid=19529 uid=0 auid=0 ses=22504 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447039801.192:692768): pid=19529 uid=0 auid=0 ses=22504 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447039801.194:692769): pid=19528 uid=0 auid=0 ses=22505 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447039801.194:692770): pid=19528 uid=0 auid=0 ses=22505 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447039801.199:692771): pid=19529 uid=0 auid=0 ses=22504 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447039801.203:692772): pid=19529 uid=0 auid=0 ses=22504 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447039801.204:692773): pid=19528 uid=0 auid=0 ses=22505 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447039826.233:692774): pid=19528 uid=0 auid=0 ses=22505 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=CRYPTO_KEY_USER msg=audit(1447039983.098:692775): pid=20090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=20090 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447039983.098:692776): pid=20090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=20090 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447039983.099:692777): pid=20090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=20090 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447039983.142:692778): pid=20089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=20090 suid=74 rport=42688 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447039983.142:692779): pid=20089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=20090 suid=74 rport=42688 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447039983.269:692780): pid=20089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42688 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447039983.269:692781): pid=20089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=42688 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447039983.277:692782): pid=20089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447039983.279:692783): pid=20089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20090 suid=74 rport=42688 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447039983.280:692784): pid=20089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447039983.280:692785): pid=20089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447039983.281:692786): pid=20089 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22506 res=1
type=USER_ROLE_CHANGE msg=audit(1447039983.348:692787): pid=20089 uid=0 auid=0 ses=22506 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447039983.369:692788): pid=20089 uid=0 auid=0 ses=22506 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447039983.372:692789): pid=20089 uid=0 auid=0 ses=22506 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447039983.372:692790): pid=20089 uid=0 auid=0 ses=22506 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447039983.373:692791): pid=20092 uid=0 auid=0 ses=22506 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=20092 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447039983.373:692792): pid=20092 uid=0 auid=0 ses=22506 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=20092 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447039983.373:692793): pid=20092 uid=0 auid=0 ses=22506 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=20092 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447039983.374:692794): pid=20092 uid=0 auid=0 ses=22506 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447039983.393:692795): pid=20089 uid=0 auid=0 ses=22506 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447039983.393:692796): pid=20089 uid=0 auid=0 ses=22506 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447039983.396:692797): pid=20089 uid=0 auid=0 ses=22506 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447039983.396:692798): pid=20089 uid=0 auid=0 ses=22506 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447039983.397:692799): pid=20089 uid=0 auid=0 ses=22506 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20089 suid=0 rport=42688 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447039983.397:692800): pid=20089 uid=0 auid=0 ses=22506 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=20089 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447039983.397:692801): pid=20089 uid=0 auid=0 ses=22506 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=20089 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447039983.397:692802): pid=20089 uid=0 auid=0 ses=22506 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=20089 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447039983.419:692803): pid=20099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=20099 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447039983.419:692804): pid=20099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=20099 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447039983.420:692805): pid=20099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=20099 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447039983.463:692806): pid=20098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=20099 suid=74 rport=42689 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447039983.464:692807): pid=20098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=20099 suid=74 rport=42689 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447039983.593:692808): pid=20098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42689 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447039983.593:692809): pid=20098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=42689 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447039983.601:692810): pid=20098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447039983.603:692811): pid=20098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20099 suid=74 rport=42689 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447039983.605:692812): pid=20098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447039983.605:692813): pid=20098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447039983.605:692814): pid=20098 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22507 res=1
type=USER_ROLE_CHANGE msg=audit(1447039983.674:692815): pid=20098 uid=0 auid=0 ses=22507 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447039983.691:692816): pid=20098 uid=0 auid=0 ses=22507 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447039983.694:692817): pid=20098 uid=0 auid=0 ses=22507 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447039983.694:692818): pid=20098 uid=0 auid=0 ses=22507 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447039983.695:692819): pid=20101 uid=0 auid=0 ses=22507 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=20101 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447039983.695:692820): pid=20101 uid=0 auid=0 ses=22507 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=20101 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447039983.695:692821): pid=20101 uid=0 auid=0 ses=22507 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=20101 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447039983.696:692822): pid=20101 uid=0 auid=0 ses=22507 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447039984.980:692823): pid=20098 uid=0 auid=0 ses=22507 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447039984.980:692824): pid=20098 uid=0 auid=0 ses=22507 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447039984.985:692825): pid=20098 uid=0 auid=0 ses=22507 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447039984.985:692826): pid=20098 uid=0 auid=0 ses=22507 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447039984.986:692827): pid=20098 uid=0 auid=0 ses=22507 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20098 suid=0 rport=42689 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447039984.986:692828): pid=20098 uid=0 auid=0 ses=22507 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=20098 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447039984.986:692829): pid=20098 uid=0 auid=0 ses=22507 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=20098 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447039984.986:692830): pid=20098 uid=0 auid=0 ses=22507 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=20098 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447039985.021:692831): pid=20150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=20150 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447039985.021:692832): pid=20150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=20150 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447039985.021:692833): pid=20150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=20150 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447039985.066:692834): pid=20149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=20150 suid=74 rport=42691 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447039985.066:692835): pid=20149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=20150 suid=74 rport=42691 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447039985.197:692836): pid=20149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42691 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447039985.197:692837): pid=20149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=42691 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447039985.206:692838): pid=20149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447039985.207:692839): pid=20149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20150 suid=74 rport=42691 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447039985.209:692840): pid=20149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447039985.209:692841): pid=20149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447039985.209:692842): pid=20149 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22508 res=1
type=USER_ROLE_CHANGE msg=audit(1447039985.274:692843): pid=20149 uid=0 auid=0 ses=22508 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447039985.297:692844): pid=20149 uid=0 auid=0 ses=22508 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447039985.299:692845): pid=20149 uid=0 auid=0 ses=22508 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447039985.299:692846): pid=20149 uid=0 auid=0 ses=22508 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447039985.301:692847): pid=20152 uid=0 auid=0 ses=22508 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=20152 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447039985.301:692848): pid=20152 uid=0 auid=0 ses=22508 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=20152 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447039985.301:692849): pid=20152 uid=0 auid=0 ses=22508 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=20152 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447039985.302:692850): pid=20152 uid=0 auid=0 ses=22508 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447039985.317:692851): pid=20149 uid=0 auid=0 ses=22508 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447039985.318:692852): pid=20149 uid=0 auid=0 ses=22508 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447039985.321:692853): pid=20149 uid=0 auid=0 ses=22508 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447039985.322:692854): pid=20149 uid=0 auid=0 ses=22508 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447039985.322:692855): pid=20149 uid=0 auid=0 ses=22508 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20149 suid=0 rport=42691 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447039985.322:692856): pid=20149 uid=0 auid=0 ses=22508 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=20149 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447039985.322:692857): pid=20149 uid=0 auid=0 ses=22508 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=20149 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447039985.322:692858): pid=20149 uid=0 auid=0 ses=22508 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=20149 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=SYSCALL msg=audit(1447040400.735:692859): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447040401.260:692861): pid=21439 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447040401.260:692860): pid=21440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447040401.260:692862): pid=21439 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447040401.260:692863): pid=21440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447040401.261:692864): pid=21440 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22509 res=1
type=LOGIN msg=audit(1447040401.261:692865): pid=21439 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22510 res=1
type=USER_START msg=audit(1447040401.281:692866): pid=21440 uid=0 auid=0 ses=22509 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447040401.281:692867): pid=21439 uid=0 auid=0 ses=22510 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447040401.281:692869): pid=21440 uid=0 auid=0 ses=22509 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447040401.281:692868): pid=21439 uid=0 auid=0 ses=22510 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447040401.290:692870): pid=21440 uid=0 auid=0 ses=22509 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447040401.292:692871): pid=21440 uid=0 auid=0 ses=22509 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447040401.300:692872): pid=21439 uid=0 auid=0 ses=22510 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447040401.301:692873): pid=21439 uid=0 auid=0 ses=22510 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447041001.318:692874): pid=23286 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447041001.318:692875): pid=23286 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447041001.318:692876): pid=23286 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22511 res=1
type=USER_ACCT msg=audit(1447041001.319:692877): pid=23285 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447041001.319:692878): pid=23285 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447041001.319:692879): pid=23285 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22512 res=1
type=USER_START msg=audit(1447041001.331:692880): pid=23286 uid=0 auid=0 ses=22511 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447041001.331:692881): pid=23285 uid=0 auid=0 ses=22512 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447041001.331:692882): pid=23286 uid=0 auid=0 ses=22511 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447041001.331:692883): pid=23285 uid=0 auid=0 ses=22512 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447041001.340:692884): pid=23286 uid=0 auid=0 ses=22511 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447041001.341:692885): pid=23286 uid=0 auid=0 ses=22511 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447041001.342:692886): pid=23285 uid=0 auid=0 ses=22512 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447041001.344:692887): pid=23285 uid=0 auid=0 ses=22512 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447041182.661:692888): pid=23880 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=23880 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447041182.662:692889): pid=23880 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=23880 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447041182.662:692890): pid=23880 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=23880 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447041182.706:692891): pid=23879 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=23880 suid=74 rport=44668 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447041182.707:692892): pid=23879 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=23880 suid=74 rport=44668 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447041182.837:692893): pid=23879 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=44668 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447041182.837:692894): pid=23879 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=44668 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447041182.846:692895): pid=23879 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447041182.848:692896): pid=23879 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23880 suid=74 rport=44668 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447041182.848:692897): pid=23879 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447041182.849:692898): pid=23879 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447041182.849:692899): pid=23879 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22513 res=1
type=USER_ROLE_CHANGE msg=audit(1447041182.921:692900): pid=23879 uid=0 auid=0 ses=22513 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447041182.941:692901): pid=23879 uid=0 auid=0 ses=22513 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447041182.945:692902): pid=23879 uid=0 auid=0 ses=22513 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447041182.945:692903): pid=23879 uid=0 auid=0 ses=22513 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447041182.947:692904): pid=23882 uid=0 auid=0 ses=22513 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=23882 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447041182.947:692905): pid=23882 uid=0 auid=0 ses=22513 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=23882 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447041182.947:692906): pid=23882 uid=0 auid=0 ses=22513 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=23882 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447041182.947:692907): pid=23882 uid=0 auid=0 ses=22513 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447041182.967:692908): pid=23879 uid=0 auid=0 ses=22513 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447041182.968:692909): pid=23879 uid=0 auid=0 ses=22513 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447041182.971:692910): pid=23879 uid=0 auid=0 ses=22513 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447041182.972:692911): pid=23879 uid=0 auid=0 ses=22513 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447041182.972:692912): pid=23879 uid=0 auid=0 ses=22513 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23879 suid=0 rport=44668 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447041182.972:692913): pid=23879 uid=0 auid=0 ses=22513 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=23879 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447041182.972:692914): pid=23879 uid=0 auid=0 ses=22513 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=23879 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447041182.972:692915): pid=23879 uid=0 auid=0 ses=22513 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=23879 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447041182.993:692916): pid=23890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=23890 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447041182.993:692917): pid=23890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=23890 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447041182.994:692918): pid=23890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=23890 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447041183.039:692919): pid=23889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=23890 suid=74 rport=44669 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447041183.040:692920): pid=23889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=23890 suid=74 rport=44669 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447041183.168:692921): pid=23889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=44669 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447041183.168:692922): pid=23889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=44669 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447041183.178:692923): pid=23889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447041183.179:692924): pid=23889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23890 suid=74 rport=44669 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447041183.180:692925): pid=23889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447041183.180:692926): pid=23889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447041183.180:692927): pid=23889 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22514 res=1
type=USER_ROLE_CHANGE msg=audit(1447041183.248:692928): pid=23889 uid=0 auid=0 ses=22514 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447041183.271:692929): pid=23889 uid=0 auid=0 ses=22514 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447041183.274:692930): pid=23889 uid=0 auid=0 ses=22514 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447041183.274:692931): pid=23889 uid=0 auid=0 ses=22514 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447041183.275:692932): pid=23892 uid=0 auid=0 ses=22514 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=23892 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447041183.275:692933): pid=23892 uid=0 auid=0 ses=22514 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=23892 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447041183.275:692934): pid=23892 uid=0 auid=0 ses=22514 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=23892 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447041183.276:692935): pid=23892 uid=0 auid=0 ses=22514 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447041184.551:692936): pid=23889 uid=0 auid=0 ses=22514 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447041184.551:692937): pid=23889 uid=0 auid=0 ses=22514 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447041184.555:692938): pid=23889 uid=0 auid=0 ses=22514 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447041184.555:692939): pid=23889 uid=0 auid=0 ses=22514 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447041184.555:692940): pid=23889 uid=0 auid=0 ses=22514 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23889 suid=0 rport=44669 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447041184.555:692941): pid=23889 uid=0 auid=0 ses=22514 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=23889 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447041184.555:692942): pid=23889 uid=0 auid=0 ses=22514 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=23889 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447041184.556:692943): pid=23889 uid=0 auid=0 ses=22514 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=23889 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447041184.587:692944): pid=23942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=23942 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447041184.587:692945): pid=23942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=23942 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447041184.587:692946): pid=23942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=23942 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447041184.632:692947): pid=23941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=23942 suid=74 rport=44672 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447041184.632:692948): pid=23941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=23942 suid=74 rport=44672 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447041184.760:692949): pid=23941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=44672 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447041184.760:692950): pid=23941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=44672 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447041184.770:692951): pid=23941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447041184.770:692952): pid=23941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23942 suid=74 rport=44672 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447041184.772:692953): pid=23941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447041184.772:692954): pid=23941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447041184.773:692955): pid=23941 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22515 res=1
type=USER_ROLE_CHANGE msg=audit(1447041184.842:692956): pid=23941 uid=0 auid=0 ses=22515 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447041184.860:692957): pid=23941 uid=0 auid=0 ses=22515 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447041184.863:692958): pid=23941 uid=0 auid=0 ses=22515 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447041184.863:692959): pid=23941 uid=0 auid=0 ses=22515 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447041184.865:692960): pid=23944 uid=0 auid=0 ses=22515 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=23944 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447041184.865:692961): pid=23944 uid=0 auid=0 ses=22515 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=23944 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447041184.865:692962): pid=23944 uid=0 auid=0 ses=22515 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=23944 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447041184.865:692963): pid=23944 uid=0 auid=0 ses=22515 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447041184.882:692964): pid=23941 uid=0 auid=0 ses=22515 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447041184.882:692965): pid=23941 uid=0 auid=0 ses=22515 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447041184.885:692966): pid=23941 uid=0 auid=0 ses=22515 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447041184.885:692967): pid=23941 uid=0 auid=0 ses=22515 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447041184.886:692968): pid=23941 uid=0 auid=0 ses=22515 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23941 suid=0 rport=44672 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447041184.886:692969): pid=23941 uid=0 auid=0 ses=22515 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=23941 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447041184.886:692970): pid=23941 uid=0 auid=0 ses=22515 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=23941 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447041184.886:692971): pid=23941 uid=0 auid=0 ses=22515 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=23941 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447041601.372:692972): pid=25237 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447041601.372:692973): pid=25237 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447041601.374:692974): pid=25237 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22516 res=1
type=USER_ACCT msg=audit(1447041601.382:692975): pid=25236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447041601.382:692976): pid=25236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447041601.382:692977): pid=25236 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22517 res=1
type=USER_START msg=audit(1447041601.395:692978): pid=25236 uid=0 auid=0 ses=22517 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447041601.395:692979): pid=25237 uid=0 auid=0 ses=22516 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447041601.396:692980): pid=25237 uid=0 auid=0 ses=22516 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447041601.396:692981): pid=25236 uid=0 auid=0 ses=22517 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447041601.404:692982): pid=25237 uid=0 auid=0 ses=22516 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447041601.405:692983): pid=25237 uid=0 auid=0 ses=22516 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447041601.416:692984): pid=25236 uid=0 auid=0 ses=22517 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447041601.417:692985): pid=25236 uid=0 auid=0 ses=22517 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447041661.433:692986): pid=25472 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447041661.433:692987): pid=25472 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447041661.434:692988): pid=25472 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22518 res=1
type=USER_START msg=audit(1447041661.448:692989): pid=25472 uid=0 auid=0 ses=22518 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447041661.448:692990): pid=25472 uid=0 auid=0 ses=22518 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447041661.472:692991): pid=25472 uid=0 auid=0 ses=22518 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447041661.474:692992): pid=25472 uid=0 auid=0 ses=22518 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447042201.490:692993): pid=27140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447042201.490:692994): pid=27140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447042201.491:692995): pid=27141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447042201.491:692996): pid=27141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447042201.491:692997): pid=27140 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22519 res=1
type=LOGIN msg=audit(1447042201.491:692998): pid=27141 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22520 res=1
type=USER_START msg=audit(1447042201.505:692999): pid=27140 uid=0 auid=0 ses=22519 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447042201.506:693000): pid=27140 uid=0 auid=0 ses=22519 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447042201.507:693001): pid=27141 uid=0 auid=0 ses=22520 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447042201.507:693002): pid=27141 uid=0 auid=0 ses=22520 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447042201.516:693003): pid=27141 uid=0 auid=0 ses=22520 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447042201.517:693004): pid=27141 uid=0 auid=0 ses=22520 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447042201.518:693005): pid=27140 uid=0 auid=0 ses=22519 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447042201.521:693006): pid=27140 uid=0 auid=0 ses=22519 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447042382.785:693007): pid=27701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=27701 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447042382.785:693008): pid=27701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=27701 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447042382.785:693009): pid=27701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27701 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447042382.829:693010): pid=27700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=27701 suid=74 rport=46649 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447042382.829:693011): pid=27700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=27701 suid=74 rport=46649 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447042382.957:693012): pid=27700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=46649 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447042382.957:693013): pid=27700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=46649 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447042382.964:693014): pid=27700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447042382.965:693015): pid=27700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27701 suid=74 rport=46649 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447042382.966:693016): pid=27700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447042382.967:693017): pid=27700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447042382.967:693018): pid=27700 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22521 res=1
type=USER_ROLE_CHANGE msg=audit(1447042383.034:693019): pid=27700 uid=0 auid=0 ses=22521 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447042383.052:693020): pid=27700 uid=0 auid=0 ses=22521 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447042383.055:693021): pid=27700 uid=0 auid=0 ses=22521 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447042383.055:693022): pid=27700 uid=0 auid=0 ses=22521 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447042383.057:693023): pid=27703 uid=0 auid=0 ses=22521 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=27703 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447042383.058:693024): pid=27703 uid=0 auid=0 ses=22521 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=27703 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447042383.058:693025): pid=27703 uid=0 auid=0 ses=22521 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27703 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447042383.058:693026): pid=27703 uid=0 auid=0 ses=22521 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447042383.078:693027): pid=27700 uid=0 auid=0 ses=22521 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447042383.079:693028): pid=27700 uid=0 auid=0 ses=22521 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447042383.084:693029): pid=27700 uid=0 auid=0 ses=22521 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447042383.085:693030): pid=27700 uid=0 auid=0 ses=22521 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447042383.085:693031): pid=27700 uid=0 auid=0 ses=22521 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27700 suid=0 rport=46649 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447042383.085:693032): pid=27700 uid=0 auid=0 ses=22521 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=27700 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447042383.085:693033): pid=27700 uid=0 auid=0 ses=22521 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=27700 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447042383.085:693034): pid=27700 uid=0 auid=0 ses=22521 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27700 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447042383.104:693035): pid=27711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=27711 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447042383.104:693036): pid=27711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=27711 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447042383.104:693037): pid=27711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27711 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447042383.148:693038): pid=27710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=27711 suid=74 rport=46650 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447042383.149:693039): pid=27710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=27711 suid=74 rport=46650 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447042383.279:693040): pid=27710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=46650 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447042383.279:693041): pid=27710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=46650 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447042383.287:693042): pid=27710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447042383.288:693043): pid=27710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27711 suid=74 rport=46650 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447042383.290:693044): pid=27710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447042383.291:693045): pid=27710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447042383.291:693046): pid=27710 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22522 res=1
type=USER_ROLE_CHANGE msg=audit(1447042383.360:693047): pid=27710 uid=0 auid=0 ses=22522 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447042383.385:693048): pid=27710 uid=0 auid=0 ses=22522 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447042383.388:693049): pid=27710 uid=0 auid=0 ses=22522 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447042383.388:693050): pid=27710 uid=0 auid=0 ses=22522 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447042383.389:693051): pid=27713 uid=0 auid=0 ses=22522 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=27713 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447042383.390:693052): pid=27713 uid=0 auid=0 ses=22522 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=27713 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447042383.390:693053): pid=27713 uid=0 auid=0 ses=22522 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27713 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447042383.390:693054): pid=27713 uid=0 auid=0 ses=22522 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447042384.680:693055): pid=27710 uid=0 auid=0 ses=22522 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447042384.681:693056): pid=27710 uid=0 auid=0 ses=22522 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447042384.685:693057): pid=27710 uid=0 auid=0 ses=22522 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447042384.685:693058): pid=27710 uid=0 auid=0 ses=22522 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447042384.686:693059): pid=27710 uid=0 auid=0 ses=22522 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27710 suid=0 rport=46650 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447042384.686:693060): pid=27710 uid=0 auid=0 ses=22522 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=27710 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447042384.686:693061): pid=27710 uid=0 auid=0 ses=22522 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=27710 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447042384.686:693062): pid=27710 uid=0 auid=0 ses=22522 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27710 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447042384.719:693063): pid=27763 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=27763 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447042384.719:693064): pid=27763 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=27763 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447042384.719:693065): pid=27763 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27763 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447042384.763:693066): pid=27762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=27763 suid=74 rport=46652 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447042384.763:693067): pid=27762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=27763 suid=74 rport=46652 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447042384.885:693068): pid=27762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=46652 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447042384.885:693069): pid=27762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=46652 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447042384.895:693070): pid=27762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447042384.895:693071): pid=27762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27763 suid=74 rport=46652 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447042384.898:693072): pid=27762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447042384.899:693073): pid=27762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447042384.899:693074): pid=27762 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22523 res=1
type=USER_ROLE_CHANGE msg=audit(1447042384.966:693075): pid=27762 uid=0 auid=0 ses=22523 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447042384.988:693076): pid=27762 uid=0 auid=0 ses=22523 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447042384.991:693077): pid=27762 uid=0 auid=0 ses=22523 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447042384.992:693078): pid=27762 uid=0 auid=0 ses=22523 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447042384.993:693079): pid=27765 uid=0 auid=0 ses=22523 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=27765 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447042384.993:693080): pid=27765 uid=0 auid=0 ses=22523 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=27765 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447042384.993:693081): pid=27765 uid=0 auid=0 ses=22523 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27765 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447042384.994:693082): pid=27765 uid=0 auid=0 ses=22523 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447042385.010:693083): pid=27762 uid=0 auid=0 ses=22523 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447042385.010:693084): pid=27762 uid=0 auid=0 ses=22523 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447042385.015:693085): pid=27762 uid=0 auid=0 ses=22523 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447042385.015:693086): pid=27762 uid=0 auid=0 ses=22523 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447042385.016:693087): pid=27762 uid=0 auid=0 ses=22523 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27762 suid=0 rport=46652 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447042385.016:693088): pid=27762 uid=0 auid=0 ses=22523 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=27762 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447042385.016:693089): pid=27762 uid=0 auid=0 ses=22523 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=27762 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447042385.016:693090): pid=27762 uid=0 auid=0 ses=22523 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27762 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=SYSCALL msg=audit(1447042543.759:693091): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447042801.547:693092): pid=29062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447042801.547:693093): pid=29062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447042801.548:693094): pid=29063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447042801.548:693095): pid=29063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447042801.549:693096): pid=29063 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22524 res=1
type=LOGIN msg=audit(1447042801.549:693097): pid=29062 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22525 res=1
type=USER_START msg=audit(1447042801.569:693098): pid=29062 uid=0 auid=0 ses=22525 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447042801.569:693099): pid=29063 uid=0 auid=0 ses=22524 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447042801.570:693100): pid=29063 uid=0 auid=0 ses=22524 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447042801.570:693101): pid=29062 uid=0 auid=0 ses=22525 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447042801.577:693102): pid=29063 uid=0 auid=0 ses=22524 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447042801.579:693103): pid=29063 uid=0 auid=0 ses=22524 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447042801.590:693104): pid=29062 uid=0 auid=0 ses=22525 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447042801.591:693105): pid=29062 uid=0 auid=0 ses=22525 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447043401.603:693106): pid=30906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447043401.604:693107): pid=30906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447043401.604:693108): pid=30906 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22526 res=1
type=USER_ACCT msg=audit(1447043401.605:693109): pid=30907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447043401.605:693110): pid=30907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447043401.605:693111): pid=30907 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22527 res=1
type=USER_START msg=audit(1447043401.619:693112): pid=30906 uid=0 auid=0 ses=22526 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447043401.619:693113): pid=30906 uid=0 auid=0 ses=22526 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447043401.620:693114): pid=30907 uid=0 auid=0 ses=22527 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447043401.620:693115): pid=30907 uid=0 auid=0 ses=22527 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447043401.627:693116): pid=30907 uid=0 auid=0 ses=22527 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447043401.629:693117): pid=30907 uid=0 auid=0 ses=22527 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447043401.630:693118): pid=30906 uid=0 auid=0 ses=22526 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447043426.657:693119): pid=30906 uid=0 auid=0 ses=22526 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=CRYPTO_KEY_USER msg=audit(1447043583.318:693120): pid=31468 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=31468 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447043583.318:693121): pid=31468 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=31468 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447043583.318:693122): pid=31468 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=31468 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447043583.363:693123): pid=31467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=31468 suid=74 rport=48629 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447043583.363:693124): pid=31467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=31468 suid=74 rport=48629 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447043583.484:693125): pid=31467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=48629 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447043583.484:693126): pid=31467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=48629 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447043583.489:693127): pid=31467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447043583.489:693128): pid=31467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=31468 suid=74 rport=48629 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447043583.491:693129): pid=31467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447043583.491:693130): pid=31467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447043583.492:693131): pid=31467 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22528 res=1
type=USER_ROLE_CHANGE msg=audit(1447043583.563:693132): pid=31467 uid=0 auid=0 ses=22528 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447043583.584:693133): pid=31467 uid=0 auid=0 ses=22528 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447043583.586:693134): pid=31467 uid=0 auid=0 ses=22528 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447043583.587:693135): pid=31467 uid=0 auid=0 ses=22528 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447043583.588:693136): pid=31470 uid=0 auid=0 ses=22528 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=31470 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447043583.588:693137): pid=31470 uid=0 auid=0 ses=22528 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=31470 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447043583.588:693138): pid=31470 uid=0 auid=0 ses=22528 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=31470 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447043583.589:693139): pid=31470 uid=0 auid=0 ses=22528 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447043583.607:693140): pid=31467 uid=0 auid=0 ses=22528 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447043583.607:693141): pid=31467 uid=0 auid=0 ses=22528 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447043583.611:693142): pid=31467 uid=0 auid=0 ses=22528 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447043583.611:693143): pid=31467 uid=0 auid=0 ses=22528 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447043583.611:693144): pid=31467 uid=0 auid=0 ses=22528 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=31467 suid=0 rport=48629 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447043583.611:693145): pid=31467 uid=0 auid=0 ses=22528 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=31467 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447043583.611:693146): pid=31467 uid=0 auid=0 ses=22528 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=31467 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447043583.611:693147): pid=31467 uid=0 auid=0 ses=22528 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=31467 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447043583.633:693148): pid=31478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=31478 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447043583.634:693149): pid=31478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=31478 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447043583.634:693150): pid=31478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=31478 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447043583.678:693151): pid=31477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=31478 suid=74 rport=48630 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447043583.678:693152): pid=31477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=31478 suid=74 rport=48630 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447043583.805:693153): pid=31477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=48630 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447043583.805:693154): pid=31477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=48630 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447043583.813:693155): pid=31477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447043583.814:693156): pid=31477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=31478 suid=74 rport=48630 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447043583.816:693157): pid=31477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447043583.816:693158): pid=31477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447043583.817:693159): pid=31477 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22529 res=1
type=USER_ROLE_CHANGE msg=audit(1447043583.882:693160): pid=31477 uid=0 auid=0 ses=22529 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447043583.908:693161): pid=31477 uid=0 auid=0 ses=22529 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447043583.911:693162): pid=31477 uid=0 auid=0 ses=22529 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447043583.911:693163): pid=31477 uid=0 auid=0 ses=22529 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447043583.912:693164): pid=31480 uid=0 auid=0 ses=22529 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=31480 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447043583.912:693165): pid=31480 uid=0 auid=0 ses=22529 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=31480 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447043583.912:693166): pid=31480 uid=0 auid=0 ses=22529 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=31480 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447043583.913:693167): pid=31480 uid=0 auid=0 ses=22529 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447043585.205:693168): pid=31477 uid=0 auid=0 ses=22529 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447043585.205:693169): pid=31477 uid=0 auid=0 ses=22529 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447043585.210:693170): pid=31477 uid=0 auid=0 ses=22529 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447043585.210:693171): pid=31477 uid=0 auid=0 ses=22529 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447043585.211:693172): pid=31477 uid=0 auid=0 ses=22529 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=31477 suid=0 rport=48630 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447043585.211:693173): pid=31477 uid=0 auid=0 ses=22529 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=31477 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447043585.211:693174): pid=31477 uid=0 auid=0 ses=22529 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=31477 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447043585.211:693175): pid=31477 uid=0 auid=0 ses=22529 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=31477 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447043585.241:693176): pid=31530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=31530 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447043585.242:693177): pid=31530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=31530 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447043585.242:693178): pid=31530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=31530 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447043585.285:693179): pid=31529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=31530 suid=74 rport=48632 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447043585.286:693180): pid=31529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=31530 suid=74 rport=48632 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447043585.413:693181): pid=31529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=48632 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447043585.413:693182): pid=31529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=48632 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447043585.421:693183): pid=31529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447043585.421:693184): pid=31529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=31530 suid=74 rport=48632 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447043585.423:693185): pid=31529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447043585.424:693186): pid=31529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447043585.424:693187): pid=31529 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22530 res=1
type=USER_ROLE_CHANGE msg=audit(1447043585.489:693188): pid=31529 uid=0 auid=0 ses=22530 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447043585.508:693189): pid=31529 uid=0 auid=0 ses=22530 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447043585.511:693190): pid=31529 uid=0 auid=0 ses=22530 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447043585.511:693191): pid=31529 uid=0 auid=0 ses=22530 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447043585.513:693192): pid=31532 uid=0 auid=0 ses=22530 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=31532 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447043585.513:693193): pid=31532 uid=0 auid=0 ses=22530 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=31532 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447043585.513:693194): pid=31532 uid=0 auid=0 ses=22530 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=31532 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447043585.514:693195): pid=31532 uid=0 auid=0 ses=22530 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447043585.530:693196): pid=31529 uid=0 auid=0 ses=22530 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447043585.530:693197): pid=31529 uid=0 auid=0 ses=22530 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447043585.534:693198): pid=31529 uid=0 auid=0 ses=22530 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447043585.534:693199): pid=31529 uid=0 auid=0 ses=22530 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447043585.535:693200): pid=31529 uid=0 auid=0 ses=22530 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=31529 suid=0 rport=48632 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447043585.535:693201): pid=31529 uid=0 auid=0 ses=22530 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=31529 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447043585.535:693202): pid=31529 uid=0 auid=0 ses=22530 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=31529 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447043585.535:693203): pid=31529 uid=0 auid=0 ses=22530 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=31529 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447044001.681:693204): pid=372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447044001.681:693205): pid=373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447044001.682:693207): pid=373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447044001.682:693206): pid=372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447044001.683:693208): pid=373 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22531 res=1
type=LOGIN msg=audit(1447044001.683:693209): pid=372 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22532 res=1
type=USER_START msg=audit(1447044001.699:693210): pid=373 uid=0 auid=0 ses=22531 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447044001.700:693211): pid=372 uid=0 auid=0 ses=22532 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447044001.700:693212): pid=373 uid=0 auid=0 ses=22531 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447044001.700:693213): pid=372 uid=0 auid=0 ses=22532 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447044001.709:693214): pid=373 uid=0 auid=0 ses=22531 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447044001.710:693215): pid=373 uid=0 auid=0 ses=22531 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447044001.714:693216): pid=372 uid=0 auid=0 ses=22532 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447044026.741:693217): pid=372 uid=0 auid=0 ses=22532 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=USER_ACCT msg=audit(1447044601.756:693219): pid=2324 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447044601.756:693218): pid=2325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447044601.756:693220): pid=2325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447044601.756:693221): pid=2324 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447044601.756:693222): pid=2325 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22533 res=1
type=LOGIN msg=audit(1447044601.756:693223): pid=2324 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22534 res=1
type=USER_START msg=audit(1447044601.772:693224): pid=2325 uid=0 auid=0 ses=22533 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447044601.772:693225): pid=2324 uid=0 auid=0 ses=22534 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447044601.772:693226): pid=2325 uid=0 auid=0 ses=22533 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447044601.772:693227): pid=2324 uid=0 auid=0 ses=22534 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447044601.779:693228): pid=2325 uid=0 auid=0 ses=22533 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447044601.780:693229): pid=2325 uid=0 auid=0 ses=22533 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447044601.785:693230): pid=2324 uid=0 auid=0 ses=22534 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447044601.786:693231): pid=2324 uid=0 auid=0 ses=22534 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1447044624.755:693232): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=CRYPTO_KEY_USER msg=audit(1447044782.428:693233): pid=2885 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=2885 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447044782.428:693234): pid=2885 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=2885 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447044782.428:693235): pid=2885 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=2885 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447044782.471:693236): pid=2884 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=2885 suid=74 rport=50607 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447044782.471:693237): pid=2884 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=2885 suid=74 rport=50607 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447044782.603:693238): pid=2884 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=50607 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447044782.603:693239): pid=2884 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=50607 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447044782.611:693240): pid=2884 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447044782.613:693241): pid=2884 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2885 suid=74 rport=50607 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447044782.615:693242): pid=2884 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447044782.615:693243): pid=2884 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447044782.615:693244): pid=2884 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22535 res=1
type=USER_ROLE_CHANGE msg=audit(1447044782.682:693245): pid=2884 uid=0 auid=0 ses=22535 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447044782.705:693246): pid=2884 uid=0 auid=0 ses=22535 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447044782.708:693247): pid=2884 uid=0 auid=0 ses=22535 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447044782.708:693248): pid=2884 uid=0 auid=0 ses=22535 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447044782.709:693249): pid=2887 uid=0 auid=0 ses=22535 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=2887 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447044782.710:693250): pid=2887 uid=0 auid=0 ses=22535 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=2887 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447044782.710:693251): pid=2887 uid=0 auid=0 ses=22535 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=2887 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447044782.710:693252): pid=2887 uid=0 auid=0 ses=22535 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447044782.729:693253): pid=2884 uid=0 auid=0 ses=22535 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447044782.729:693254): pid=2884 uid=0 auid=0 ses=22535 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447044782.736:693255): pid=2884 uid=0 auid=0 ses=22535 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447044782.736:693256): pid=2884 uid=0 auid=0 ses=22535 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447044782.737:693257): pid=2884 uid=0 auid=0 ses=22535 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2884 suid=0 rport=50607 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447044782.737:693258): pid=2884 uid=0 auid=0 ses=22535 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=2884 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447044782.737:693259): pid=2884 uid=0 auid=0 ses=22535 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=2884 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447044782.737:693260): pid=2884 uid=0 auid=0 ses=22535 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=2884 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447044782.756:693261): pid=2895 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=2895 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447044782.756:693262): pid=2895 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=2895 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447044782.756:693263): pid=2895 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=2895 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447044782.801:693264): pid=2894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=2895 suid=74 rport=50608 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447044782.801:693265): pid=2894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=2895 suid=74 rport=50608 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447044782.930:693266): pid=2894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=50608 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447044782.930:693267): pid=2894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=50608 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447044782.938:693268): pid=2894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447044782.940:693269): pid=2894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2895 suid=74 rport=50608 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447044782.943:693270): pid=2894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447044782.944:693271): pid=2894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447044782.944:693272): pid=2894 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22536 res=1
type=USER_ROLE_CHANGE msg=audit(1447044783.013:693273): pid=2894 uid=0 auid=0 ses=22536 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447044783.039:693274): pid=2894 uid=0 auid=0 ses=22536 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447044783.042:693275): pid=2894 uid=0 auid=0 ses=22536 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447044783.042:693276): pid=2894 uid=0 auid=0 ses=22536 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447044783.044:693277): pid=2897 uid=0 auid=0 ses=22536 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=2897 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447044783.044:693278): pid=2897 uid=0 auid=0 ses=22536 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=2897 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447044783.044:693279): pid=2897 uid=0 auid=0 ses=22536 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=2897 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447044783.044:693280): pid=2897 uid=0 auid=0 ses=22536 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447044784.337:693281): pid=2894 uid=0 auid=0 ses=22536 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447044784.337:693282): pid=2894 uid=0 auid=0 ses=22536 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447044784.340:693283): pid=2894 uid=0 auid=0 ses=22536 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447044784.340:693284): pid=2894 uid=0 auid=0 ses=22536 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447044784.341:693285): pid=2894 uid=0 auid=0 ses=22536 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2894 suid=0 rport=50608 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447044784.341:693286): pid=2894 uid=0 auid=0 ses=22536 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=2894 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447044784.342:693287): pid=2894 uid=0 auid=0 ses=22536 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=2894 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447044784.342:693288): pid=2894 uid=0 auid=0 ses=22536 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=2894 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447044784.379:693289): pid=2947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=2947 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447044784.379:693290): pid=2947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=2947 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447044784.380:693291): pid=2947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=2947 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447044784.423:693292): pid=2946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=2947 suid=74 rport=50612 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447044784.424:693293): pid=2946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=2947 suid=74 rport=50612 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447044784.553:693294): pid=2946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=50612 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447044784.553:693295): pid=2946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=50612 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447044784.563:693296): pid=2946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447044784.563:693297): pid=2946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2947 suid=74 rport=50612 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447044784.565:693298): pid=2946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447044784.566:693299): pid=2946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447044784.566:693300): pid=2946 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22537 res=1
type=USER_ROLE_CHANGE msg=audit(1447044784.629:693301): pid=2946 uid=0 auid=0 ses=22537 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447044784.653:693302): pid=2946 uid=0 auid=0 ses=22537 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447044784.656:693303): pid=2946 uid=0 auid=0 ses=22537 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447044784.656:693304): pid=2946 uid=0 auid=0 ses=22537 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447044784.657:693305): pid=2949 uid=0 auid=0 ses=22537 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=2949 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447044784.657:693306): pid=2949 uid=0 auid=0 ses=22537 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=2949 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447044784.657:693307): pid=2949 uid=0 auid=0 ses=22537 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=2949 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447044784.658:693308): pid=2949 uid=0 auid=0 ses=22537 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447044784.673:693309): pid=2946 uid=0 auid=0 ses=22537 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447044784.674:693310): pid=2946 uid=0 auid=0 ses=22537 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447044784.676:693311): pid=2946 uid=0 auid=0 ses=22537 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447044784.677:693312): pid=2946 uid=0 auid=0 ses=22537 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447044784.678:693313): pid=2946 uid=0 auid=0 ses=22537 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2946 suid=0 rport=50612 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447044784.678:693314): pid=2946 uid=0 auid=0 ses=22537 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=2946 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447044784.678:693315): pid=2946 uid=0 auid=0 ses=22537 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=2946 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447044784.678:693316): pid=2946 uid=0 auid=0 ses=22537 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=2946 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447045201.809:693318): pid=4227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447045201.809:693317): pid=4226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447045201.809:693319): pid=4227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447045201.809:693320): pid=4226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447045201.810:693321): pid=4226 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22538 res=1
type=LOGIN msg=audit(1447045201.810:693322): pid=4227 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22539 res=1
type=USER_START msg=audit(1447045201.828:693323): pid=4227 uid=0 auid=0 ses=22539 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447045201.829:693324): pid=4227 uid=0 auid=0 ses=22539 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447045201.829:693325): pid=4226 uid=0 auid=0 ses=22538 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447045201.830:693326): pid=4226 uid=0 auid=0 ses=22538 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447045201.840:693327): pid=4227 uid=0 auid=0 ses=22539 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447045201.842:693328): pid=4227 uid=0 auid=0 ses=22539 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447045201.844:693329): pid=4226 uid=0 auid=0 ses=22538 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447045226.873:693330): pid=4226 uid=0 auid=0 ses=22538 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=USER_ACCT msg=audit(1447045261.887:693331): pid=4455 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447045261.887:693332): pid=4455 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447045261.887:693333): pid=4455 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22540 res=1
type=USER_START msg=audit(1447045261.900:693334): pid=4455 uid=0 auid=0 ses=22540 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447045261.901:693335): pid=4455 uid=0 auid=0 ses=22540 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447045261.927:693336): pid=4455 uid=0 auid=0 ses=22540 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447045261.928:693337): pid=4455 uid=0 auid=0 ses=22540 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1447045686.691:693338): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447045801.945:693339): pid=6085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447045801.945:693340): pid=6084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447045801.945:693341): pid=6085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447045801.945:693342): pid=6084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447045801.945:693343): pid=6085 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22541 res=1
type=LOGIN msg=audit(1447045801.945:693344): pid=6084 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22542 res=1
type=USER_START msg=audit(1447045801.958:693345): pid=6085 uid=0 auid=0 ses=22541 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447045801.959:693346): pid=6085 uid=0 auid=0 ses=22541 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447045801.959:693347): pid=6084 uid=0 auid=0 ses=22542 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447045801.959:693348): pid=6084 uid=0 auid=0 ses=22542 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447045801.966:693349): pid=6085 uid=0 auid=0 ses=22541 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447045801.968:693350): pid=6085 uid=0 auid=0 ses=22541 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447045801.971:693351): pid=6084 uid=0 auid=0 ses=22542 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447045826.998:693352): pid=6084 uid=0 auid=0 ses=22542 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=CRYPTO_KEY_USER msg=audit(1447045983.338:693353): pid=6644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=6644 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447045983.338:693354): pid=6644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=6644 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447045983.339:693355): pid=6644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=6644 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447045983.381:693356): pid=6643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=6644 suid=74 rport=52588 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447045983.382:693357): pid=6643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=6644 suid=74 rport=52588 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447045983.512:693358): pid=6643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52588 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447045983.512:693359): pid=6643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=52588 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447045983.520:693360): pid=6643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447045983.521:693361): pid=6643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6644 suid=74 rport=52588 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447045983.524:693362): pid=6643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447045983.524:693363): pid=6643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447045983.525:693364): pid=6643 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22543 res=1
type=USER_ROLE_CHANGE msg=audit(1447045983.596:693365): pid=6643 uid=0 auid=0 ses=22543 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447045983.625:693366): pid=6643 uid=0 auid=0 ses=22543 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447045983.627:693367): pid=6643 uid=0 auid=0 ses=22543 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447045983.628:693368): pid=6643 uid=0 auid=0 ses=22543 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447045983.629:693369): pid=6646 uid=0 auid=0 ses=22543 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=6646 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447045983.629:693370): pid=6646 uid=0 auid=0 ses=22543 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=6646 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447045983.629:693371): pid=6646 uid=0 auid=0 ses=22543 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=6646 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447045983.630:693372): pid=6646 uid=0 auid=0 ses=22543 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447045983.649:693373): pid=6643 uid=0 auid=0 ses=22543 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447045983.649:693374): pid=6643 uid=0 auid=0 ses=22543 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447045983.652:693375): pid=6643 uid=0 auid=0 ses=22543 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447045983.652:693376): pid=6643 uid=0 auid=0 ses=22543 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447045983.653:693377): pid=6643 uid=0 auid=0 ses=22543 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6643 suid=0 rport=52588 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447045983.653:693378): pid=6643 uid=0 auid=0 ses=22543 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=6643 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447045983.653:693379): pid=6643 uid=0 auid=0 ses=22543 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=6643 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447045983.653:693380): pid=6643 uid=0 auid=0 ses=22543 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=6643 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447045983.680:693381): pid=6654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=6654 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447045983.680:693382): pid=6654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=6654 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447045983.681:693383): pid=6654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=6654 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447045983.725:693384): pid=6653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=6654 suid=74 rport=52591 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447045983.725:693385): pid=6653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=6654 suid=74 rport=52591 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447045983.850:693386): pid=6653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52591 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447045983.850:693387): pid=6653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=52591 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447045983.858:693388): pid=6653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447045983.858:693389): pid=6653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6654 suid=74 rport=52591 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447045983.862:693390): pid=6653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447045983.862:693391): pid=6653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447045983.863:693392): pid=6653 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22544 res=1
type=USER_ROLE_CHANGE msg=audit(1447045983.928:693393): pid=6653 uid=0 auid=0 ses=22544 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447045983.947:693394): pid=6653 uid=0 auid=0 ses=22544 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447045983.950:693395): pid=6653 uid=0 auid=0 ses=22544 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447045983.950:693396): pid=6653 uid=0 auid=0 ses=22544 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447045983.951:693397): pid=6656 uid=0 auid=0 ses=22544 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=6656 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447045983.952:693398): pid=6656 uid=0 auid=0 ses=22544 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=6656 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447045983.952:693399): pid=6656 uid=0 auid=0 ses=22544 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=6656 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447045983.952:693400): pid=6656 uid=0 auid=0 ses=22544 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447045985.244:693401): pid=6653 uid=0 auid=0 ses=22544 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447045985.244:693402): pid=6653 uid=0 auid=0 ses=22544 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447045985.247:693403): pid=6653 uid=0 auid=0 ses=22544 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447045985.247:693404): pid=6653 uid=0 auid=0 ses=22544 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447045985.248:693405): pid=6653 uid=0 auid=0 ses=22544 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6653 suid=0 rport=52591 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447045985.248:693406): pid=6653 uid=0 auid=0 ses=22544 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=6653 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447045985.248:693407): pid=6653 uid=0 auid=0 ses=22544 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=6653 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447045985.248:693408): pid=6653 uid=0 auid=0 ses=22544 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=6653 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447045985.285:693409): pid=6746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=6746 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447045985.285:693410): pid=6746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=6746 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447045985.285:693411): pid=6746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=6746 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447045985.328:693412): pid=6745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=6746 suid=74 rport=52594 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447045985.329:693413): pid=6745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=6746 suid=74 rport=52594 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447045985.459:693414): pid=6745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52594 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447045985.459:693415): pid=6745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=52594 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447045985.465:693416): pid=6745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447045985.466:693417): pid=6745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6746 suid=74 rport=52594 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447045985.467:693418): pid=6745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447045985.467:693419): pid=6745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447045985.468:693420): pid=6745 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22545 res=1
type=USER_ROLE_CHANGE msg=audit(1447045985.543:693421): pid=6745 uid=0 auid=0 ses=22545 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447045985.561:693422): pid=6745 uid=0 auid=0 ses=22545 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447045985.564:693423): pid=6745 uid=0 auid=0 ses=22545 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447045985.564:693424): pid=6745 uid=0 auid=0 ses=22545 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447045985.566:693425): pid=6760 uid=0 auid=0 ses=22545 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=6760 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447045985.566:693426): pid=6760 uid=0 auid=0 ses=22545 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=6760 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447045985.566:693427): pid=6760 uid=0 auid=0 ses=22545 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=6760 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447045985.566:693428): pid=6760 uid=0 auid=0 ses=22545 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447045985.583:693429): pid=6745 uid=0 auid=0 ses=22545 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447045985.583:693430): pid=6745 uid=0 auid=0 ses=22545 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447045985.587:693431): pid=6745 uid=0 auid=0 ses=22545 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447045985.587:693432): pid=6745 uid=0 auid=0 ses=22545 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447045985.588:693433): pid=6745 uid=0 auid=0 ses=22545 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6745 suid=0 rport=52594 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447045985.588:693434): pid=6745 uid=0 auid=0 ses=22545 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=6745 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447045985.588:693435): pid=6745 uid=0 auid=0 ses=22545 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=6745 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447045985.588:693436): pid=6745 uid=0 auid=0 ses=22545 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=6745 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447046401.020:693438): pid=8006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447046401.020:693437): pid=8005 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447046401.020:693439): pid=8005 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447046401.020:693440): pid=8006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447046401.021:693441): pid=8006 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22546 res=1
type=LOGIN msg=audit(1447046401.021:693442): pid=8005 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22547 res=1
type=USER_START msg=audit(1447046401.042:693443): pid=8005 uid=0 auid=0 ses=22547 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447046401.042:693444): pid=8005 uid=0 auid=0 ses=22547 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447046401.043:693445): pid=8006 uid=0 auid=0 ses=22546 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447046401.043:693446): pid=8006 uid=0 auid=0 ses=22546 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447046401.053:693447): pid=8006 uid=0 auid=0 ses=22546 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447046401.055:693448): pid=8006 uid=0 auid=0 ses=22546 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447046401.067:693449): pid=8005 uid=0 auid=0 ses=22547 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447046401.068:693450): pid=8005 uid=0 auid=0 ses=22547 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447047001.083:693451): pid=9853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447047001.083:693452): pid=9852 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447047001.083:693453): pid=9852 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447047001.083:693454): pid=9853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447047001.084:693455): pid=9853 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22548 res=1
type=LOGIN msg=audit(1447047001.084:693456): pid=9852 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22549 res=1
type=USER_START msg=audit(1447047001.099:693457): pid=9852 uid=0 auid=0 ses=22549 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447047001.100:693458): pid=9852 uid=0 auid=0 ses=22549 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447047001.100:693459): pid=9853 uid=0 auid=0 ses=22548 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447047001.100:693460): pid=9853 uid=0 auid=0 ses=22548 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447047001.106:693461): pid=9853 uid=0 auid=0 ses=22548 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447047001.107:693462): pid=9853 uid=0 auid=0 ses=22548 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447047001.111:693463): pid=9852 uid=0 auid=0 ses=22549 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447047001.113:693464): pid=9852 uid=0 auid=0 ses=22549 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447047183.024:693465): pid=10416 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=10416 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447047183.024:693466): pid=10416 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=10416 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447047183.024:693467): pid=10416 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=10416 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447047183.069:693468): pid=10415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=10416 suid=74 rport=54569 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447047183.069:693469): pid=10415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=10416 suid=74 rport=54569 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447047183.200:693470): pid=10415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=54569 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447047183.200:693471): pid=10415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=54569 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447047183.209:693472): pid=10415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447047183.210:693473): pid=10415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10416 suid=74 rport=54569 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447047183.211:693474): pid=10415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447047183.212:693475): pid=10415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447047183.212:693476): pid=10415 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22550 res=1
type=USER_ROLE_CHANGE msg=audit(1447047183.283:693477): pid=10415 uid=0 auid=0 ses=22550 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447047183.304:693478): pid=10415 uid=0 auid=0 ses=22550 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447047183.307:693479): pid=10415 uid=0 auid=0 ses=22550 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447047183.307:693480): pid=10415 uid=0 auid=0 ses=22550 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447047183.309:693481): pid=10418 uid=0 auid=0 ses=22550 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=10418 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447047183.309:693482): pid=10418 uid=0 auid=0 ses=22550 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=10418 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447047183.309:693483): pid=10418 uid=0 auid=0 ses=22550 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=10418 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447047183.310:693484): pid=10418 uid=0 auid=0 ses=22550 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447047183.330:693485): pid=10415 uid=0 auid=0 ses=22550 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447047183.330:693486): pid=10415 uid=0 auid=0 ses=22550 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447047183.332:693487): pid=10415 uid=0 auid=0 ses=22550 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447047183.333:693488): pid=10415 uid=0 auid=0 ses=22550 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447047183.333:693489): pid=10415 uid=0 auid=0 ses=22550 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10415 suid=0 rport=54569 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447047183.333:693490): pid=10415 uid=0 auid=0 ses=22550 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=10415 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447047183.333:693491): pid=10415 uid=0 auid=0 ses=22550 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=10415 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447047183.333:693492): pid=10415 uid=0 auid=0 ses=22550 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=10415 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447047183.356:693493): pid=10426 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=10426 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447047183.356:693494): pid=10426 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=10426 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447047183.356:693495): pid=10426 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=10426 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447047183.401:693496): pid=10425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=10426 suid=74 rport=54570 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447047183.401:693497): pid=10425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=10426 suid=74 rport=54570 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447047183.531:693498): pid=10425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=54570 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447047183.531:693499): pid=10425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=54570 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447047183.539:693500): pid=10425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447047183.541:693501): pid=10425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10426 suid=74 rport=54570 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447047183.541:693502): pid=10425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447047183.541:693503): pid=10425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447047183.543:693504): pid=10425 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22551 res=1
type=USER_ROLE_CHANGE msg=audit(1447047183.608:693505): pid=10425 uid=0 auid=0 ses=22551 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447047183.630:693506): pid=10425 uid=0 auid=0 ses=22551 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447047183.632:693507): pid=10425 uid=0 auid=0 ses=22551 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447047183.632:693508): pid=10425 uid=0 auid=0 ses=22551 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447047183.633:693509): pid=10428 uid=0 auid=0 ses=22551 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=10428 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447047183.634:693510): pid=10428 uid=0 auid=0 ses=22551 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=10428 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447047183.634:693511): pid=10428 uid=0 auid=0 ses=22551 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=10428 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447047183.634:693512): pid=10428 uid=0 auid=0 ses=22551 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447047184.923:693513): pid=10425 uid=0 auid=0 ses=22551 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447047184.923:693514): pid=10425 uid=0 auid=0 ses=22551 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447047184.929:693515): pid=10425 uid=0 auid=0 ses=22551 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447047184.930:693516): pid=10425 uid=0 auid=0 ses=22551 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447047184.930:693517): pid=10425 uid=0 auid=0 ses=22551 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10425 suid=0 rport=54570 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447047184.931:693518): pid=10425 uid=0 auid=0 ses=22551 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=10425 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447047184.931:693519): pid=10425 uid=0 auid=0 ses=22551 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=10425 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447047184.931:693520): pid=10425 uid=0 auid=0 ses=22551 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=10425 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447047184.966:693521): pid=10478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=10478 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447047184.966:693522): pid=10478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=10478 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447047184.966:693523): pid=10478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=10478 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447047185.011:693524): pid=10477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=10478 suid=74 rport=54574 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447047185.011:693525): pid=10477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=10478 suid=74 rport=54574 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447047185.141:693526): pid=10477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=54574 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447047185.141:693527): pid=10477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=54574 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447047185.150:693528): pid=10477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447047185.151:693529): pid=10477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10478 suid=74 rport=54574 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447047185.153:693530): pid=10477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447047185.154:693531): pid=10477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447047185.154:693532): pid=10477 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22552 res=1
type=USER_ROLE_CHANGE msg=audit(1447047185.219:693533): pid=10477 uid=0 auid=0 ses=22552 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447047185.245:693534): pid=10477 uid=0 auid=0 ses=22552 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447047185.249:693535): pid=10477 uid=0 auid=0 ses=22552 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447047185.249:693536): pid=10477 uid=0 auid=0 ses=22552 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447047185.251:693537): pid=10480 uid=0 auid=0 ses=22552 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=10480 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447047185.251:693538): pid=10480 uid=0 auid=0 ses=22552 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=10480 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447047185.251:693539): pid=10480 uid=0 auid=0 ses=22552 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=10480 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447047185.252:693540): pid=10480 uid=0 auid=0 ses=22552 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447047185.272:693541): pid=10477 uid=0 auid=0 ses=22552 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447047185.272:693542): pid=10477 uid=0 auid=0 ses=22552 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447047185.277:693543): pid=10477 uid=0 auid=0 ses=22552 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447047185.277:693544): pid=10477 uid=0 auid=0 ses=22552 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447047185.278:693545): pid=10477 uid=0 auid=0 ses=22552 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10477 suid=0 rport=54574 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447047185.278:693546): pid=10477 uid=0 auid=0 ses=22552 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=10477 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447047185.278:693547): pid=10477 uid=0 auid=0 ses=22552 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=10477 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447047185.278:693548): pid=10477 uid=0 auid=0 ses=22552 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=10477 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447047601.131:693549): pid=11772 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447047601.131:693550): pid=11772 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447047601.131:693551): pid=11771 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447047601.131:693552): pid=11771 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447047601.132:693553): pid=11772 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22553 res=1
type=LOGIN msg=audit(1447047601.132:693554): pid=11771 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22554 res=1
type=USER_START msg=audit(1447047601.150:693555): pid=11772 uid=0 auid=0 ses=22553 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447047601.150:693556): pid=11771 uid=0 auid=0 ses=22554 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447047601.150:693557): pid=11772 uid=0 auid=0 ses=22553 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447047601.150:693558): pid=11771 uid=0 auid=0 ses=22554 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447047601.162:693559): pid=11772 uid=0 auid=0 ses=22553 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447047601.164:693560): pid=11772 uid=0 auid=0 ses=22553 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447047601.165:693561): pid=11771 uid=0 auid=0 ses=22554 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447047626.193:693562): pid=11771 uid=0 auid=0 ses=22554 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=SYSCALL msg=audit(1447047773.759:693563): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447048201.211:693564): pid=13618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447048201.211:693565): pid=13618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447048201.212:693566): pid=13618 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22555 res=1
type=USER_ACCT msg=audit(1447048201.213:693567): pid=13619 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447048201.213:693568): pid=13619 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447048201.214:693569): pid=13619 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22556 res=1
type=USER_START msg=audit(1447048201.227:693570): pid=13619 uid=0 auid=0 ses=22556 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447048201.227:693571): pid=13618 uid=0 auid=0 ses=22555 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447048201.227:693572): pid=13619 uid=0 auid=0 ses=22556 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447048201.227:693573): pid=13618 uid=0 auid=0 ses=22555 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447048201.234:693574): pid=13619 uid=0 auid=0 ses=22556 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447048201.236:693575): pid=13619 uid=0 auid=0 ses=22556 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447048201.241:693576): pid=13618 uid=0 auid=0 ses=22555 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447048201.244:693577): pid=13618 uid=0 auid=0 ses=22555 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447048382.848:693578): pid=14178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=14178 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447048382.848:693579): pid=14178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=14178 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447048382.848:693580): pid=14178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=14178 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447048382.893:693581): pid=14177 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=14178 suid=74 rport=56549 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447048382.893:693582): pid=14177 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=14178 suid=74 rport=56549 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447048383.020:693583): pid=14177 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=56549 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447048383.020:693584): pid=14177 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=56549 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447048383.028:693585): pid=14177 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447048383.029:693586): pid=14177 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14178 suid=74 rport=56549 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447048383.032:693587): pid=14177 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447048383.032:693588): pid=14177 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447048383.032:693589): pid=14177 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22557 res=1
type=USER_ROLE_CHANGE msg=audit(1447048383.100:693590): pid=14177 uid=0 auid=0 ses=22557 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447048383.124:693591): pid=14177 uid=0 auid=0 ses=22557 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447048383.128:693592): pid=14177 uid=0 auid=0 ses=22557 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447048383.128:693593): pid=14177 uid=0 auid=0 ses=22557 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447048383.129:693594): pid=14180 uid=0 auid=0 ses=22557 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=14180 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447048383.129:693595): pid=14180 uid=0 auid=0 ses=22557 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=14180 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447048383.130:693596): pid=14180 uid=0 auid=0 ses=22557 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=14180 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447048383.130:693597): pid=14180 uid=0 auid=0 ses=22557 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447048383.150:693598): pid=14177 uid=0 auid=0 ses=22557 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447048383.150:693599): pid=14177 uid=0 auid=0 ses=22557 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447048383.153:693600): pid=14177 uid=0 auid=0 ses=22557 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447048383.153:693601): pid=14177 uid=0 auid=0 ses=22557 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447048383.154:693602): pid=14177 uid=0 auid=0 ses=22557 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14177 suid=0 rport=56549 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447048383.154:693603): pid=14177 uid=0 auid=0 ses=22557 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=14177 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447048383.154:693604): pid=14177 uid=0 auid=0 ses=22557 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=14177 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447048383.154:693605): pid=14177 uid=0 auid=0 ses=22557 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=14177 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447048383.176:693606): pid=14188 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=14188 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447048383.176:693607): pid=14188 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=14188 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447048383.177:693608): pid=14188 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=14188 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447048383.220:693609): pid=14187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=14188 suid=74 rport=56550 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447048383.221:693610): pid=14187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=14188 suid=74 rport=56550 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447048383.350:693611): pid=14187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=56550 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447048383.350:693612): pid=14187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=56550 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447048383.359:693613): pid=14187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447048383.360:693614): pid=14187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14188 suid=74 rport=56550 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447048383.361:693615): pid=14187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447048383.362:693616): pid=14187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447048383.362:693617): pid=14187 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22558 res=1
type=USER_ROLE_CHANGE msg=audit(1447048383.429:693618): pid=14187 uid=0 auid=0 ses=22558 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447048383.448:693619): pid=14187 uid=0 auid=0 ses=22558 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447048383.450:693620): pid=14187 uid=0 auid=0 ses=22558 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447048383.451:693621): pid=14187 uid=0 auid=0 ses=22558 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447048383.452:693622): pid=14190 uid=0 auid=0 ses=22558 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=14190 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447048383.452:693623): pid=14190 uid=0 auid=0 ses=22558 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=14190 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447048383.452:693624): pid=14190 uid=0 auid=0 ses=22558 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=14190 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447048383.453:693625): pid=14190 uid=0 auid=0 ses=22558 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447048384.756:693626): pid=14187 uid=0 auid=0 ses=22558 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447048384.756:693627): pid=14187 uid=0 auid=0 ses=22558 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447048384.761:693628): pid=14187 uid=0 auid=0 ses=22558 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447048384.761:693629): pid=14187 uid=0 auid=0 ses=22558 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447048384.762:693630): pid=14187 uid=0 auid=0 ses=22558 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14187 suid=0 rport=56550 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447048384.762:693631): pid=14187 uid=0 auid=0 ses=22558 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=14187 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447048384.762:693632): pid=14187 uid=0 auid=0 ses=22558 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=14187 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447048384.762:693633): pid=14187 uid=0 auid=0 ses=22558 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=14187 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447048384.798:693634): pid=14240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=14240 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447048384.798:693635): pid=14240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=14240 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447048384.798:693636): pid=14240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=14240 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447048384.843:693637): pid=14239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=14240 suid=74 rport=56553 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447048384.844:693638): pid=14239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=14240 suid=74 rport=56553 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447048384.967:693639): pid=14239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=56553 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447048384.967:693640): pid=14239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=56553 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447048384.973:693641): pid=14239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447048384.974:693642): pid=14239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14240 suid=74 rport=56553 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447048384.975:693643): pid=14239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447048384.975:693644): pid=14239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447048384.976:693645): pid=14239 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22559 res=1
type=USER_ROLE_CHANGE msg=audit(1447048385.043:693646): pid=14239 uid=0 auid=0 ses=22559 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447048385.066:693647): pid=14239 uid=0 auid=0 ses=22559 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447048385.069:693648): pid=14239 uid=0 auid=0 ses=22559 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447048385.069:693649): pid=14239 uid=0 auid=0 ses=22559 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447048385.071:693650): pid=14242 uid=0 auid=0 ses=22559 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=14242 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447048385.071:693651): pid=14242 uid=0 auid=0 ses=22559 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=14242 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447048385.071:693652): pid=14242 uid=0 auid=0 ses=22559 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=14242 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447048385.071:693653): pid=14242 uid=0 auid=0 ses=22559 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447048385.091:693654): pid=14239 uid=0 auid=0 ses=22559 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447048385.091:693655): pid=14239 uid=0 auid=0 ses=22559 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447048385.095:693656): pid=14239 uid=0 auid=0 ses=22559 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447048385.095:693657): pid=14239 uid=0 auid=0 ses=22559 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447048385.096:693658): pid=14239 uid=0 auid=0 ses=22559 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14239 suid=0 rport=56553 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447048385.096:693659): pid=14239 uid=0 auid=0 ses=22559 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=14239 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447048385.096:693660): pid=14239 uid=0 auid=0 ses=22559 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=14239 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447048385.096:693661): pid=14239 uid=0 auid=0 ses=22559 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=14239 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447048801.261:693662): pid=15653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447048801.261:693663): pid=15654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447048801.261:693664): pid=15653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447048801.261:693665): pid=15654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447048801.263:693666): pid=15654 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22560 res=1
type=LOGIN msg=audit(1447048801.263:693667): pid=15653 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22561 res=1
type=USER_START msg=audit(1447048801.282:693668): pid=15654 uid=0 auid=0 ses=22560 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447048801.282:693669): pid=15653 uid=0 auid=0 ses=22561 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447048801.282:693670): pid=15654 uid=0 auid=0 ses=22560 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447048801.283:693671): pid=15653 uid=0 auid=0 ses=22561 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447048801.290:693672): pid=15654 uid=0 auid=0 ses=22560 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447048801.291:693673): pid=15654 uid=0 auid=0 ses=22560 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447048801.302:693674): pid=15653 uid=0 auid=0 ses=22561 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447048801.303:693675): pid=15653 uid=0 auid=0 ses=22561 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1447048857.759:693676): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447048861.316:693677): pid=15889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447048861.316:693678): pid=15889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447048861.316:693679): pid=15889 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22562 res=1
type=USER_START msg=audit(1447048861.328:693680): pid=15889 uid=0 auid=0 ses=22562 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447048861.328:693681): pid=15889 uid=0 auid=0 ses=22562 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447048861.353:693682): pid=15889 uid=0 auid=0 ses=22562 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447048861.354:693683): pid=15889 uid=0 auid=0 ses=22562 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447049401.366:693684): pid=17559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447049401.366:693685): pid=17559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447049401.367:693686): pid=17559 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22563 res=1
type=USER_ACCT msg=audit(1447049401.369:693687): pid=17558 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447049401.369:693688): pid=17558 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447049401.369:693689): pid=17558 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22564 res=1
type=USER_START msg=audit(1447049401.381:693690): pid=17558 uid=0 auid=0 ses=22564 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447049401.381:693691): pid=17559 uid=0 auid=0 ses=22563 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447049401.381:693692): pid=17558 uid=0 auid=0 ses=22564 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447049401.381:693693): pid=17559 uid=0 auid=0 ses=22563 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447049401.388:693694): pid=17559 uid=0 auid=0 ses=22563 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447049401.392:693695): pid=17559 uid=0 auid=0 ses=22563 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447049401.394:693696): pid=17558 uid=0 auid=0 ses=22564 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447049426.421:693697): pid=17558 uid=0 auid=0 ses=22564 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=CRYPTO_KEY_USER msg=audit(1447049583.155:693698): pid=18119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=18119 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447049583.155:693699): pid=18119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=18119 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447049583.155:693700): pid=18119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=18119 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447049583.199:693701): pid=18118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=18119 suid=74 rport=58531 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447049583.199:693702): pid=18118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=18119 suid=74 rport=58531 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447049583.328:693703): pid=18118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=58531 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447049583.328:693704): pid=18118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=58531 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447049583.337:693705): pid=18118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447049583.339:693706): pid=18118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18119 suid=74 rport=58531 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447049583.340:693707): pid=18118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447049583.341:693708): pid=18118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447049583.341:693709): pid=18118 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22565 res=1
type=USER_ROLE_CHANGE msg=audit(1447049583.412:693710): pid=18118 uid=0 auid=0 ses=22565 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447049583.430:693711): pid=18118 uid=0 auid=0 ses=22565 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447049583.432:693712): pid=18118 uid=0 auid=0 ses=22565 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447049583.432:693713): pid=18118 uid=0 auid=0 ses=22565 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447049583.434:693714): pid=18121 uid=0 auid=0 ses=22565 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=18121 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447049583.434:693715): pid=18121 uid=0 auid=0 ses=22565 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=18121 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447049583.434:693716): pid=18121 uid=0 auid=0 ses=22565 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=18121 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447049583.435:693717): pid=18121 uid=0 auid=0 ses=22565 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447049583.456:693718): pid=18118 uid=0 auid=0 ses=22565 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447049583.456:693719): pid=18118 uid=0 auid=0 ses=22565 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447049583.460:693720): pid=18118 uid=0 auid=0 ses=22565 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447049583.460:693721): pid=18118 uid=0 auid=0 ses=22565 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447049583.461:693722): pid=18118 uid=0 auid=0 ses=22565 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18118 suid=0 rport=58531 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447049583.461:693723): pid=18118 uid=0 auid=0 ses=22565 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=18118 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447049583.461:693724): pid=18118 uid=0 auid=0 ses=22565 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=18118 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447049583.461:693725): pid=18118 uid=0 auid=0 ses=22565 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=18118 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447049583.482:693726): pid=18129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=18129 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447049583.482:693727): pid=18129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=18129 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447049583.482:693728): pid=18129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=18129 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447049583.527:693729): pid=18128 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=18129 suid=74 rport=58532 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447049583.528:693730): pid=18128 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=18129 suid=74 rport=58532 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447049583.657:693731): pid=18128 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=58532 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447049583.657:693732): pid=18128 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=58532 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447049583.667:693733): pid=18128 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447049583.668:693734): pid=18128 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18129 suid=74 rport=58532 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447049583.669:693735): pid=18128 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447049583.670:693736): pid=18128 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447049583.670:693737): pid=18128 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22566 res=1
type=USER_ROLE_CHANGE msg=audit(1447049583.738:693738): pid=18128 uid=0 auid=0 ses=22566 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447049583.763:693739): pid=18128 uid=0 auid=0 ses=22566 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447049583.765:693740): pid=18128 uid=0 auid=0 ses=22566 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447049583.765:693741): pid=18128 uid=0 auid=0 ses=22566 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447049583.767:693742): pid=18131 uid=0 auid=0 ses=22566 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=18131 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447049583.767:693743): pid=18131 uid=0 auid=0 ses=22566 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=18131 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447049583.767:693744): pid=18131 uid=0 auid=0 ses=22566 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=18131 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447049583.767:693745): pid=18131 uid=0 auid=0 ses=22566 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447049585.049:693746): pid=18128 uid=0 auid=0 ses=22566 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447049585.049:693747): pid=18128 uid=0 auid=0 ses=22566 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447049585.054:693748): pid=18128 uid=0 auid=0 ses=22566 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447049585.054:693749): pid=18128 uid=0 auid=0 ses=22566 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447049585.056:693750): pid=18128 uid=0 auid=0 ses=22566 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18128 suid=0 rport=58532 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447049585.056:693751): pid=18128 uid=0 auid=0 ses=22566 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=18128 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447049585.056:693752): pid=18128 uid=0 auid=0 ses=22566 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=18128 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447049585.056:693753): pid=18128 uid=0 auid=0 ses=22566 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=18128 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447049585.087:693754): pid=18181 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=18181 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447049585.087:693755): pid=18181 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=18181 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447049585.087:693756): pid=18181 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=18181 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447049585.132:693757): pid=18180 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=18181 suid=74 rport=58533 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447049585.132:693758): pid=18180 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=18181 suid=74 rport=58533 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447049585.262:693759): pid=18180 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=58533 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447049585.262:693760): pid=18180 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=58533 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447049585.271:693761): pid=18180 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447049585.272:693762): pid=18180 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18181 suid=74 rport=58533 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447049585.274:693763): pid=18180 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447049585.274:693764): pid=18180 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447049585.275:693765): pid=18180 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22567 res=1
type=USER_ROLE_CHANGE msg=audit(1447049585.341:693766): pid=18180 uid=0 auid=0 ses=22567 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447049585.362:693767): pid=18180 uid=0 auid=0 ses=22567 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447049585.366:693768): pid=18180 uid=0 auid=0 ses=22567 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447049585.366:693769): pid=18180 uid=0 auid=0 ses=22567 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447049585.367:693770): pid=18183 uid=0 auid=0 ses=22567 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=18183 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447049585.367:693771): pid=18183 uid=0 auid=0 ses=22567 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=18183 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447049585.367:693772): pid=18183 uid=0 auid=0 ses=22567 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=18183 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447049585.368:693773): pid=18183 uid=0 auid=0 ses=22567 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447049585.387:693774): pid=18180 uid=0 auid=0 ses=22567 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447049585.387:693775): pid=18180 uid=0 auid=0 ses=22567 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447049585.393:693776): pid=18180 uid=0 auid=0 ses=22567 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447049585.393:693777): pid=18180 uid=0 auid=0 ses=22567 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447049585.393:693778): pid=18180 uid=0 auid=0 ses=22567 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18180 suid=0 rport=58533 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447049585.393:693779): pid=18180 uid=0 auid=0 ses=22567 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=18180 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447049585.393:693780): pid=18180 uid=0 auid=0 ses=22567 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=18180 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447049585.393:693781): pid=18180 uid=0 auid=0 ses=22567 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=18180 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=SYSCALL msg=audit(1447049932.666:693782): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447050001.442:693783): pid=19480 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447050001.442:693784): pid=19480 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447050001.442:693785): pid=19481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447050001.442:693786): pid=19481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447050001.443:693787): pid=19480 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22568 res=1
type=LOGIN msg=audit(1447050001.444:693788): pid=19481 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22569 res=1
type=USER_START msg=audit(1447050001.466:693789): pid=19481 uid=0 auid=0 ses=22569 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447050001.467:693790): pid=19480 uid=0 auid=0 ses=22568 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447050001.467:693791): pid=19481 uid=0 auid=0 ses=22569 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447050001.467:693792): pid=19480 uid=0 auid=0 ses=22568 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447050001.476:693793): pid=19481 uid=0 auid=0 ses=22569 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447050001.477:693794): pid=19481 uid=0 auid=0 ses=22569 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447050001.488:693795): pid=19480 uid=0 auid=0 ses=22568 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447050001.490:693796): pid=19480 uid=0 auid=0 ses=22568 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447050601.503:693798): pid=21325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447050601.503:693797): pid=21326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447050601.503:693799): pid=21325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447050601.503:693800): pid=21326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447050601.504:693801): pid=21326 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22571 res=1
type=LOGIN msg=audit(1447050601.504:693802): pid=21325 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22570 res=1
type=USER_START msg=audit(1447050601.518:693803): pid=21326 uid=0 auid=0 ses=22571 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447050601.518:693804): pid=21326 uid=0 auid=0 ses=22571 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447050601.519:693805): pid=21325 uid=0 auid=0 ses=22570 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447050601.519:693806): pid=21325 uid=0 auid=0 ses=22570 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447050601.527:693807): pid=21326 uid=0 auid=0 ses=22571 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447050601.528:693808): pid=21326 uid=0 auid=0 ses=22571 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447050601.536:693809): pid=21325 uid=0 auid=0 ses=22570 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447050601.539:693810): pid=21325 uid=0 auid=0 ses=22570 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447050783.335:693811): pid=21887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=21887 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447050783.335:693812): pid=21887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=21887 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447050783.335:693813): pid=21887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=21887 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447050783.380:693814): pid=21886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=21887 suid=74 rport=60512 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447050783.380:693815): pid=21886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=21887 suid=74 rport=60512 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447050783.512:693816): pid=21886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60512 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447050783.512:693817): pid=21886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=60512 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447050783.521:693818): pid=21886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447050783.523:693819): pid=21886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21887 suid=74 rport=60512 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447050783.527:693820): pid=21886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447050783.527:693821): pid=21886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447050783.527:693822): pid=21886 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22572 res=1
type=USER_ROLE_CHANGE msg=audit(1447050783.595:693823): pid=21886 uid=0 auid=0 ses=22572 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447050783.618:693824): pid=21886 uid=0 auid=0 ses=22572 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447050783.621:693825): pid=21886 uid=0 auid=0 ses=22572 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447050783.621:693826): pid=21886 uid=0 auid=0 ses=22572 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447050783.623:693827): pid=21889 uid=0 auid=0 ses=22572 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=21889 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447050783.623:693828): pid=21889 uid=0 auid=0 ses=22572 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=21889 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447050783.623:693829): pid=21889 uid=0 auid=0 ses=22572 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=21889 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447050783.624:693830): pid=21889 uid=0 auid=0 ses=22572 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447050783.642:693831): pid=21886 uid=0 auid=0 ses=22572 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447050783.642:693832): pid=21886 uid=0 auid=0 ses=22572 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447050783.647:693833): pid=21886 uid=0 auid=0 ses=22572 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447050783.647:693834): pid=21886 uid=0 auid=0 ses=22572 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447050783.648:693835): pid=21886 uid=0 auid=0 ses=22572 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21886 suid=0 rport=60512 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447050783.648:693836): pid=21886 uid=0 auid=0 ses=22572 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=21886 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447050783.648:693837): pid=21886 uid=0 auid=0 ses=22572 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=21886 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447050783.648:693838): pid=21886 uid=0 auid=0 ses=22572 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=21886 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447050783.668:693839): pid=21897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=21897 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447050783.668:693840): pid=21897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=21897 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447050783.668:693841): pid=21897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=21897 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447050783.713:693842): pid=21896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=21897 suid=74 rport=60513 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447050783.713:693843): pid=21896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=21897 suid=74 rport=60513 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447050783.840:693844): pid=21896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60513 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447050783.840:693845): pid=21896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=60513 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447050783.848:693846): pid=21896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447050783.848:693847): pid=21896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21897 suid=74 rport=60513 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447050783.850:693848): pid=21896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447050783.850:693849): pid=21896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447050783.850:693850): pid=21896 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22573 res=1
type=USER_ROLE_CHANGE msg=audit(1447050783.915:693851): pid=21896 uid=0 auid=0 ses=22573 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447050783.937:693852): pid=21896 uid=0 auid=0 ses=22573 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447050783.940:693853): pid=21896 uid=0 auid=0 ses=22573 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447050783.940:693854): pid=21896 uid=0 auid=0 ses=22573 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447050783.941:693855): pid=21899 uid=0 auid=0 ses=22573 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=21899 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447050783.941:693856): pid=21899 uid=0 auid=0 ses=22573 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=21899 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447050783.941:693857): pid=21899 uid=0 auid=0 ses=22573 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=21899 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447050783.942:693858): pid=21899 uid=0 auid=0 ses=22573 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447050785.231:693859): pid=21896 uid=0 auid=0 ses=22573 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447050785.231:693860): pid=21896 uid=0 auid=0 ses=22573 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447050785.238:693861): pid=21896 uid=0 auid=0 ses=22573 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447050785.239:693862): pid=21896 uid=0 auid=0 ses=22573 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447050785.239:693863): pid=21896 uid=0 auid=0 ses=22573 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21896 suid=0 rport=60513 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447050785.239:693864): pid=21896 uid=0 auid=0 ses=22573 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=21896 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447050785.239:693865): pid=21896 uid=0 auid=0 ses=22573 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=21896 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447050785.239:693866): pid=21896 uid=0 auid=0 ses=22573 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=21896 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447050785.271:693867): pid=21949 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=21949 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447050785.271:693868): pid=21949 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=21949 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447050785.271:693869): pid=21949 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=21949 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447050785.316:693870): pid=21948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=21949 suid=74 rport=60514 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447050785.317:693871): pid=21948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=21949 suid=74 rport=60514 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447050785.448:693872): pid=21948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60514 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447050785.448:693873): pid=21948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=60514 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447050785.458:693874): pid=21948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447050785.460:693875): pid=21948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21949 suid=74 rport=60514 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447050785.461:693876): pid=21948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447050785.462:693877): pid=21948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447050785.462:693878): pid=21948 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22574 res=1
type=USER_ROLE_CHANGE msg=audit(1447050785.524:693879): pid=21948 uid=0 auid=0 ses=22574 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447050785.548:693880): pid=21948 uid=0 auid=0 ses=22574 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447050785.550:693881): pid=21948 uid=0 auid=0 ses=22574 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447050785.550:693882): pid=21948 uid=0 auid=0 ses=22574 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447050785.551:693883): pid=21951 uid=0 auid=0 ses=22574 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=21951 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447050785.552:693884): pid=21951 uid=0 auid=0 ses=22574 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=21951 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447050785.552:693885): pid=21951 uid=0 auid=0 ses=22574 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=21951 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447050785.552:693886): pid=21951 uid=0 auid=0 ses=22574 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447050785.567:693887): pid=21948 uid=0 auid=0 ses=22574 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447050785.567:693888): pid=21948 uid=0 auid=0 ses=22574 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447050785.570:693889): pid=21948 uid=0 auid=0 ses=22574 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447050785.570:693890): pid=21948 uid=0 auid=0 ses=22574 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447050785.571:693891): pid=21948 uid=0 auid=0 ses=22574 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21948 suid=0 rport=60514 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447050785.572:693892): pid=21948 uid=0 auid=0 ses=22574 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=21948 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447050785.572:693893): pid=21948 uid=0 auid=0 ses=22574 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=21948 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447050785.572:693894): pid=21948 uid=0 auid=0 ses=22574 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=21948 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447051201.557:693895): pid=23243 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447051201.557:693896): pid=23242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447051201.557:693897): pid=23243 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447051201.557:693898): pid=23242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447051201.558:693899): pid=23243 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22575 res=1
type=LOGIN msg=audit(1447051201.558:693900): pid=23242 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22576 res=1
type=USER_START msg=audit(1447051201.577:693901): pid=23242 uid=0 auid=0 ses=22576 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447051201.578:693902): pid=23243 uid=0 auid=0 ses=22575 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447051201.578:693903): pid=23242 uid=0 auid=0 ses=22576 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447051201.578:693904): pid=23243 uid=0 auid=0 ses=22575 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447051201.588:693905): pid=23243 uid=0 auid=0 ses=22575 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447051201.590:693906): pid=23243 uid=0 auid=0 ses=22575 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447051201.593:693907): pid=23242 uid=0 auid=0 ses=22576 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447051201.597:693908): pid=23242 uid=0 auid=0 ses=22576 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447051801.611:693909): pid=25089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447051801.611:693910): pid=25088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447051801.611:693911): pid=25089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447051801.611:693912): pid=25088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447051801.611:693913): pid=25089 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22577 res=1
type=LOGIN msg=audit(1447051801.611:693914): pid=25088 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22578 res=1
type=USER_START msg=audit(1447051801.628:693915): pid=25088 uid=0 auid=0 ses=22578 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447051801.628:693916): pid=25089 uid=0 auid=0 ses=22577 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447051801.629:693917): pid=25088 uid=0 auid=0 ses=22578 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447051801.629:693918): pid=25089 uid=0 auid=0 ses=22577 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447051801.635:693919): pid=25089 uid=0 auid=0 ses=22577 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447051801.636:693920): pid=25089 uid=0 auid=0 ses=22577 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447051801.643:693921): pid=25088 uid=0 auid=0 ses=22578 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447051801.644:693922): pid=25088 uid=0 auid=0 ses=22578 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447051982.537:693923): pid=25649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=25649 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447051982.537:693924): pid=25649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=25649 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447051982.538:693925): pid=25649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=25649 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447051982.581:693926): pid=25648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=25649 suid=74 rport=62491 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447051982.581:693927): pid=25648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=25649 suid=74 rport=62491 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447051982.711:693928): pid=25648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=62491 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447051982.711:693929): pid=25648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=62491 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447051982.719:693930): pid=25648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447051982.721:693931): pid=25648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25649 suid=74 rport=62491 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447051982.723:693932): pid=25648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447051982.723:693933): pid=25648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447051982.723:693934): pid=25648 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22579 res=1
type=USER_ROLE_CHANGE msg=audit(1447051982.792:693935): pid=25648 uid=0 auid=0 ses=22579 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447051982.813:693936): pid=25648 uid=0 auid=0 ses=22579 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447051982.816:693937): pid=25648 uid=0 auid=0 ses=22579 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447051982.816:693938): pid=25648 uid=0 auid=0 ses=22579 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447051982.817:693939): pid=25651 uid=0 auid=0 ses=22579 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=25651 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447051982.817:693940): pid=25651 uid=0 auid=0 ses=22579 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=25651 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447051982.817:693941): pid=25651 uid=0 auid=0 ses=22579 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=25651 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447051982.818:693942): pid=25651 uid=0 auid=0 ses=22579 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447051982.838:693943): pid=25648 uid=0 auid=0 ses=22579 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447051982.838:693944): pid=25648 uid=0 auid=0 ses=22579 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447051982.843:693945): pid=25648 uid=0 auid=0 ses=22579 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447051982.843:693946): pid=25648 uid=0 auid=0 ses=22579 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447051982.843:693947): pid=25648 uid=0 auid=0 ses=22579 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25648 suid=0 rport=62491 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447051982.843:693948): pid=25648 uid=0 auid=0 ses=22579 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=25648 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447051982.843:693949): pid=25648 uid=0 auid=0 ses=22579 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=25648 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447051982.843:693950): pid=25648 uid=0 auid=0 ses=22579 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=25648 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447051982.863:693951): pid=25659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=25659 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447051982.864:693952): pid=25659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=25659 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447051982.864:693953): pid=25659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=25659 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447051982.909:693954): pid=25658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=25659 suid=74 rport=62493 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447051982.909:693955): pid=25658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=25659 suid=74 rport=62493 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447051983.039:693956): pid=25658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=62493 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447051983.039:693957): pid=25658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=62493 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447051983.048:693958): pid=25658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447051983.049:693959): pid=25658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25659 suid=74 rport=62493 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447051983.051:693960): pid=25658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447051983.051:693961): pid=25658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447051983.052:693962): pid=25658 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22580 res=1
type=USER_ROLE_CHANGE msg=audit(1447051983.115:693963): pid=25658 uid=0 auid=0 ses=22580 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447051983.139:693964): pid=25658 uid=0 auid=0 ses=22580 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447051983.141:693965): pid=25658 uid=0 auid=0 ses=22580 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447051983.141:693966): pid=25658 uid=0 auid=0 ses=22580 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447051983.142:693967): pid=25661 uid=0 auid=0 ses=22580 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=25661 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447051983.143:693968): pid=25661 uid=0 auid=0 ses=22580 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=25661 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447051983.143:693969): pid=25661 uid=0 auid=0 ses=22580 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=25661 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447051983.143:693970): pid=25661 uid=0 auid=0 ses=22580 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447051984.418:693971): pid=25658 uid=0 auid=0 ses=22580 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447051984.418:693972): pid=25658 uid=0 auid=0 ses=22580 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447051984.422:693973): pid=25658 uid=0 auid=0 ses=22580 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447051984.422:693974): pid=25658 uid=0 auid=0 ses=22580 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447051984.423:693975): pid=25658 uid=0 auid=0 ses=22580 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25658 suid=0 rport=62493 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447051984.423:693976): pid=25658 uid=0 auid=0 ses=22580 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=25658 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447051984.423:693977): pid=25658 uid=0 auid=0 ses=22580 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=25658 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447051984.423:693978): pid=25658 uid=0 auid=0 ses=22580 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=25658 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447051984.460:693979): pid=25711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=25711 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447051984.461:693980): pid=25711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=25711 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447051984.461:693981): pid=25711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=25711 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447051984.506:693982): pid=25710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=25711 suid=74 rport=62495 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447051984.506:693983): pid=25710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=25711 suid=74 rport=62495 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447051984.636:693984): pid=25710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=62495 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447051984.636:693985): pid=25710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=62495 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447051984.645:693986): pid=25710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447051984.645:693987): pid=25710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25711 suid=74 rport=62495 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447051984.646:693988): pid=25710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447051984.647:693989): pid=25710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447051984.647:693990): pid=25710 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22581 res=1
type=USER_ROLE_CHANGE msg=audit(1447051984.726:693991): pid=25710 uid=0 auid=0 ses=22581 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447051984.748:693992): pid=25710 uid=0 auid=0 ses=22581 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447051984.750:693993): pid=25710 uid=0 auid=0 ses=22581 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447051984.750:693994): pid=25710 uid=0 auid=0 ses=22581 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447051984.752:693995): pid=25713 uid=0 auid=0 ses=22581 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=25713 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447051984.752:693996): pid=25713 uid=0 auid=0 ses=22581 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=25713 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447051984.752:693997): pid=25713 uid=0 auid=0 ses=22581 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=25713 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447051984.753:693998): pid=25713 uid=0 auid=0 ses=22581 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447051984.772:693999): pid=25710 uid=0 auid=0 ses=22581 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447051984.772:694000): pid=25710 uid=0 auid=0 ses=22581 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447051984.777:694001): pid=25710 uid=0 auid=0 ses=22581 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447051984.777:694002): pid=25710 uid=0 auid=0 ses=22581 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447051984.778:694003): pid=25710 uid=0 auid=0 ses=22581 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25710 suid=0 rport=62495 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447051984.778:694004): pid=25710 uid=0 auid=0 ses=22581 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=25710 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447051984.778:694005): pid=25710 uid=0 auid=0 ses=22581 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=25710 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447051984.778:694006): pid=25710 uid=0 auid=0 ses=22581 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=25710 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=SYSCALL msg=audit(1447052047.682:694007): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447052401.674:694009): pid=26942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447052401.674:694008): pid=26943 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447052401.674:694010): pid=26942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447052401.674:694011): pid=26943 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447052401.675:694012): pid=26942 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22583 res=1
type=LOGIN msg=audit(1447052401.675:694013): pid=26943 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22582 res=1
type=USER_START msg=audit(1447052401.692:694014): pid=26942 uid=0 auid=0 ses=22583 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447052401.692:694015): pid=26943 uid=0 auid=0 ses=22582 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447052401.693:694016): pid=26942 uid=0 auid=0 ses=22583 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447052401.693:694017): pid=26943 uid=0 auid=0 ses=22582 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447052401.705:694018): pid=26943 uid=0 auid=0 ses=22582 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447052401.707:694019): pid=26943 uid=0 auid=0 ses=22582 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447052401.710:694020): pid=26942 uid=0 auid=0 ses=22583 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447052401.712:694021): pid=26942 uid=0 auid=0 ses=22583 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447052461.720:694022): pid=27180 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447052461.720:694023): pid=27180 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447052461.721:694024): pid=27180 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22584 res=1
type=USER_START msg=audit(1447052461.730:694025): pid=27180 uid=0 auid=0 ses=22584 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447052461.731:694026): pid=27180 uid=0 auid=0 ses=22584 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447052461.754:694027): pid=27180 uid=0 auid=0 ses=22584 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447052461.756:694028): pid=27180 uid=0 auid=0 ses=22584 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447052646.706:694029): pid=27816 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=27816 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447052646.707:694030): pid=27816 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=27816 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447052646.707:694031): pid=27816 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27816 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447052646.708:694032): pid=27815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-cbc ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=27816 suid=74 rport=53197 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447052646.708:694033): pid=27815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-cbc ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=27816 suid=74 rport=53197 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_AUTH msg=audit(1447052646.786:694034): pid=27815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=53197 acct="svnadm" exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_AUTH msg=audit(1447052646.786:694035): pid=27815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-dss size=1024 fp=41:85:f9:50:1a:0f:bb:e4:07:e8:23:7a:13:fa:b2:e5 rport=53197 acct="svnadm" exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_ACCT msg=audit(1447052646.791:694036): pid=27815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447052646.792:694037): pid=27815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27816 suid=74 rport=53197 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_AUTH msg=audit(1447052646.793:694038): pid=27815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="svnadm" exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447052646.793:694039): pid=27815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=LOGIN msg=audit(1447052646.793:694040): pid=27815 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1001 old-ses=4294967295 ses=22585 res=1
type=USER_ROLE_CHANGE msg=audit(1447052646.864:694041): pid=27815 uid=0 auid=1001 ses=22585 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=USER_START msg=audit(1447052646.883:694042): pid=27815 uid=0 auid=1001 ses=22585 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447052646.884:694043): pid=27815 uid=0 auid=1001 ses=22585 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27815 suid=0 rport=53197 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447052646.884:694044): pid=27818 uid=0 auid=1001 ses=22585 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=27818 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447052646.885:694045): pid=27818 uid=0 auid=1001 ses=22585 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=27818 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447052646.885:694046): pid=27818 uid=0 auid=1001 ses=22585 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27818 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRED_ACQ msg=audit(1447052646.885:694047): pid=27818 uid=0 auid=1001 ses=22585 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447052646.887:694048): pid=27815 uid=0 auid=1001 ses=22585 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1001 exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=USER_START msg=audit(1447052646.887:694049): pid=27815 uid=0 auid=1001 ses=22585 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1001 exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447052646.889:694050): pid=27815 uid=0 auid=1001 ses=22585 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27819 suid=1001  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_END msg=audit(1447052646.906:694051): pid=27815 uid=0 auid=1001 ses=22585 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1001 exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447052646.906:694052): pid=27815 uid=0 auid=1001 ses=22585 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1001 exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447052646.906:694053): pid=27815 uid=0 auid=1001 ses=22585 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27818 suid=1001 rport=53197 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447052646.906:694054): pid=27815 uid=0 auid=1001 ses=22585 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27818 suid=1001  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_END msg=audit(1447052646.909:694055): pid=27815 uid=0 auid=1001 ses=22585 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447052646.909:694056): pid=27815 uid=0 auid=1001 ses=22585 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447052646.910:694057): pid=27815 uid=0 auid=1001 ses=22585 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=27815 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447052646.910:694058): pid=27815 uid=0 auid=1001 ses=22585 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=27815 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447052646.910:694059): pid=27815 uid=0 auid=1001 ses=22585 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27815 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447052646.922:694060): pid=27829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=27829 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447052646.922:694061): pid=27829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=27829 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447052646.922:694062): pid=27829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27829 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447052646.924:694063): pid=27827 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-cbc ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=27829 suid=74 rport=53198 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447052646.924:694064): pid=27827 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-cbc ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=27829 suid=74 rport=53198 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_AUTH msg=audit(1447052646.977:694065): pid=27827 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=53198 acct="svnadm" exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_AUTH msg=audit(1447052646.977:694066): pid=27827 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-dss size=1024 fp=41:85:f9:50:1a:0f:bb:e4:07:e8:23:7a:13:fa:b2:e5 rport=53198 acct="svnadm" exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_ACCT msg=audit(1447052646.982:694067): pid=27827 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447052646.982:694068): pid=27827 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27829 suid=74 rport=53198 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_AUTH msg=audit(1447052646.984:694069): pid=27827 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="svnadm" exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447052646.984:694070): pid=27827 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=LOGIN msg=audit(1447052646.984:694071): pid=27827 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1001 old-ses=4294967295 ses=22586 res=1
type=USER_ROLE_CHANGE msg=audit(1447052647.051:694072): pid=27827 uid=0 auid=1001 ses=22586 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=USER_START msg=audit(1447052647.070:694073): pid=27827 uid=0 auid=1001 ses=22586 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447052647.071:694074): pid=27827 uid=0 auid=1001 ses=22586 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27827 suid=0 rport=53198 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447052647.072:694075): pid=27831 uid=0 auid=1001 ses=22586 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=27831 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447052647.072:694076): pid=27831 uid=0 auid=1001 ses=22586 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=27831 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447052647.072:694077): pid=27831 uid=0 auid=1001 ses=22586 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27831 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRED_ACQ msg=audit(1447052647.072:694078): pid=27831 uid=0 auid=1001 ses=22586 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447052647.074:694079): pid=27827 uid=0 auid=1001 ses=22586 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1001 exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=USER_START msg=audit(1447052647.074:694080): pid=27827 uid=0 auid=1001 ses=22586 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1001 exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447052647.076:694081): pid=27827 uid=0 auid=1001 ses=22586 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27832 suid=1001  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=SYSCALL msg=audit(1447052647.092:694082): arch=c000003e syscall=263 success=yes exit=0 a0=ffffffffffffff9c a1=238d0c0 a2=0 a3=7fffc766ffa0 items=2 ppid=27831 pid=27832 auid=1001 uid=1001 gid=1003 euid=1001 suid=1001 fsuid=1001 egid=1003 sgid=1003 fsgid=1003 tty=(none) ses=22586 comm="rm" exe="/usr/bin/rm" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key="delete"
type=CWD msg=audit(1447052647.092:694082):  cwd="/home/svnadm"
type=PATH msg=audit(1447052647.092:694082): item=0 name="/usr/local/test/titan/" inode=9255149 dev=08:02 mode=040777 ouid=0 ogid=0 rdev=00:00 obj=unconfined_u:object_r:usr_t:s0 objtype=PARENT
type=PATH msg=audit(1447052647.092:694082): item=1 name="/usr/local/test/titan/NNI-titan-master-7.6.3-4284.linux-x64.sh" inode=9255147 dev=08:02 mode=0100755 ouid=1001 ogid=1003 rdev=00:00 obj=unconfined_u:object_r:usr_t:s0 objtype=DELETE
type=USER_END msg=audit(1447052647.241:694083): pid=27827 uid=0 auid=1001 ses=22586 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1001 exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447052647.241:694084): pid=27827 uid=0 auid=1001 ses=22586 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1001 exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447052647.241:694085): pid=27827 uid=0 auid=1001 ses=22586 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27831 suid=1001 rport=53198 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447052647.241:694086): pid=27827 uid=0 auid=1001 ses=22586 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27831 suid=1001  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_END msg=audit(1447052647.247:694087): pid=27827 uid=0 auid=1001 ses=22586 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447052647.247:694088): pid=27827 uid=0 auid=1001 ses=22586 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447052647.247:694089): pid=27827 uid=0 auid=1001 ses=22586 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=27827 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447052647.247:694090): pid=27827 uid=0 auid=1001 ses=22586 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=27827 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447052647.247:694091): pid=27827 uid=0 auid=1001 ses=22586 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27827 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447052647.257:694092): pid=27841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=27841 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447052647.257:694093): pid=27841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=27841 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447052647.257:694094): pid=27841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27841 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447052647.258:694095): pid=27839 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-cbc ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=27841 suid=74 rport=53199 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447052647.258:694096): pid=27839 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-cbc ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=27841 suid=74 rport=53199 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_AUTH msg=audit(1447052647.313:694097): pid=27839 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=53199 acct="svnadm" exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_AUTH msg=audit(1447052647.313:694098): pid=27839 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-dss size=1024 fp=41:85:f9:50:1a:0f:bb:e4:07:e8:23:7a:13:fa:b2:e5 rport=53199 acct="svnadm" exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_ACCT msg=audit(1447052647.317:694099): pid=27839 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447052647.318:694100): pid=27839 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27841 suid=74 rport=53199 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_AUTH msg=audit(1447052647.319:694101): pid=27839 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="svnadm" exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447052647.320:694102): pid=27839 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=LOGIN msg=audit(1447052647.320:694103): pid=27839 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1001 old-ses=4294967295 ses=22587 res=1
type=USER_ROLE_CHANGE msg=audit(1447052647.384:694104): pid=27839 uid=0 auid=1001 ses=22587 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=USER_START msg=audit(1447052647.404:694105): pid=27839 uid=0 auid=1001 ses=22587 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447052647.404:694107): pid=27839 uid=0 auid=1001 ses=22587 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27839 suid=0 rport=53199 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447052647.404:694106): pid=27844 uid=0 auid=1001 ses=22587 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=27844 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447052647.404:694108): pid=27844 uid=0 auid=1001 ses=22587 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=27844 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447052647.404:694109): pid=27844 uid=0 auid=1001 ses=22587 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27844 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRED_ACQ msg=audit(1447052647.405:694110): pid=27844 uid=0 auid=1001 ses=22587 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447052647.407:694111): pid=27839 uid=0 auid=1001 ses=22587 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1001 exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=USER_START msg=audit(1447052647.407:694112): pid=27839 uid=0 auid=1001 ses=22587 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1001 exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447052647.408:694113): pid=27839 uid=0 auid=1001 ses=22587 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27845 suid=1001  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_END msg=audit(1447052662.022:694114): pid=27839 uid=0 auid=1001 ses=22587 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1001 exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447052662.022:694115): pid=27839 uid=0 auid=1001 ses=22587 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1001 exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447052662.023:694116): pid=27839 uid=0 auid=1001 ses=22587 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27844 suid=1001 rport=53199 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447052662.023:694117): pid=27839 uid=0 auid=1001 ses=22587 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27844 suid=1001  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_END msg=audit(1447052662.026:694118): pid=27839 uid=0 auid=1001 ses=22587 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447052662.027:694119): pid=27839 uid=0 auid=1001 ses=22587 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447052662.027:694120): pid=27839 uid=0 auid=1001 ses=22587 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=27839 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447052662.027:694121): pid=27839 uid=0 auid=1001 ses=22587 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=27839 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447052662.027:694122): pid=27839 uid=0 auid=1001 ses=22587 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27839 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447052662.045:694123): pid=27860 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=27860 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447052662.046:694124): pid=27860 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=27860 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447052662.046:694125): pid=27860 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27860 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447052662.047:694126): pid=27859 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-cbc ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=27860 suid=74 rport=53200 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447052662.047:694127): pid=27859 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-cbc ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=27860 suid=74 rport=53200 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_AUTH msg=audit(1447052662.102:694128): pid=27859 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=53200 acct="svnadm" exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_AUTH msg=audit(1447052662.102:694129): pid=27859 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-dss size=1024 fp=41:85:f9:50:1a:0f:bb:e4:07:e8:23:7a:13:fa:b2:e5 rport=53200 acct="svnadm" exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_ACCT msg=audit(1447052662.107:694130): pid=27859 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447052662.108:694131): pid=27859 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27860 suid=74 rport=53200 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_AUTH msg=audit(1447052662.108:694132): pid=27859 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="svnadm" exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447052662.109:694133): pid=27859 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=LOGIN msg=audit(1447052662.109:694134): pid=27859 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1001 old-ses=4294967295 ses=22588 res=1
type=USER_ROLE_CHANGE msg=audit(1447052662.171:694135): pid=27859 uid=0 auid=1001 ses=22588 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=USER_START msg=audit(1447052662.193:694136): pid=27859 uid=0 auid=1001 ses=22588 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447052662.194:694137): pid=27859 uid=0 auid=1001 ses=22588 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27859 suid=0 rport=53200 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447052662.194:694138): pid=27862 uid=0 auid=1001 ses=22588 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=27862 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447052662.195:694139): pid=27862 uid=0 auid=1001 ses=22588 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=27862 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447052662.195:694140): pid=27862 uid=0 auid=1001 ses=22588 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27862 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRED_ACQ msg=audit(1447052662.195:694141): pid=27862 uid=0 auid=1001 ses=22588 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447052662.197:694142): pid=27859 uid=0 auid=1001 ses=22588 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1001 exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=USER_START msg=audit(1447052662.197:694143): pid=27859 uid=0 auid=1001 ses=22588 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1001 exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447052662.198:694144): pid=27859 uid=0 auid=1001 ses=22588 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27863 suid=1001  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_END msg=audit(1447052662.218:694145): pid=27859 uid=0 auid=1001 ses=22588 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1001 exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447052662.218:694146): pid=27859 uid=0 auid=1001 ses=22588 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1001 exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447052662.218:694147): pid=27859 uid=0 auid=1001 ses=22588 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27862 suid=1001 rport=53200 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447052662.218:694148): pid=27859 uid=0 auid=1001 ses=22588 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27862 suid=1001  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_END msg=audit(1447052662.221:694149): pid=27859 uid=0 auid=1001 ses=22588 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447052662.221:694150): pid=27859 uid=0 auid=1001 ses=22588 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447052662.221:694151): pid=27859 uid=0 auid=1001 ses=22588 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=27859 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447052662.221:694152): pid=27859 uid=0 auid=1001 ses=22588 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=27859 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447052662.221:694153): pid=27859 uid=0 auid=1001 ses=22588 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27859 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447052662.237:694154): pid=27873 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=27873 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447052662.237:694155): pid=27873 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=27873 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447052662.237:694156): pid=27873 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27873 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447052662.238:694157): pid=27872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-cbc ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=27873 suid=74 rport=53201 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447052662.238:694158): pid=27872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-cbc ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=27873 suid=74 rport=53201 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_AUTH msg=audit(1447052662.334:694159): pid=27872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=53201 acct="svnadm" exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_AUTH msg=audit(1447052662.334:694160): pid=27872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-dss size=1024 fp=41:85:f9:50:1a:0f:bb:e4:07:e8:23:7a:13:fa:b2:e5 rport=53201 acct="svnadm" exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_ACCT msg=audit(1447052662.338:694161): pid=27872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447052662.339:694162): pid=27872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27873 suid=74 rport=53201 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_AUTH msg=audit(1447052662.340:694163): pid=27872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="svnadm" exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447052662.340:694164): pid=27872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=LOGIN msg=audit(1447052662.340:694165): pid=27872 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1001 old-ses=4294967295 ses=22589 res=1
type=USER_ROLE_CHANGE msg=audit(1447052662.404:694166): pid=27872 uid=0 auid=1001 ses=22589 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=USER_START msg=audit(1447052662.423:694167): pid=27872 uid=0 auid=1001 ses=22589 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447052662.424:694168): pid=27872 uid=0 auid=1001 ses=22589 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27872 suid=0 rport=53201 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447052662.424:694169): pid=27875 uid=0 auid=1001 ses=22589 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=27875 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447052662.424:694170): pid=27875 uid=0 auid=1001 ses=22589 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=27875 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447052662.424:694171): pid=27875 uid=0 auid=1001 ses=22589 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27875 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRED_ACQ msg=audit(1447052662.424:694172): pid=27875 uid=0 auid=1001 ses=22589 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447052662.426:694173): pid=27872 uid=0 auid=1001 ses=22589 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1001 exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=USER_START msg=audit(1447052662.426:694174): pid=27872 uid=0 auid=1001 ses=22589 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1001 exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447052662.427:694175): pid=27872 uid=0 auid=1001 ses=22589 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27876 suid=1001  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_END msg=audit(1447052662.444:694176): pid=27872 uid=0 auid=1001 ses=22589 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1001 exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447052662.444:694177): pid=27872 uid=0 auid=1001 ses=22589 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1001 exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447052662.444:694178): pid=27872 uid=0 auid=1001 ses=22589 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27875 suid=1001 rport=53201 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447052662.444:694179): pid=27872 uid=0 auid=1001 ses=22589 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27875 suid=1001  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_END msg=audit(1447052662.447:694180): pid=27872 uid=0 auid=1001 ses=22589 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447052662.447:694181): pid=27872 uid=0 auid=1001 ses=22589 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447052662.448:694182): pid=27872 uid=0 auid=1001 ses=22589 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=27872 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447052662.448:694183): pid=27872 uid=0 auid=1001 ses=22589 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=27872 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447052662.448:694184): pid=27872 uid=0 auid=1001 ses=22589 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27872 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_ACCT msg=audit(1447053001.775:694186): pid=28912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447053001.775:694185): pid=28911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447053001.775:694187): pid=28912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447053001.775:694188): pid=28911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447053001.776:694189): pid=28912 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22590 res=1
type=LOGIN msg=audit(1447053001.776:694190): pid=28911 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22591 res=1
type=USER_START msg=audit(1447053001.796:694192): pid=28911 uid=0 auid=0 ses=22591 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447053001.796:694191): pid=28912 uid=0 auid=0 ses=22590 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447053001.797:694193): pid=28911 uid=0 auid=0 ses=22591 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447053001.797:694194): pid=28912 uid=0 auid=0 ses=22590 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447053001.814:694195): pid=28911 uid=0 auid=0 ses=22591 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447053001.815:694196): pid=28911 uid=0 auid=0 ses=22591 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1447053001.816:694197): arch=c000003e syscall=59 success=yes exit=0 a0=ea8600 a1=ea7fd0 a2=eb1430 a3=7fff67448c50 items=2 ppid=28919 pid=28930 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22590 comm="systemctl" exe="/usr/bin/systemctl" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key="privileged"
type=EXECVE msg=audit(1447053001.816:694197): argc=3 a0="/usr/bin/systemctl" a1="stop" a2="titan"
type=CWD msg=audit(1447053001.816:694197):  cwd="/usr/local/test/titan"
type=PATH msg=audit(1447053001.816:694197): item=0 name="/usr/bin/systemctl" inode=25275302 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:systemd_systemctl_exec_t:s0 objtype=NORMAL
type=PATH msg=audit(1447053001.816:694197): item=1 name=(null) inode=2292 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=SERVICE_STOP msg=audit(1447053006.861:694198): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="titan" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=SYSCALL msg=audit(1447053010.173:694199): arch=c000003e syscall=59 success=yes exit=0 a0=21ae2d0 a1=21ad290 a2=21acc70 a3=7fff94626f90 items=2 ppid=29055 pid=29056 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22590 comm="systemctl" exe="/usr/bin/systemctl" subj=unconfined_u:unconfined_r:rpm_script_t:s0-s0:c0.c1023 key="privileged"
type=EXECVE msg=audit(1447053010.173:694199): argc=3 a0="systemctl" a1="disable" a2="titan"
type=CWD msg=audit(1447053010.173:694199):  cwd="/"
type=PATH msg=audit(1447053010.173:694199): item=0 name="/bin/systemctl" inode=25275302 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:systemd_systemctl_exec_t:s0 objtype=NORMAL
type=PATH msg=audit(1447053010.173:694199): item=1 name=(null) inode=2292 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=SYSCALL msg=audit(1447053010.228:694200): arch=c000003e syscall=59 success=yes exit=0 a0=21acd80 a1=21ae0b0 a2=21aeb30 a3=7fff94626f90 items=2 ppid=29055 pid=29066 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22590 comm="systemctl" exe="/usr/bin/systemctl" subj=unconfined_u:unconfined_r:rpm_script_t:s0-s0:c0.c1023 key="privileged"
type=EXECVE msg=audit(1447053010.228:694200): argc=2 a0="systemctl" a1="daemon-reload"
type=CWD msg=audit(1447053010.228:694200):  cwd="/"
type=PATH msg=audit(1447053010.228:694200): item=0 name="/bin/systemctl" inode=25275302 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:systemd_systemctl_exec_t:s0 objtype=NORMAL
type=PATH msg=audit(1447053010.228:694200): item=1 name=(null) inode=2292 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=SYSCALL msg=audit(1447053028.098:694201): arch=c000003e syscall=59 success=yes exit=0 a0=235c3e0 a1=235bfe0 a2=235c0b0 a3=7fff1c282f70 items=2 ppid=29108 pid=29111 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22590 comm="systemctl" exe="/usr/bin/systemctl" subj=unconfined_u:unconfined_r:rpm_script_t:s0-s0:c0.c1023 key="privileged"
type=EXECVE msg=audit(1447053028.098:694201): argc=2 a0="systemctl" a1="daemon-reload"
type=CWD msg=audit(1447053028.098:694201):  cwd="/"
type=PATH msg=audit(1447053028.098:694201): item=0 name="/bin/systemctl" inode=25275302 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:systemd_systemctl_exec_t:s0 objtype=NORMAL
type=PATH msg=audit(1447053028.098:694201): item=1 name=(null) inode=2292 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=SYSCALL msg=audit(1447053028.143:694202): arch=c000003e syscall=59 success=yes exit=0 a0=235c690 a1=235c4d0 a2=235c0b0 a3=7fff1c282f70 items=2 ppid=29108 pid=29120 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22590 comm="systemctl" exe="/usr/bin/systemctl" subj=unconfined_u:unconfined_r:rpm_script_t:s0-s0:c0.c1023 key="privileged"
type=EXECVE msg=audit(1447053028.143:694202): argc=3 a0="systemctl" a1="enable" a2="titan"
type=CWD msg=audit(1447053028.143:694202):  cwd="/"
type=PATH msg=audit(1447053028.143:694202): item=0 name="/bin/systemctl" inode=25275302 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:systemd_systemctl_exec_t:s0 objtype=NORMAL
type=PATH msg=audit(1447053028.143:694202): item=1 name=(null) inode=2292 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=SYSCALL msg=audit(1447053114.759:694203): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=SYSCALL msg=audit(1447053148.811:694204): arch=c000003e syscall=59 success=yes exit=0 a0=ea86f0 a1=ea40c0 a2=eb1430 a3=7fff67448f80 items=2 ppid=28919 pid=29465 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22590 comm="systemctl" exe="/usr/bin/systemctl" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key="privileged"
type=EXECVE msg=audit(1447053148.811:694204): argc=3 a0="/usr/bin/systemctl" a1="start" a2="titan"
type=CWD msg=audit(1447053148.811:694204):  cwd="/usr/local/test/titan"
type=PATH msg=audit(1447053148.811:694204): item=0 name="/usr/bin/systemctl" inode=25275302 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:systemd_systemctl_exec_t:s0 objtype=NORMAL
type=PATH msg=audit(1447053148.811:694204): item=1 name=(null) inode=2292 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=SERVICE_START msg=audit(1447053149.859:694205): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="titan" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447053183.451:694206): pid=29684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=29684 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447053183.451:694207): pid=29684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=29684 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447053183.451:694208): pid=29684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=29684 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447053183.496:694209): pid=29683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=29684 suid=74 rport=64474 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447053183.497:694210): pid=29683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=29684 suid=74 rport=64474 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447053183.624:694211): pid=29683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=64474 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447053183.625:694212): pid=29683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=64474 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447053183.630:694213): pid=29683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447053183.631:694214): pid=29683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29684 suid=74 rport=64474 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447053183.632:694215): pid=29683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447053183.632:694216): pid=29683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447053183.632:694217): pid=29683 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22592 res=1
type=USER_ROLE_CHANGE msg=audit(1447053183.705:694218): pid=29683 uid=0 auid=0 ses=22592 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447053183.724:694219): pid=29683 uid=0 auid=0 ses=22592 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447053183.726:694220): pid=29683 uid=0 auid=0 ses=22592 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447053183.726:694221): pid=29683 uid=0 auid=0 ses=22592 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447053183.727:694222): pid=29686 uid=0 auid=0 ses=22592 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=29686 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447053183.727:694223): pid=29686 uid=0 auid=0 ses=22592 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=29686 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447053183.728:694224): pid=29686 uid=0 auid=0 ses=22592 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=29686 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447053183.728:694225): pid=29686 uid=0 auid=0 ses=22592 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447053183.746:694226): pid=29683 uid=0 auid=0 ses=22592 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447053183.746:694227): pid=29683 uid=0 auid=0 ses=22592 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447053183.749:694228): pid=29683 uid=0 auid=0 ses=22592 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447053183.749:694229): pid=29683 uid=0 auid=0 ses=22592 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447053183.749:694230): pid=29683 uid=0 auid=0 ses=22592 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29683 suid=0 rport=64474 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447053183.750:694231): pid=29683 uid=0 auid=0 ses=22592 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=29683 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447053183.750:694232): pid=29683 uid=0 auid=0 ses=22592 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=29683 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447053183.750:694233): pid=29683 uid=0 auid=0 ses=22592 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=29683 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447053183.773:694234): pid=29693 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=29693 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447053183.773:694235): pid=29693 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=29693 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447053183.773:694236): pid=29693 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=29693 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447053183.817:694237): pid=29692 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=29693 suid=74 rport=64475 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447053183.818:694238): pid=29692 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=29693 suid=74 rport=64475 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447053183.946:694239): pid=29692 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=64475 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447053183.946:694240): pid=29692 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=64475 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447053183.955:694241): pid=29692 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447053183.956:694242): pid=29692 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29693 suid=74 rport=64475 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447053183.958:694243): pid=29692 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447053183.959:694244): pid=29692 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447053183.959:694245): pid=29692 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22593 res=1
type=USER_ROLE_CHANGE msg=audit(1447053184.023:694246): pid=29692 uid=0 auid=0 ses=22593 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447053184.045:694247): pid=29692 uid=0 auid=0 ses=22593 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447053184.048:694248): pid=29692 uid=0 auid=0 ses=22593 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447053184.048:694249): pid=29692 uid=0 auid=0 ses=22593 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447053184.050:694250): pid=29695 uid=0 auid=0 ses=22593 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=29695 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447053184.050:694251): pid=29695 uid=0 auid=0 ses=22593 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=29695 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447053184.050:694252): pid=29695 uid=0 auid=0 ses=22593 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=29695 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447053184.051:694253): pid=29695 uid=0 auid=0 ses=22593 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447053185.308:694254): pid=29692 uid=0 auid=0 ses=22593 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447053185.308:694255): pid=29692 uid=0 auid=0 ses=22593 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447053185.313:694256): pid=29692 uid=0 auid=0 ses=22593 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447053185.313:694257): pid=29692 uid=0 auid=0 ses=22593 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447053185.313:694258): pid=29692 uid=0 auid=0 ses=22593 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29692 suid=0 rport=64475 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447053185.313:694259): pid=29692 uid=0 auid=0 ses=22593 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=29692 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447053185.313:694260): pid=29692 uid=0 auid=0 ses=22593 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=29692 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447053185.313:694261): pid=29692 uid=0 auid=0 ses=22593 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=29692 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447053185.342:694262): pid=29746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=29746 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447053185.342:694263): pid=29746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=29746 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447053185.342:694264): pid=29746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=29746 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447053185.386:694265): pid=29745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=29746 suid=74 rport=64477 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447053185.386:694266): pid=29745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=29746 suid=74 rport=64477 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447053185.512:694267): pid=29745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=64477 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447053185.512:694268): pid=29745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=64477 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447053185.536:694269): pid=29745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447053185.539:694270): pid=29745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29746 suid=74 rport=64477 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447053185.539:694271): pid=29745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447053185.540:694272): pid=29745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447053185.540:694273): pid=29745 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22594 res=1
type=USER_ROLE_CHANGE msg=audit(1447053185.610:694274): pid=29745 uid=0 auid=0 ses=22594 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447053185.628:694275): pid=29745 uid=0 auid=0 ses=22594 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447053185.631:694276): pid=29745 uid=0 auid=0 ses=22594 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447053185.631:694277): pid=29745 uid=0 auid=0 ses=22594 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447053185.632:694278): pid=29788 uid=0 auid=0 ses=22594 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=29788 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447053185.632:694279): pid=29788 uid=0 auid=0 ses=22594 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=29788 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447053185.632:694280): pid=29788 uid=0 auid=0 ses=22594 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=29788 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447053185.633:694281): pid=29788 uid=0 auid=0 ses=22594 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447053185.650:694282): pid=29745 uid=0 auid=0 ses=22594 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447053185.650:694283): pid=29745 uid=0 auid=0 ses=22594 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447053185.653:694284): pid=29745 uid=0 auid=0 ses=22594 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447053185.653:694285): pid=29745 uid=0 auid=0 ses=22594 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447053185.653:694286): pid=29745 uid=0 auid=0 ses=22594 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29745 suid=0 rport=64477 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447053185.653:694287): pid=29745 uid=0 auid=0 ses=22594 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=29745 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447053185.653:694288): pid=29745 uid=0 auid=0 ses=22594 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=29745 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447053185.653:694289): pid=29745 uid=0 auid=0 ses=22594 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=29745 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_DISP msg=audit(1447053269.875:694290): pid=28912 uid=0 auid=0 ses=22590 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447053269.880:694291): pid=28912 uid=0 auid=0 ses=22590 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447053601.899:694293): pid=31158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447053601.899:694292): pid=31159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447053601.899:694294): pid=31158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447053601.899:694295): pid=31159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447053601.900:694296): pid=31159 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22595 res=1
type=LOGIN msg=audit(1447053601.900:694297): pid=31158 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22596 res=1
type=USER_START msg=audit(1447053601.917:694298): pid=31158 uid=0 auid=0 ses=22596 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447053601.917:694299): pid=31158 uid=0 auid=0 ses=22596 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447053601.917:694300): pid=31159 uid=0 auid=0 ses=22595 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447053601.917:694301): pid=31159 uid=0 auid=0 ses=22595 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447053601.925:694302): pid=31159 uid=0 auid=0 ses=22595 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447053601.926:694303): pid=31159 uid=0 auid=0 ses=22595 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447053601.933:694304): pid=31158 uid=0 auid=0 ses=22596 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447053601.935:694305): pid=31158 uid=0 auid=0 ses=22596 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1447054187.722:694306): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447054201.950:694307): pid=620 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447054201.950:694308): pid=620 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447054201.951:694309): pid=620 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22597 res=1
type=USER_ACCT msg=audit(1447054201.951:694310): pid=619 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447054201.951:694311): pid=619 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447054201.951:694312): pid=619 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22598 res=1
type=USER_START msg=audit(1447054201.965:694313): pid=619 uid=0 auid=0 ses=22598 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447054201.965:694314): pid=619 uid=0 auid=0 ses=22598 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447054201.965:694315): pid=620 uid=0 auid=0 ses=22597 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447054201.966:694316): pid=620 uid=0 auid=0 ses=22597 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447054201.971:694317): pid=620 uid=0 auid=0 ses=22597 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447054201.972:694318): pid=620 uid=0 auid=0 ses=22597 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447054201.981:694319): pid=619 uid=0 auid=0 ses=22598 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447054201.982:694320): pid=619 uid=0 auid=0 ses=22598 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447054382.851:694321): pid=1222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=1222 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447054382.852:694322): pid=1222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=1222 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447054382.852:694323): pid=1222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=1222 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447054382.895:694324): pid=1221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=1222 suid=74 rport=33688 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447054382.895:694325): pid=1221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=1222 suid=74 rport=33688 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447054383.022:694326): pid=1221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33688 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447054383.023:694327): pid=1221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=33688 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447054383.028:694328): pid=1221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447054383.030:694329): pid=1221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1222 suid=74 rport=33688 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447054383.031:694330): pid=1221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447054383.031:694331): pid=1221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447054383.031:694332): pid=1221 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22599 res=1
type=USER_ROLE_CHANGE msg=audit(1447054383.100:694333): pid=1221 uid=0 auid=0 ses=22599 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447054383.119:694334): pid=1221 uid=0 auid=0 ses=22599 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447054383.122:694335): pid=1221 uid=0 auid=0 ses=22599 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447054383.122:694336): pid=1221 uid=0 auid=0 ses=22599 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447054383.123:694337): pid=1224 uid=0 auid=0 ses=22599 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=1224 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447054383.123:694338): pid=1224 uid=0 auid=0 ses=22599 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=1224 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447054383.124:694339): pid=1224 uid=0 auid=0 ses=22599 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=1224 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447054383.124:694340): pid=1224 uid=0 auid=0 ses=22599 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447054383.142:694341): pid=1221 uid=0 auid=0 ses=22599 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447054383.142:694342): pid=1221 uid=0 auid=0 ses=22599 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447054383.147:694343): pid=1221 uid=0 auid=0 ses=22599 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447054383.147:694344): pid=1221 uid=0 auid=0 ses=22599 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447054383.148:694345): pid=1221 uid=0 auid=0 ses=22599 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1221 suid=0 rport=33688 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447054383.148:694346): pid=1221 uid=0 auid=0 ses=22599 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=1221 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447054383.149:694347): pid=1221 uid=0 auid=0 ses=22599 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=1221 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447054383.149:694348): pid=1221 uid=0 auid=0 ses=22599 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=1221 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447054383.168:694349): pid=1232 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=1232 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447054383.168:694350): pid=1232 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=1232 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447054383.168:694351): pid=1232 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=1232 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447054383.212:694352): pid=1231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=1232 suid=74 rport=33690 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447054383.213:694353): pid=1231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=1232 suid=74 rport=33690 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447054383.341:694354): pid=1231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33690 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447054383.341:694355): pid=1231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=33690 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447054383.347:694356): pid=1231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447054383.347:694357): pid=1231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1232 suid=74 rport=33690 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447054383.349:694358): pid=1231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447054383.349:694359): pid=1231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447054383.350:694360): pid=1231 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22600 res=1
type=USER_ROLE_CHANGE msg=audit(1447054383.412:694361): pid=1231 uid=0 auid=0 ses=22600 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447054383.434:694362): pid=1231 uid=0 auid=0 ses=22600 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447054383.437:694363): pid=1231 uid=0 auid=0 ses=22600 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447054383.437:694364): pid=1231 uid=0 auid=0 ses=22600 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447054383.439:694365): pid=1234 uid=0 auid=0 ses=22600 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=1234 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447054383.439:694366): pid=1234 uid=0 auid=0 ses=22600 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=1234 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447054383.439:694367): pid=1234 uid=0 auid=0 ses=22600 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=1234 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447054383.440:694368): pid=1234 uid=0 auid=0 ses=22600 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447054384.720:694369): pid=1231 uid=0 auid=0 ses=22600 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447054384.720:694370): pid=1231 uid=0 auid=0 ses=22600 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447054384.724:694371): pid=1231 uid=0 auid=0 ses=22600 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447054384.724:694372): pid=1231 uid=0 auid=0 ses=22600 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447054384.725:694373): pid=1231 uid=0 auid=0 ses=22600 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1231 suid=0 rport=33690 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447054384.725:694374): pid=1231 uid=0 auid=0 ses=22600 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=1231 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447054384.725:694375): pid=1231 uid=0 auid=0 ses=22600 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=1231 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447054384.725:694376): pid=1231 uid=0 auid=0 ses=22600 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=1231 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447054384.763:694377): pid=1284 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=1284 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447054384.763:694378): pid=1284 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=1284 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447054384.763:694379): pid=1284 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=1284 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447054384.808:694380): pid=1283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=1284 suid=74 rport=33693 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447054384.808:694381): pid=1283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=1284 suid=74 rport=33693 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447054384.935:694382): pid=1283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33693 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447054384.935:694383): pid=1283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=33693 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447054384.942:694384): pid=1283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447054384.943:694385): pid=1283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1284 suid=74 rport=33693 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447054384.946:694386): pid=1283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447054384.946:694387): pid=1283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447054384.946:694388): pid=1283 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22601 res=1
type=USER_ROLE_CHANGE msg=audit(1447054385.011:694389): pid=1283 uid=0 auid=0 ses=22601 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447054385.033:694390): pid=1283 uid=0 auid=0 ses=22601 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447054385.036:694391): pid=1283 uid=0 auid=0 ses=22601 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447054385.036:694392): pid=1283 uid=0 auid=0 ses=22601 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447054385.037:694393): pid=1286 uid=0 auid=0 ses=22601 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=1286 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447054385.037:694394): pid=1286 uid=0 auid=0 ses=22601 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=1286 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447054385.037:694395): pid=1286 uid=0 auid=0 ses=22601 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=1286 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447054385.038:694396): pid=1286 uid=0 auid=0 ses=22601 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447054385.059:694397): pid=1283 uid=0 auid=0 ses=22601 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447054385.059:694398): pid=1283 uid=0 auid=0 ses=22601 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447054385.063:694399): pid=1283 uid=0 auid=0 ses=22601 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447054385.063:694400): pid=1283 uid=0 auid=0 ses=22601 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447054385.064:694401): pid=1283 uid=0 auid=0 ses=22601 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1283 suid=0 rport=33693 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447054385.064:694402): pid=1283 uid=0 auid=0 ses=22601 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=1283 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447054385.064:694403): pid=1283 uid=0 auid=0 ses=22601 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=1283 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447054385.064:694404): pid=1283 uid=0 auid=0 ses=22601 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=1283 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447054802.005:694405): pid=2575 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447054802.005:694406): pid=2575 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447054802.006:694407): pid=2575 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22602 res=1
type=USER_ACCT msg=audit(1447054802.008:694408): pid=2574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447054802.008:694409): pid=2574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447054802.008:694410): pid=2574 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22603 res=1
type=USER_START msg=audit(1447054802.025:694411): pid=2575 uid=0 auid=0 ses=22602 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447054802.025:694412): pid=2575 uid=0 auid=0 ses=22602 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447054802.026:694413): pid=2574 uid=0 auid=0 ses=22603 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447054802.026:694414): pid=2574 uid=0 auid=0 ses=22603 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447054802.036:694415): pid=2575 uid=0 auid=0 ses=22602 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447054802.037:694416): pid=2575 uid=0 auid=0 ses=22602 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447054802.040:694417): pid=2574 uid=0 auid=0 ses=22603 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447054802.044:694418): pid=2574 uid=0 auid=0 ses=22603 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447055401.061:694419): pid=4418 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447055401.062:694420): pid=4418 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447055401.062:694421): pid=4417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447055401.062:694422): pid=4417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447055401.062:694423): pid=4418 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22604 res=1
type=LOGIN msg=audit(1447055401.062:694424): pid=4417 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22605 res=1
type=USER_START msg=audit(1447055401.080:694425): pid=4417 uid=0 auid=0 ses=22605 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447055401.080:694426): pid=4418 uid=0 auid=0 ses=22604 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447055401.081:694427): pid=4417 uid=0 auid=0 ses=22605 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447055401.081:694428): pid=4418 uid=0 auid=0 ses=22604 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447055401.086:694429): pid=4418 uid=0 auid=0 ses=22604 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447055401.087:694430): pid=4418 uid=0 auid=0 ses=22604 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447055401.096:694431): pid=4417 uid=0 auid=0 ses=22605 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447055401.097:694432): pid=4417 uid=0 auid=0 ses=22605 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447055583.290:694433): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=4985 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447055583.290:694434): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=4985 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447055583.290:694435): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=4985 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447055583.334:694436): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=4985 suid=74 rport=35669 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447055583.334:694437): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=4985 suid=74 rport=35669 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447055583.462:694438): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=35669 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447055583.462:694439): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=35669 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447055583.471:694440): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447055583.473:694441): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4985 suid=74 rport=35669 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447055583.473:694442): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447055583.474:694443): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447055583.474:694444): pid=4984 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22606 res=1
type=USER_ROLE_CHANGE msg=audit(1447055583.544:694445): pid=4984 uid=0 auid=0 ses=22606 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447055583.562:694446): pid=4984 uid=0 auid=0 ses=22606 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447055583.564:694447): pid=4984 uid=0 auid=0 ses=22606 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447055583.564:694448): pid=4984 uid=0 auid=0 ses=22606 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447055583.566:694449): pid=4987 uid=0 auid=0 ses=22606 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=4987 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447055583.566:694450): pid=4987 uid=0 auid=0 ses=22606 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=4987 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447055583.566:694451): pid=4987 uid=0 auid=0 ses=22606 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=4987 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447055583.567:694452): pid=4987 uid=0 auid=0 ses=22606 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447055583.584:694453): pid=4984 uid=0 auid=0 ses=22606 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447055583.584:694454): pid=4984 uid=0 auid=0 ses=22606 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447055583.588:694455): pid=4984 uid=0 auid=0 ses=22606 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447055583.589:694456): pid=4984 uid=0 auid=0 ses=22606 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447055583.590:694457): pid=4984 uid=0 auid=0 ses=22606 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4984 suid=0 rport=35669 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447055583.590:694458): pid=4984 uid=0 auid=0 ses=22606 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=4984 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447055583.590:694459): pid=4984 uid=0 auid=0 ses=22606 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=4984 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447055583.590:694460): pid=4984 uid=0 auid=0 ses=22606 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=4984 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447055583.611:694461): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=4995 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447055583.611:694462): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=4995 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447055583.611:694463): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=4995 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447055583.656:694464): pid=4994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=4995 suid=74 rport=35671 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447055583.656:694465): pid=4994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=4995 suid=74 rport=35671 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447055583.785:694466): pid=4994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=35671 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447055583.785:694467): pid=4994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=35671 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447055583.793:694468): pid=4994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447055583.794:694469): pid=4994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4995 suid=74 rport=35671 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447055583.798:694470): pid=4994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447055583.798:694471): pid=4994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447055583.798:694472): pid=4994 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22607 res=1
type=USER_ROLE_CHANGE msg=audit(1447055583.867:694473): pid=4994 uid=0 auid=0 ses=22607 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447055583.889:694474): pid=4994 uid=0 auid=0 ses=22607 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447055583.892:694475): pid=4994 uid=0 auid=0 ses=22607 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447055583.892:694476): pid=4994 uid=0 auid=0 ses=22607 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447055583.894:694477): pid=4997 uid=0 auid=0 ses=22607 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=4997 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447055583.894:694478): pid=4997 uid=0 auid=0 ses=22607 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=4997 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447055583.894:694479): pid=4997 uid=0 auid=0 ses=22607 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=4997 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447055583.894:694480): pid=4997 uid=0 auid=0 ses=22607 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447055585.178:694481): pid=4994 uid=0 auid=0 ses=22607 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447055585.179:694482): pid=4994 uid=0 auid=0 ses=22607 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447055585.182:694483): pid=4994 uid=0 auid=0 ses=22607 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447055585.182:694484): pid=4994 uid=0 auid=0 ses=22607 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447055585.183:694485): pid=4994 uid=0 auid=0 ses=22607 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4994 suid=0 rport=35671 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447055585.183:694486): pid=4994 uid=0 auid=0 ses=22607 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=4994 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447055585.183:694487): pid=4994 uid=0 auid=0 ses=22607 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=4994 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447055585.183:694488): pid=4994 uid=0 auid=0 ses=22607 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=4994 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447055585.216:694489): pid=5047 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=5047 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447055585.216:694490): pid=5047 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=5047 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447055585.216:694491): pid=5047 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=5047 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447055585.261:694492): pid=5046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=5047 suid=74 rport=35674 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447055585.262:694493): pid=5046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=5047 suid=74 rport=35674 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447055585.383:694494): pid=5046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=35674 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447055585.383:694495): pid=5046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=35674 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447055585.390:694496): pid=5046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447055585.391:694497): pid=5046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5047 suid=74 rport=35674 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447055585.392:694498): pid=5046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447055585.393:694499): pid=5046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447055585.393:694500): pid=5046 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22608 res=1
type=USER_ROLE_CHANGE msg=audit(1447055585.460:694501): pid=5046 uid=0 auid=0 ses=22608 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447055585.478:694502): pid=5046 uid=0 auid=0 ses=22608 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447055585.481:694503): pid=5046 uid=0 auid=0 ses=22608 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447055585.481:694504): pid=5046 uid=0 auid=0 ses=22608 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447055585.482:694505): pid=5049 uid=0 auid=0 ses=22608 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=5049 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447055585.482:694506): pid=5049 uid=0 auid=0 ses=22608 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=5049 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447055585.482:694507): pid=5049 uid=0 auid=0 ses=22608 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=5049 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447055585.483:694508): pid=5049 uid=0 auid=0 ses=22608 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447055585.498:694509): pid=5046 uid=0 auid=0 ses=22608 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447055585.498:694510): pid=5046 uid=0 auid=0 ses=22608 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447055585.501:694511): pid=5046 uid=0 auid=0 ses=22608 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447055585.501:694512): pid=5046 uid=0 auid=0 ses=22608 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447055585.501:694513): pid=5046 uid=0 auid=0 ses=22608 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5046 suid=0 rport=35674 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447055585.502:694514): pid=5046 uid=0 auid=0 ses=22608 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=5046 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447055585.502:694515): pid=5046 uid=0 auid=0 ses=22608 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=5046 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447055585.502:694516): pid=5046 uid=0 auid=0 ses=22608 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=5046 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447056001.117:694517): pid=6334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447056001.117:694518): pid=6333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447056001.117:694519): pid=6334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447056001.117:694520): pid=6333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447056001.118:694521): pid=6334 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22609 res=1
type=LOGIN msg=audit(1447056001.118:694522): pid=6333 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22610 res=1
type=USER_START msg=audit(1447056001.136:694523): pid=6334 uid=0 auid=0 ses=22609 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447056001.136:694524): pid=6334 uid=0 auid=0 ses=22609 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447056001.137:694525): pid=6333 uid=0 auid=0 ses=22610 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447056001.137:694526): pid=6333 uid=0 auid=0 ses=22610 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447056001.146:694527): pid=6334 uid=0 auid=0 ses=22609 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447056001.151:694528): pid=6334 uid=0 auid=0 ses=22609 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447056001.152:694529): pid=6333 uid=0 auid=0 ses=22610 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447056026.180:694530): pid=6333 uid=0 auid=0 ses=22610 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=USER_ACCT msg=audit(1447056061.193:694531): pid=6570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447056061.193:694532): pid=6570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447056061.194:694533): pid=6570 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22611 res=1
type=USER_START msg=audit(1447056061.204:694534): pid=6570 uid=0 auid=0 ses=22611 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447056061.204:694535): pid=6570 uid=0 auid=0 ses=22611 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447056061.231:694536): pid=6570 uid=0 auid=0 ses=22611 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447056061.232:694537): pid=6570 uid=0 auid=0 ses=22611 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1447056280.706:694538): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447056601.250:694539): pid=8237 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447056601.250:694540): pid=8236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447056601.250:694541): pid=8237 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447056601.250:694542): pid=8236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447056601.250:694543): pid=8237 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22612 res=1
type=LOGIN msg=audit(1447056601.250:694544): pid=8236 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22613 res=1
type=USER_START msg=audit(1447056601.268:694545): pid=8236 uid=0 auid=0 ses=22613 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447056601.269:694546): pid=8236 uid=0 auid=0 ses=22613 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447056601.270:694547): pid=8237 uid=0 auid=0 ses=22612 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447056601.270:694548): pid=8237 uid=0 auid=0 ses=22612 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447056601.278:694549): pid=8237 uid=0 auid=0 ses=22612 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447056601.279:694550): pid=8237 uid=0 auid=0 ses=22612 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447056601.294:694551): pid=8236 uid=0 auid=0 ses=22613 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447056601.298:694552): pid=8236 uid=0 auid=0 ses=22613 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447056783.156:694553): pid=8809 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=8809 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447056783.156:694554): pid=8809 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=8809 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447056783.156:694555): pid=8809 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=8809 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447056783.202:694556): pid=8808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=8809 suid=74 rport=37650 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447056783.202:694557): pid=8808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=8809 suid=74 rport=37650 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447056783.332:694558): pid=8808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=37650 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447056783.332:694559): pid=8808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=37650 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447056783.340:694560): pid=8808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447056783.342:694561): pid=8808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8809 suid=74 rport=37650 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447056783.343:694562): pid=8808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447056783.343:694563): pid=8808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447056783.343:694564): pid=8808 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22614 res=1
type=USER_ROLE_CHANGE msg=audit(1447056783.411:694565): pid=8808 uid=0 auid=0 ses=22614 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447056783.432:694566): pid=8808 uid=0 auid=0 ses=22614 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447056783.435:694567): pid=8808 uid=0 auid=0 ses=22614 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447056783.435:694568): pid=8808 uid=0 auid=0 ses=22614 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447056783.437:694569): pid=8811 uid=0 auid=0 ses=22614 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=8811 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447056783.437:694570): pid=8811 uid=0 auid=0 ses=22614 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=8811 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447056783.437:694571): pid=8811 uid=0 auid=0 ses=22614 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=8811 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447056783.438:694572): pid=8811 uid=0 auid=0 ses=22614 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447056783.457:694573): pid=8808 uid=0 auid=0 ses=22614 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447056783.457:694574): pid=8808 uid=0 auid=0 ses=22614 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447056783.462:694575): pid=8808 uid=0 auid=0 ses=22614 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447056783.462:694576): pid=8808 uid=0 auid=0 ses=22614 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447056783.463:694577): pid=8808 uid=0 auid=0 ses=22614 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8808 suid=0 rport=37650 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447056783.463:694578): pid=8808 uid=0 auid=0 ses=22614 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=8808 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447056783.463:694579): pid=8808 uid=0 auid=0 ses=22614 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=8808 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447056783.463:694580): pid=8808 uid=0 auid=0 ses=22614 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=8808 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447056783.485:694581): pid=8819 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=8819 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447056783.485:694582): pid=8819 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=8819 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447056783.485:694583): pid=8819 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=8819 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447056783.530:694584): pid=8818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=8819 suid=74 rport=37651 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447056783.531:694585): pid=8818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=8819 suid=74 rport=37651 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447056783.654:694586): pid=8818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=37651 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447056783.654:694587): pid=8818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=37651 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447056783.659:694588): pid=8818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447056783.660:694589): pid=8818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8819 suid=74 rport=37651 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447056783.661:694590): pid=8818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447056783.661:694591): pid=8818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447056783.662:694592): pid=8818 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22615 res=1
type=USER_ROLE_CHANGE msg=audit(1447056783.726:694593): pid=8818 uid=0 auid=0 ses=22615 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447056783.748:694594): pid=8818 uid=0 auid=0 ses=22615 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447056783.750:694595): pid=8818 uid=0 auid=0 ses=22615 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447056783.750:694596): pid=8818 uid=0 auid=0 ses=22615 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447056783.752:694597): pid=8821 uid=0 auid=0 ses=22615 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=8821 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447056783.752:694598): pid=8821 uid=0 auid=0 ses=22615 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=8821 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447056783.752:694599): pid=8821 uid=0 auid=0 ses=22615 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=8821 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447056783.753:694600): pid=8821 uid=0 auid=0 ses=22615 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447056785.022:694601): pid=8818 uid=0 auid=0 ses=22615 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447056785.022:694602): pid=8818 uid=0 auid=0 ses=22615 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447056785.027:694603): pid=8818 uid=0 auid=0 ses=22615 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447056785.027:694604): pid=8818 uid=0 auid=0 ses=22615 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447056785.028:694605): pid=8818 uid=0 auid=0 ses=22615 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8818 suid=0 rport=37651 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447056785.028:694606): pid=8818 uid=0 auid=0 ses=22615 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=8818 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447056785.029:694607): pid=8818 uid=0 auid=0 ses=22615 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=8818 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447056785.029:694608): pid=8818 uid=0 auid=0 ses=22615 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=8818 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447056785.063:694609): pid=8871 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=8871 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447056785.063:694610): pid=8871 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=8871 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447056785.063:694611): pid=8871 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=8871 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447056785.108:694612): pid=8870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=8871 suid=74 rport=37654 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447056785.108:694613): pid=8870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=8871 suid=74 rport=37654 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447056785.237:694614): pid=8870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=37654 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447056785.237:694615): pid=8870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=37654 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447056785.247:694616): pid=8870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447056785.248:694617): pid=8870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8871 suid=74 rport=37654 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447056785.249:694618): pid=8870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447056785.250:694619): pid=8870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447056785.250:694620): pid=8870 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22616 res=1
type=USER_ROLE_CHANGE msg=audit(1447056785.315:694621): pid=8870 uid=0 auid=0 ses=22616 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447056785.341:694622): pid=8870 uid=0 auid=0 ses=22616 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447056785.344:694623): pid=8870 uid=0 auid=0 ses=22616 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447056785.344:694624): pid=8870 uid=0 auid=0 ses=22616 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447056785.345:694625): pid=8873 uid=0 auid=0 ses=22616 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=8873 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447056785.345:694626): pid=8873 uid=0 auid=0 ses=22616 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=8873 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447056785.345:694627): pid=8873 uid=0 auid=0 ses=22616 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=8873 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447056785.346:694628): pid=8873 uid=0 auid=0 ses=22616 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447056785.363:694629): pid=8870 uid=0 auid=0 ses=22616 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447056785.363:694630): pid=8870 uid=0 auid=0 ses=22616 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447056785.368:694631): pid=8870 uid=0 auid=0 ses=22616 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447056785.368:694632): pid=8870 uid=0 auid=0 ses=22616 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447056785.369:694633): pid=8870 uid=0 auid=0 ses=22616 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8870 suid=0 rport=37654 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447056785.369:694634): pid=8870 uid=0 auid=0 ses=22616 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=8870 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447056785.369:694635): pid=8870 uid=0 auid=0 ses=22616 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=8870 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447056785.370:694636): pid=8870 uid=0 auid=0 ses=22616 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=8870 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447057201.320:694637): pid=10162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447057201.320:694638): pid=10162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447057201.321:694639): pid=10162 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22617 res=1
type=USER_ACCT msg=audit(1447057201.332:694640): pid=10161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447057201.332:694641): pid=10161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447057201.332:694642): pid=10161 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22618 res=1
type=USER_START msg=audit(1447057201.343:694643): pid=10161 uid=0 auid=0 ses=22618 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447057201.343:694644): pid=10161 uid=0 auid=0 ses=22618 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447057201.343:694645): pid=10162 uid=0 auid=0 ses=22617 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447057201.344:694646): pid=10162 uid=0 auid=0 ses=22617 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447057201.354:694647): pid=10162 uid=0 auid=0 ses=22617 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447057201.356:694648): pid=10162 uid=0 auid=0 ses=22617 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447057201.359:694649): pid=10161 uid=0 auid=0 ses=22618 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447057201.362:694650): pid=10161 uid=0 auid=0 ses=22618 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447057801.380:694651): pid=12008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447057801.380:694652): pid=12007 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447057801.380:694653): pid=12007 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447057801.380:694654): pid=12008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447057801.381:694655): pid=12008 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22619 res=1
type=LOGIN msg=audit(1447057801.381:694656): pid=12007 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22620 res=1
type=USER_START msg=audit(1447057801.397:694657): pid=12008 uid=0 auid=0 ses=22619 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447057801.397:694658): pid=12008 uid=0 auid=0 ses=22619 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447057801.399:694659): pid=12007 uid=0 auid=0 ses=22620 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447057801.399:694660): pid=12007 uid=0 auid=0 ses=22620 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447057801.402:694661): pid=12008 uid=0 auid=0 ses=22619 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447057801.404:694662): pid=12008 uid=0 auid=0 ses=22619 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447057801.414:694663): pid=12007 uid=0 auid=0 ses=22620 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447057801.415:694664): pid=12007 uid=0 auid=0 ses=22620 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447057983.183:694665): pid=12574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12574 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447057983.183:694666): pid=12574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12574 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447057983.183:694667): pid=12574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12574 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447057983.228:694668): pid=12573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=12574 suid=74 rport=39630 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447057983.228:694669): pid=12573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=12574 suid=74 rport=39630 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447057983.356:694670): pid=12573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=39630 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447057983.356:694671): pid=12573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=39630 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447057983.363:694672): pid=12573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447057983.364:694673): pid=12573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12574 suid=74 rport=39630 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447057983.366:694674): pid=12573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447057983.366:694675): pid=12573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447057983.367:694676): pid=12573 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22621 res=1
type=USER_ROLE_CHANGE msg=audit(1447057983.441:694677): pid=12573 uid=0 auid=0 ses=22621 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447057983.466:694678): pid=12573 uid=0 auid=0 ses=22621 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447057983.469:694679): pid=12573 uid=0 auid=0 ses=22621 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447057983.469:694680): pid=12573 uid=0 auid=0 ses=22621 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447057983.470:694681): pid=12576 uid=0 auid=0 ses=22621 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12576 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447057983.470:694682): pid=12576 uid=0 auid=0 ses=22621 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12576 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447057983.470:694683): pid=12576 uid=0 auid=0 ses=22621 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12576 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447057983.471:694684): pid=12576 uid=0 auid=0 ses=22621 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447057983.489:694685): pid=12573 uid=0 auid=0 ses=22621 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447057983.489:694686): pid=12573 uid=0 auid=0 ses=22621 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447057983.493:694687): pid=12573 uid=0 auid=0 ses=22621 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447057983.493:694688): pid=12573 uid=0 auid=0 ses=22621 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447057983.494:694689): pid=12573 uid=0 auid=0 ses=22621 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12573 suid=0 rport=39630 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447057983.494:694690): pid=12573 uid=0 auid=0 ses=22621 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12573 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447057983.494:694691): pid=12573 uid=0 auid=0 ses=22621 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12573 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447057983.494:694692): pid=12573 uid=0 auid=0 ses=22621 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12573 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447057983.516:694693): pid=12584 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12584 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447057983.516:694694): pid=12584 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12584 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447057983.516:694695): pid=12584 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12584 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447057983.561:694696): pid=12583 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=12584 suid=74 rport=39631 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447057983.561:694697): pid=12583 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=12584 suid=74 rport=39631 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447057983.681:694698): pid=12583 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=39631 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447057983.681:694699): pid=12583 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=39631 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447057983.686:694700): pid=12583 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447057983.686:694701): pid=12583 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12584 suid=74 rport=39631 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447057983.687:694702): pid=12583 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447057983.688:694703): pid=12583 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447057983.688:694704): pid=12583 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22622 res=1
type=USER_ROLE_CHANGE msg=audit(1447057983.755:694705): pid=12583 uid=0 auid=0 ses=22622 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447057983.776:694706): pid=12583 uid=0 auid=0 ses=22622 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447057983.779:694707): pid=12583 uid=0 auid=0 ses=22622 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447057983.779:694708): pid=12583 uid=0 auid=0 ses=22622 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447057983.781:694709): pid=12586 uid=0 auid=0 ses=22622 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12586 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447057983.781:694710): pid=12586 uid=0 auid=0 ses=22622 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12586 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447057983.781:694711): pid=12586 uid=0 auid=0 ses=22622 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12586 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447057983.782:694712): pid=12586 uid=0 auid=0 ses=22622 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447057985.062:694713): pid=12583 uid=0 auid=0 ses=22622 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447057985.062:694714): pid=12583 uid=0 auid=0 ses=22622 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447057985.067:694715): pid=12583 uid=0 auid=0 ses=22622 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447057985.067:694716): pid=12583 uid=0 auid=0 ses=22622 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447057985.067:694717): pid=12583 uid=0 auid=0 ses=22622 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12583 suid=0 rport=39631 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447057985.068:694718): pid=12583 uid=0 auid=0 ses=22622 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12583 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447057985.068:694719): pid=12583 uid=0 auid=0 ses=22622 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12583 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447057985.068:694720): pid=12583 uid=0 auid=0 ses=22622 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12583 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447057985.103:694721): pid=12637 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12637 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447057985.103:694722): pid=12637 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12637 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447057985.103:694723): pid=12637 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12637 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447057985.149:694724): pid=12636 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=12637 suid=74 rport=39634 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447057985.149:694725): pid=12636 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=12637 suid=74 rport=39634 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447057985.278:694726): pid=12636 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=39634 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447057985.278:694727): pid=12636 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=39634 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447057985.287:694728): pid=12636 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447057985.288:694729): pid=12636 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12637 suid=74 rport=39634 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447057985.289:694730): pid=12636 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447057985.289:694731): pid=12636 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447057985.290:694732): pid=12636 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22623 res=1
type=USER_ROLE_CHANGE msg=audit(1447057985.353:694733): pid=12636 uid=0 auid=0 ses=22623 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447057985.376:694734): pid=12636 uid=0 auid=0 ses=22623 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447057985.379:694735): pid=12636 uid=0 auid=0 ses=22623 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447057985.379:694736): pid=12636 uid=0 auid=0 ses=22623 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447057985.381:694737): pid=12639 uid=0 auid=0 ses=22623 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12639 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447057985.381:694738): pid=12639 uid=0 auid=0 ses=22623 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12639 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447057985.381:694739): pid=12639 uid=0 auid=0 ses=22623 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12639 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447057985.381:694740): pid=12639 uid=0 auid=0 ses=22623 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447057985.398:694741): pid=12636 uid=0 auid=0 ses=22623 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447057985.398:694742): pid=12636 uid=0 auid=0 ses=22623 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447057985.401:694743): pid=12636 uid=0 auid=0 ses=22623 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447057985.401:694744): pid=12636 uid=0 auid=0 ses=22623 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447057985.402:694745): pid=12636 uid=0 auid=0 ses=22623 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12636 suid=0 rport=39634 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447057985.402:694746): pid=12636 uid=0 auid=0 ses=22623 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12636 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447057985.402:694747): pid=12636 uid=0 auid=0 ses=22623 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12636 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447057985.402:694748): pid=12636 uid=0 auid=0 ses=22623 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12636 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=SYSCALL msg=audit(1447058395.729:694749): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447058401.440:694750): pid=13925 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447058401.440:694751): pid=13925 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447058401.440:694752): pid=13924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447058401.440:694753): pid=13924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447058401.441:694754): pid=13925 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22624 res=1
type=LOGIN msg=audit(1447058401.441:694755): pid=13924 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22625 res=1
type=USER_START msg=audit(1447058401.469:694756): pid=13924 uid=0 auid=0 ses=22625 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447058401.469:694757): pid=13925 uid=0 auid=0 ses=22624 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447058401.469:694758): pid=13924 uid=0 auid=0 ses=22625 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447058401.469:694759): pid=13925 uid=0 auid=0 ses=22624 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447058401.479:694760): pid=13925 uid=0 auid=0 ses=22624 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447058401.481:694761): pid=13925 uid=0 auid=0 ses=22624 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447058401.485:694762): pid=13924 uid=0 auid=0 ses=22625 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447058401.486:694763): pid=13924 uid=0 auid=0 ses=22625 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447059001.502:694764): pid=15762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447059001.502:694765): pid=15762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447059001.502:694766): pid=15763 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447059001.502:694767): pid=15762 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22626 res=1
type=CRED_ACQ msg=audit(1447059001.502:694768): pid=15763 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447059001.502:694769): pid=15763 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22627 res=1
type=USER_START msg=audit(1447059001.517:694770): pid=15762 uid=0 auid=0 ses=22626 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447059001.517:694771): pid=15762 uid=0 auid=0 ses=22626 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447059001.523:694772): pid=15763 uid=0 auid=0 ses=22627 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447059001.523:694773): pid=15763 uid=0 auid=0 ses=22627 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447059001.528:694774): pid=15763 uid=0 auid=0 ses=22627 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447059001.529:694775): pid=15762 uid=0 auid=0 ses=22626 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447059001.530:694776): pid=15763 uid=0 auid=0 ses=22627 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447059001.535:694777): pid=15762 uid=0 auid=0 ses=22626 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447059183.172:694778): pid=16337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16337 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447059183.173:694779): pid=16337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16337 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447059183.173:694780): pid=16337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16337 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447059183.217:694781): pid=16336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=16337 suid=74 rport=41610 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447059183.218:694782): pid=16336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=16337 suid=74 rport=41610 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447059183.348:694783): pid=16336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=41610 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447059183.348:694784): pid=16336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=41610 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447059183.353:694785): pid=16336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447059183.354:694786): pid=16336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16337 suid=74 rport=41610 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447059183.357:694787): pid=16336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447059183.357:694788): pid=16336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447059183.357:694789): pid=16336 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22628 res=1
type=USER_ROLE_CHANGE msg=audit(1447059183.426:694790): pid=16336 uid=0 auid=0 ses=22628 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447059183.449:694791): pid=16336 uid=0 auid=0 ses=22628 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447059183.452:694792): pid=16336 uid=0 auid=0 ses=22628 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447059183.452:694793): pid=16336 uid=0 auid=0 ses=22628 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447059183.454:694794): pid=16339 uid=0 auid=0 ses=22628 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16339 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447059183.455:694795): pid=16339 uid=0 auid=0 ses=22628 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16339 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447059183.455:694796): pid=16339 uid=0 auid=0 ses=22628 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16339 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447059183.456:694797): pid=16339 uid=0 auid=0 ses=22628 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447059183.484:694798): pid=16336 uid=0 auid=0 ses=22628 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447059183.485:694799): pid=16336 uid=0 auid=0 ses=22628 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447059183.489:694800): pid=16336 uid=0 auid=0 ses=22628 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447059183.489:694801): pid=16336 uid=0 auid=0 ses=22628 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447059183.490:694802): pid=16336 uid=0 auid=0 ses=22628 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16336 suid=0 rport=41610 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447059183.490:694803): pid=16336 uid=0 auid=0 ses=22628 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16336 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447059183.490:694804): pid=16336 uid=0 auid=0 ses=22628 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16336 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447059183.490:694805): pid=16336 uid=0 auid=0 ses=22628 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16336 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447059183.511:694806): pid=16347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16347 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447059183.512:694807): pid=16347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16347 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447059183.512:694808): pid=16347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16347 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447059183.556:694809): pid=16346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=16347 suid=74 rport=41611 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447059183.557:694810): pid=16346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=16347 suid=74 rport=41611 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447059183.683:694811): pid=16346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=41611 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447059183.683:694812): pid=16346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=41611 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447059183.689:694813): pid=16346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447059183.690:694814): pid=16346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16347 suid=74 rport=41611 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447059183.692:694815): pid=16346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447059183.692:694816): pid=16346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447059183.692:694817): pid=16346 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22629 res=1
type=USER_ROLE_CHANGE msg=audit(1447059183.755:694818): pid=16346 uid=0 auid=0 ses=22629 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447059183.779:694819): pid=16346 uid=0 auid=0 ses=22629 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447059183.784:694820): pid=16346 uid=0 auid=0 ses=22629 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447059183.784:694821): pid=16346 uid=0 auid=0 ses=22629 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447059183.786:694822): pid=16349 uid=0 auid=0 ses=22629 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16349 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447059183.786:694823): pid=16349 uid=0 auid=0 ses=22629 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16349 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447059183.786:694824): pid=16349 uid=0 auid=0 ses=22629 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16349 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447059183.787:694825): pid=16349 uid=0 auid=0 ses=22629 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447059185.067:694826): pid=16346 uid=0 auid=0 ses=22629 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447059185.067:694827): pid=16346 uid=0 auid=0 ses=22629 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447059185.070:694828): pid=16346 uid=0 auid=0 ses=22629 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447059185.071:694829): pid=16346 uid=0 auid=0 ses=22629 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447059185.071:694830): pid=16346 uid=0 auid=0 ses=22629 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16346 suid=0 rport=41611 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447059185.071:694831): pid=16346 uid=0 auid=0 ses=22629 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16346 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447059185.071:694832): pid=16346 uid=0 auid=0 ses=22629 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16346 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447059185.071:694833): pid=16346 uid=0 auid=0 ses=22629 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16346 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447059185.105:694834): pid=16399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16399 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447059185.105:694835): pid=16399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16399 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447059185.105:694836): pid=16399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16399 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447059185.150:694837): pid=16398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=16399 suid=74 rport=41614 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447059185.151:694838): pid=16398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=16399 suid=74 rport=41614 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447059185.281:694839): pid=16398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=41614 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447059185.281:694840): pid=16398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=41614 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447059185.290:694841): pid=16398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447059185.291:694842): pid=16398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16399 suid=74 rport=41614 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447059185.294:694843): pid=16398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447059185.294:694844): pid=16398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447059185.294:694845): pid=16398 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22630 res=1
type=USER_ROLE_CHANGE msg=audit(1447059185.359:694846): pid=16398 uid=0 auid=0 ses=22630 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447059185.384:694847): pid=16398 uid=0 auid=0 ses=22630 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447059185.387:694848): pid=16398 uid=0 auid=0 ses=22630 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447059185.387:694849): pid=16398 uid=0 auid=0 ses=22630 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447059185.388:694850): pid=16401 uid=0 auid=0 ses=22630 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16401 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447059185.388:694851): pid=16401 uid=0 auid=0 ses=22630 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16401 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447059185.388:694852): pid=16401 uid=0 auid=0 ses=22630 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16401 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447059185.389:694853): pid=16401 uid=0 auid=0 ses=22630 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447059185.404:694854): pid=16398 uid=0 auid=0 ses=22630 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447059185.404:694855): pid=16398 uid=0 auid=0 ses=22630 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447059185.408:694856): pid=16398 uid=0 auid=0 ses=22630 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447059185.408:694857): pid=16398 uid=0 auid=0 ses=22630 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447059185.408:694858): pid=16398 uid=0 auid=0 ses=22630 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16398 suid=0 rport=41614 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447059185.408:694859): pid=16398 uid=0 auid=0 ses=22630 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16398 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447059185.409:694860): pid=16398 uid=0 auid=0 ses=22630 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16398 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447059185.409:694861): pid=16398 uid=0 auid=0 ses=22630 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16398 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447059601.559:694862): pid=17629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447059601.559:694863): pid=17628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447059601.559:694864): pid=17629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447059601.559:694865): pid=17628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447059601.560:694866): pid=17629 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22631 res=1
type=LOGIN msg=audit(1447059601.560:694867): pid=17628 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22632 res=1
type=USER_START msg=audit(1447059601.579:694868): pid=17628 uid=0 auid=0 ses=22632 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447059601.579:694869): pid=17629 uid=0 auid=0 ses=22631 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447059601.579:694870): pid=17628 uid=0 auid=0 ses=22632 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447059601.579:694871): pid=17629 uid=0 auid=0 ses=22631 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447059601.587:694872): pid=17629 uid=0 auid=0 ses=22631 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447059601.589:694873): pid=17629 uid=0 auid=0 ses=22631 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447059601.598:694874): pid=17628 uid=0 auid=0 ses=22632 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447059601.600:694875): pid=17628 uid=0 auid=0 ses=22632 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447059661.612:694876): pid=17864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447059661.612:694877): pid=17864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447059661.613:694878): pid=17864 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22633 res=1
type=USER_START msg=audit(1447059661.628:694879): pid=17864 uid=0 auid=0 ses=22633 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447059661.628:694880): pid=17864 uid=0 auid=0 ses=22633 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447059661.661:694881): pid=17864 uid=0 auid=0 ses=22633 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447059661.663:694882): pid=17864 uid=0 auid=0 ses=22633 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447060201.673:694883): pid=19531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447060201.673:694884): pid=19531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447060201.673:694885): pid=19531 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22634 res=1
type=USER_ACCT msg=audit(1447060201.674:694886): pid=19532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447060201.674:694887): pid=19532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447060201.675:694888): pid=19532 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22635 res=1
type=USER_START msg=audit(1447060201.687:694889): pid=19531 uid=0 auid=0 ses=22634 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447060201.687:694890): pid=19531 uid=0 auid=0 ses=22634 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447060201.687:694891): pid=19532 uid=0 auid=0 ses=22635 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447060201.688:694892): pid=19532 uid=0 auid=0 ses=22635 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447060201.695:694893): pid=19532 uid=0 auid=0 ses=22635 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447060201.696:694894): pid=19532 uid=0 auid=0 ses=22635 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447060201.701:694895): pid=19531 uid=0 auid=0 ses=22634 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447060201.705:694896): pid=19531 uid=0 auid=0 ses=22634 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447060382.866:694897): pid=20102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=20102 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447060382.867:694898): pid=20102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=20102 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447060382.867:694899): pid=20102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=20102 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447060382.910:694900): pid=20101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=20102 suid=74 rport=43589 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447060382.910:694901): pid=20101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=20102 suid=74 rport=43589 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447060383.039:694902): pid=20101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=43589 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447060383.039:694903): pid=20101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=43589 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447060383.048:694904): pid=20101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447060383.049:694905): pid=20101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20102 suid=74 rport=43589 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447060383.050:694906): pid=20101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447060383.050:694907): pid=20101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447060383.050:694908): pid=20101 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22636 res=1
type=USER_ROLE_CHANGE msg=audit(1447060383.121:694909): pid=20101 uid=0 auid=0 ses=22636 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447060383.142:694910): pid=20101 uid=0 auid=0 ses=22636 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447060383.145:694911): pid=20101 uid=0 auid=0 ses=22636 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447060383.146:694912): pid=20101 uid=0 auid=0 ses=22636 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447060383.147:694913): pid=20104 uid=0 auid=0 ses=22636 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=20104 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447060383.147:694914): pid=20104 uid=0 auid=0 ses=22636 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=20104 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447060383.147:694915): pid=20104 uid=0 auid=0 ses=22636 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=20104 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447060383.148:694916): pid=20104 uid=0 auid=0 ses=22636 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447060383.167:694917): pid=20101 uid=0 auid=0 ses=22636 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447060383.167:694918): pid=20101 uid=0 auid=0 ses=22636 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447060383.171:694919): pid=20101 uid=0 auid=0 ses=22636 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447060383.171:694920): pid=20101 uid=0 auid=0 ses=22636 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447060383.172:694921): pid=20101 uid=0 auid=0 ses=22636 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20101 suid=0 rport=43589 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447060383.172:694922): pid=20101 uid=0 auid=0 ses=22636 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=20101 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447060383.172:694923): pid=20101 uid=0 auid=0 ses=22636 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=20101 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447060383.173:694924): pid=20101 uid=0 auid=0 ses=22636 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=20101 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447060383.193:694925): pid=20112 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=20112 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447060383.194:694926): pid=20112 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=20112 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447060383.194:694927): pid=20112 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=20112 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447060383.238:694928): pid=20111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=20112 suid=74 rport=43592 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447060383.238:694929): pid=20111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=20112 suid=74 rport=43592 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447060383.367:694930): pid=20111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=43592 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447060383.367:694931): pid=20111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=43592 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447060383.376:694932): pid=20111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447060383.376:694933): pid=20111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20112 suid=74 rport=43592 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447060383.378:694934): pid=20111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447060383.379:694935): pid=20111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447060383.379:694936): pid=20111 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22637 res=1
type=USER_ROLE_CHANGE msg=audit(1447060383.449:694937): pid=20111 uid=0 auid=0 ses=22637 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447060383.470:694938): pid=20111 uid=0 auid=0 ses=22637 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447060383.473:694939): pid=20111 uid=0 auid=0 ses=22637 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447060383.473:694940): pid=20111 uid=0 auid=0 ses=22637 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447060383.475:694941): pid=20114 uid=0 auid=0 ses=22637 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=20114 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447060383.475:694942): pid=20114 uid=0 auid=0 ses=22637 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=20114 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447060383.475:694943): pid=20114 uid=0 auid=0 ses=22637 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=20114 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447060383.476:694944): pid=20114 uid=0 auid=0 ses=22637 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447060384.722:694945): pid=20111 uid=0 auid=0 ses=22637 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447060384.722:694946): pid=20111 uid=0 auid=0 ses=22637 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447060384.726:694947): pid=20111 uid=0 auid=0 ses=22637 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447060384.726:694948): pid=20111 uid=0 auid=0 ses=22637 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447060384.726:694949): pid=20111 uid=0 auid=0 ses=22637 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20111 suid=0 rport=43592 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447060384.726:694950): pid=20111 uid=0 auid=0 ses=22637 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=20111 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447060384.726:694951): pid=20111 uid=0 auid=0 ses=22637 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=20111 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447060384.726:694952): pid=20111 uid=0 auid=0 ses=22637 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=20111 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447060384.762:694953): pid=20164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=20164 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447060384.763:694954): pid=20164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=20164 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447060384.763:694955): pid=20164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=20164 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447060384.808:694956): pid=20163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=20164 suid=74 rport=43594 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447060384.809:694957): pid=20163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=20164 suid=74 rport=43594 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447060384.938:694958): pid=20163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=43594 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447060384.939:694959): pid=20163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=43594 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447060384.946:694960): pid=20163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447060384.947:694961): pid=20163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20164 suid=74 rport=43594 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447060384.948:694962): pid=20163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447060384.948:694963): pid=20163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447060384.948:694964): pid=20163 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22638 res=1
type=USER_ROLE_CHANGE msg=audit(1447060385.014:694965): pid=20163 uid=0 auid=0 ses=22638 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447060385.038:694966): pid=20163 uid=0 auid=0 ses=22638 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447060385.042:694967): pid=20163 uid=0 auid=0 ses=22638 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447060385.043:694968): pid=20163 uid=0 auid=0 ses=22638 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447060385.045:694969): pid=20166 uid=0 auid=0 ses=22638 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=20166 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447060385.045:694970): pid=20166 uid=0 auid=0 ses=22638 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=20166 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447060385.045:694971): pid=20166 uid=0 auid=0 ses=22638 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=20166 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447060385.046:694972): pid=20166 uid=0 auid=0 ses=22638 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447060385.065:694973): pid=20163 uid=0 auid=0 ses=22638 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447060385.065:694974): pid=20163 uid=0 auid=0 ses=22638 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447060385.069:694975): pid=20163 uid=0 auid=0 ses=22638 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447060385.069:694976): pid=20163 uid=0 auid=0 ses=22638 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447060385.069:694977): pid=20163 uid=0 auid=0 ses=22638 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20163 suid=0 rport=43594 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447060385.070:694978): pid=20163 uid=0 auid=0 ses=22638 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=20163 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447060385.070:694979): pid=20163 uid=0 auid=0 ses=22638 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=20163 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447060385.070:694980): pid=20163 uid=0 auid=0 ses=22638 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=20163 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=SYSCALL msg=audit(1447060512.747:694981): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447060801.728:694983): pid=21454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447060801.728:694982): pid=21453 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447060801.728:694984): pid=21454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447060801.728:694985): pid=21453 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447060801.729:694986): pid=21454 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22639 res=1
type=LOGIN msg=audit(1447060801.729:694987): pid=21453 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22640 res=1
type=USER_START msg=audit(1447060801.746:694988): pid=21454 uid=0 auid=0 ses=22639 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447060801.747:694989): pid=21454 uid=0 auid=0 ses=22639 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447060801.747:694990): pid=21453 uid=0 auid=0 ses=22640 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447060801.748:694991): pid=21453 uid=0 auid=0 ses=22640 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447060801.754:694992): pid=21454 uid=0 auid=0 ses=22639 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447060801.757:694993): pid=21454 uid=0 auid=0 ses=22639 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447060801.764:694994): pid=21453 uid=0 auid=0 ses=22640 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447060801.765:694995): pid=21453 uid=0 auid=0 ses=22640 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447061401.782:694996): pid=23300 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447061401.782:694997): pid=23300 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447061401.782:694998): pid=23300 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22641 res=1
type=USER_ACCT msg=audit(1447061401.782:694999): pid=23299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447061401.782:695000): pid=23299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447061401.783:695001): pid=23299 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22642 res=1
type=USER_START msg=audit(1447061401.803:695002): pid=23300 uid=0 auid=0 ses=22641 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447061401.803:695003): pid=23300 uid=0 auid=0 ses=22641 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447061401.804:695004): pid=23299 uid=0 auid=0 ses=22642 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447061401.804:695005): pid=23299 uid=0 auid=0 ses=22642 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447061401.810:695006): pid=23300 uid=0 auid=0 ses=22641 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447061401.811:695007): pid=23300 uid=0 auid=0 ses=22641 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447061401.818:695008): pid=23299 uid=0 auid=0 ses=22642 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447061401.819:695009): pid=23299 uid=0 auid=0 ses=22642 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447061583.175:695010): pid=23865 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=23865 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447061583.176:695011): pid=23865 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=23865 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447061583.176:695012): pid=23865 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=23865 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447061583.206:695013): pid=23864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=23865 suid=74 rport=45572 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447061583.207:695014): pid=23864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=23865 suid=74 rport=45572 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447061583.320:695015): pid=23864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=45572 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447061583.320:695016): pid=23864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=45572 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447061583.329:695017): pid=23864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447061583.331:695018): pid=23864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23865 suid=74 rport=45572 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447061583.333:695019): pid=23864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447061583.333:695020): pid=23864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447061583.333:695021): pid=23864 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22643 res=1
type=USER_ROLE_CHANGE msg=audit(1447061583.404:695022): pid=23864 uid=0 auid=0 ses=22643 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447061583.429:695023): pid=23864 uid=0 auid=0 ses=22643 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447061583.432:695024): pid=23864 uid=0 auid=0 ses=22643 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447061583.432:695025): pid=23864 uid=0 auid=0 ses=22643 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447061583.433:695026): pid=23867 uid=0 auid=0 ses=22643 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=23867 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447061583.433:695027): pid=23867 uid=0 auid=0 ses=22643 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=23867 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447061583.433:695028): pid=23867 uid=0 auid=0 ses=22643 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=23867 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447061583.434:695029): pid=23867 uid=0 auid=0 ses=22643 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447061583.452:695030): pid=23864 uid=0 auid=0 ses=22643 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447061583.452:695031): pid=23864 uid=0 auid=0 ses=22643 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447061583.457:695032): pid=23864 uid=0 auid=0 ses=22643 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447061583.457:695033): pid=23864 uid=0 auid=0 ses=22643 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447061583.458:695034): pid=23864 uid=0 auid=0 ses=22643 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23864 suid=0 rport=45572 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447061583.458:695035): pid=23864 uid=0 auid=0 ses=22643 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=23864 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447061583.458:695036): pid=23864 uid=0 auid=0 ses=22643 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=23864 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447061583.458:695037): pid=23864 uid=0 auid=0 ses=22643 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=23864 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447061583.477:695038): pid=23875 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=23875 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447061583.477:695039): pid=23875 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=23875 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447061583.477:695040): pid=23875 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=23875 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447061583.522:695041): pid=23874 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=23875 suid=74 rport=45573 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447061583.522:695042): pid=23874 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=23875 suid=74 rport=45573 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447061583.651:695043): pid=23874 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=45573 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447061583.651:695044): pid=23874 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=45573 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447061583.663:695045): pid=23874 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447061583.664:695046): pid=23874 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23875 suid=74 rport=45573 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447061583.665:695047): pid=23874 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447061583.665:695048): pid=23874 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447061583.665:695049): pid=23874 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22644 res=1
type=USER_ROLE_CHANGE msg=audit(1447061583.732:695050): pid=23874 uid=0 auid=0 ses=22644 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447061583.752:695051): pid=23874 uid=0 auid=0 ses=22644 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447061583.754:695052): pid=23874 uid=0 auid=0 ses=22644 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447061583.755:695053): pid=23874 uid=0 auid=0 ses=22644 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447061583.756:695054): pid=23877 uid=0 auid=0 ses=22644 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=23877 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447061583.756:695055): pid=23877 uid=0 auid=0 ses=22644 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=23877 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447061583.756:695056): pid=23877 uid=0 auid=0 ses=22644 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=23877 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447061583.757:695057): pid=23877 uid=0 auid=0 ses=22644 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447061585.035:695058): pid=23874 uid=0 auid=0 ses=22644 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447061585.035:695059): pid=23874 uid=0 auid=0 ses=22644 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447061585.039:695060): pid=23874 uid=0 auid=0 ses=22644 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447061585.039:695061): pid=23874 uid=0 auid=0 ses=22644 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447061585.040:695062): pid=23874 uid=0 auid=0 ses=22644 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23874 suid=0 rport=45573 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447061585.040:695063): pid=23874 uid=0 auid=0 ses=22644 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=23874 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447061585.040:695064): pid=23874 uid=0 auid=0 ses=22644 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=23874 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447061585.040:695065): pid=23874 uid=0 auid=0 ses=22644 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=23874 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447061585.063:695066): pid=23927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=23927 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447061585.063:695067): pid=23927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=23927 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447061585.064:695068): pid=23927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=23927 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447061585.086:695069): pid=23926 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=23927 suid=74 rport=45574 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447061585.086:695070): pid=23926 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=23927 suid=74 rport=45574 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447061585.192:695071): pid=23926 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=45574 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447061585.192:695072): pid=23926 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=45574 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447061585.198:695073): pid=23926 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447061585.199:695074): pid=23926 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23927 suid=74 rport=45574 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447061585.200:695075): pid=23926 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447061585.200:695076): pid=23926 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447061585.200:695077): pid=23926 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22645 res=1
type=USER_ROLE_CHANGE msg=audit(1447061585.264:695078): pid=23926 uid=0 auid=0 ses=22645 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447061585.288:695079): pid=23926 uid=0 auid=0 ses=22645 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447061585.291:695080): pid=23926 uid=0 auid=0 ses=22645 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447061585.292:695081): pid=23926 uid=0 auid=0 ses=22645 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447061585.293:695082): pid=23929 uid=0 auid=0 ses=22645 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=23929 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447061585.293:695083): pid=23929 uid=0 auid=0 ses=22645 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=23929 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447061585.293:695084): pid=23929 uid=0 auid=0 ses=22645 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=23929 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447061585.294:695085): pid=23929 uid=0 auid=0 ses=22645 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447061585.309:695086): pid=23926 uid=0 auid=0 ses=22645 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447061585.309:695087): pid=23926 uid=0 auid=0 ses=22645 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447061585.312:695088): pid=23926 uid=0 auid=0 ses=22645 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447061585.312:695089): pid=23926 uid=0 auid=0 ses=22645 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447061585.312:695090): pid=23926 uid=0 auid=0 ses=22645 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23926 suid=0 rport=45574 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447061585.312:695091): pid=23926 uid=0 auid=0 ses=22645 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=23926 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447061585.313:695092): pid=23926 uid=0 auid=0 ses=22645 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=23926 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447061585.313:695093): pid=23926 uid=0 auid=0 ses=22645 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=23926 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447062001.842:695094): pid=25217 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447062001.842:695095): pid=25216 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447062001.842:695096): pid=25217 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447062001.842:695097): pid=25216 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447062001.843:695098): pid=25217 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22646 res=1
type=LOGIN msg=audit(1447062001.843:695099): pid=25216 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22647 res=1
type=USER_START msg=audit(1447062001.862:695100): pid=25216 uid=0 auid=0 ses=22647 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447062001.862:695101): pid=25217 uid=0 auid=0 ses=22646 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447062001.862:695102): pid=25216 uid=0 auid=0 ses=22647 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447062001.862:695103): pid=25217 uid=0 auid=0 ses=22646 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447062001.871:695104): pid=25217 uid=0 auid=0 ses=22646 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447062001.872:695105): pid=25217 uid=0 auid=0 ses=22646 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447062001.879:695106): pid=25216 uid=0 auid=0 ses=22647 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447062001.881:695107): pid=25216 uid=0 auid=0 ses=22647 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1447062574.709:695108): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447062601.896:695109): pid=27064 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447062601.896:695110): pid=27064 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447062601.896:695111): pid=27063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447062601.896:695112): pid=27063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447062601.896:695113): pid=27064 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22648 res=1
type=LOGIN msg=audit(1447062601.896:695114): pid=27063 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22649 res=1
type=USER_START msg=audit(1447062601.916:695115): pid=27063 uid=0 auid=0 ses=22649 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447062601.916:695116): pid=27063 uid=0 auid=0 ses=22649 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447062601.917:695117): pid=27064 uid=0 auid=0 ses=22648 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447062601.918:695118): pid=27064 uid=0 auid=0 ses=22648 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447062601.924:695119): pid=27064 uid=0 auid=0 ses=22648 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447062601.925:695120): pid=27064 uid=0 auid=0 ses=22648 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447062601.935:695121): pid=27063 uid=0 auid=0 ses=22649 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447062601.937:695122): pid=27063 uid=0 auid=0 ses=22649 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447062782.772:695123): pid=27628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=27628 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447062782.772:695124): pid=27628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=27628 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447062782.772:695125): pid=27628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27628 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447062782.818:695126): pid=27627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=27628 suid=74 rport=47550 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447062782.818:695127): pid=27627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=27628 suid=74 rport=47550 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447062782.948:695128): pid=27627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=47550 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447062782.948:695129): pid=27627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=47550 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447062782.955:695130): pid=27627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447062782.956:695131): pid=27627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27628 suid=74 rport=47550 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447062782.957:695132): pid=27627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447062782.957:695133): pid=27627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447062782.957:695134): pid=27627 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22650 res=1
type=USER_ROLE_CHANGE msg=audit(1447062783.027:695135): pid=27627 uid=0 auid=0 ses=22650 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447062783.045:695136): pid=27627 uid=0 auid=0 ses=22650 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447062783.048:695137): pid=27627 uid=0 auid=0 ses=22650 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447062783.048:695138): pid=27627 uid=0 auid=0 ses=22650 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447062783.049:695139): pid=27630 uid=0 auid=0 ses=22650 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=27630 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447062783.050:695140): pid=27630 uid=0 auid=0 ses=22650 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=27630 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447062783.050:695141): pid=27630 uid=0 auid=0 ses=22650 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27630 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447062783.051:695142): pid=27630 uid=0 auid=0 ses=22650 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447062783.071:695143): pid=27627 uid=0 auid=0 ses=22650 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447062783.071:695144): pid=27627 uid=0 auid=0 ses=22650 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447062783.077:695145): pid=27627 uid=0 auid=0 ses=22650 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447062783.077:695146): pid=27627 uid=0 auid=0 ses=22650 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447062783.078:695147): pid=27627 uid=0 auid=0 ses=22650 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27627 suid=0 rport=47550 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447062783.078:695148): pid=27627 uid=0 auid=0 ses=22650 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=27627 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447062783.078:695149): pid=27627 uid=0 auid=0 ses=22650 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=27627 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447062783.078:695150): pid=27627 uid=0 auid=0 ses=22650 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27627 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447062783.097:695151): pid=27638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=27638 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447062783.097:695152): pid=27638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=27638 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447062783.097:695153): pid=27638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27638 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447062783.142:695154): pid=27637 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=27638 suid=74 rport=47551 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447062783.142:695155): pid=27637 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=27638 suid=74 rport=47551 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447062783.272:695156): pid=27637 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=47551 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447062783.272:695157): pid=27637 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=47551 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447062783.279:695158): pid=27637 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447062783.280:695159): pid=27637 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27638 suid=74 rport=47551 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447062783.282:695160): pid=27637 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447062783.282:695161): pid=27637 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447062783.282:695162): pid=27637 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22651 res=1
type=USER_ROLE_CHANGE msg=audit(1447062783.346:695163): pid=27637 uid=0 auid=0 ses=22651 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447062783.369:695164): pid=27637 uid=0 auid=0 ses=22651 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447062783.372:695165): pid=27637 uid=0 auid=0 ses=22651 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447062783.372:695166): pid=27637 uid=0 auid=0 ses=22651 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447062783.373:695167): pid=27640 uid=0 auid=0 ses=22651 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=27640 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447062783.374:695168): pid=27640 uid=0 auid=0 ses=22651 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=27640 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447062783.374:695169): pid=27640 uid=0 auid=0 ses=22651 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27640 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447062783.375:695170): pid=27640 uid=0 auid=0 ses=22651 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447062784.657:695171): pid=27637 uid=0 auid=0 ses=22651 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447062784.657:695172): pid=27637 uid=0 auid=0 ses=22651 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447062784.664:695173): pid=27637 uid=0 auid=0 ses=22651 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447062784.664:695174): pid=27637 uid=0 auid=0 ses=22651 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447062784.665:695175): pid=27637 uid=0 auid=0 ses=22651 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27637 suid=0 rport=47551 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447062784.666:695176): pid=27637 uid=0 auid=0 ses=22651 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=27637 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447062784.666:695177): pid=27637 uid=0 auid=0 ses=22651 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=27637 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447062784.666:695178): pid=27637 uid=0 auid=0 ses=22651 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27637 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447062784.696:695179): pid=27690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=27690 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447062784.698:695180): pid=27690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=27690 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447062784.698:695181): pid=27690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27690 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447062784.741:695182): pid=27689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=27690 suid=74 rport=47555 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447062784.741:695183): pid=27689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=27690 suid=74 rport=47555 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447062784.870:695184): pid=27689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=47555 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447062784.870:695185): pid=27689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=47555 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447062784.880:695186): pid=27689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447062784.880:695187): pid=27689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27690 suid=74 rport=47555 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447062784.882:695188): pid=27689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447062784.883:695189): pid=27689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447062784.883:695190): pid=27689 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22652 res=1
type=USER_ROLE_CHANGE msg=audit(1447062784.949:695191): pid=27689 uid=0 auid=0 ses=22652 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447062784.972:695192): pid=27689 uid=0 auid=0 ses=22652 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447062784.976:695193): pid=27689 uid=0 auid=0 ses=22652 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447062784.976:695194): pid=27689 uid=0 auid=0 ses=22652 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447062784.978:695195): pid=27692 uid=0 auid=0 ses=22652 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=27692 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447062784.978:695196): pid=27692 uid=0 auid=0 ses=22652 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=27692 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447062784.978:695197): pid=27692 uid=0 auid=0 ses=22652 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27692 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447062784.979:695198): pid=27692 uid=0 auid=0 ses=22652 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447062784.996:695199): pid=27689 uid=0 auid=0 ses=22652 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447062784.996:695200): pid=27689 uid=0 auid=0 ses=22652 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447062784.999:695201): pid=27689 uid=0 auid=0 ses=22652 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447062785.000:695202): pid=27689 uid=0 auid=0 ses=22652 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447062785.000:695203): pid=27689 uid=0 auid=0 ses=22652 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27689 suid=0 rport=47555 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447062785.000:695204): pid=27689 uid=0 auid=0 ses=22652 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=27689 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447062785.000:695205): pid=27689 uid=0 auid=0 ses=22652 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=27689 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447062785.000:695206): pid=27689 uid=0 auid=0 ses=22652 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27689 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447063201.959:695207): pid=28981 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447063201.959:695208): pid=28980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447063201.959:695209): pid=28981 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447063201.959:695210): pid=28980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447063201.961:695211): pid=28981 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22653 res=1
type=LOGIN msg=audit(1447063201.961:695212): pid=28980 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22654 res=1
type=USER_START msg=audit(1447063201.982:695213): pid=28980 uid=0 auid=0 ses=22654 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447063201.982:695214): pid=28981 uid=0 auid=0 ses=22653 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447063201.982:695215): pid=28981 uid=0 auid=0 ses=22653 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447063201.982:695216): pid=28980 uid=0 auid=0 ses=22654 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447063201.991:695217): pid=28981 uid=0 auid=0 ses=22653 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447063201.993:695218): pid=28981 uid=0 auid=0 ses=22653 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447063201.998:695219): pid=28980 uid=0 auid=0 ses=22654 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447063202.002:695220): pid=28980 uid=0 auid=0 ses=22654 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447063261.014:695221): pid=29213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447063261.014:695222): pid=29213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447063261.014:695223): pid=29213 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22655 res=1
type=USER_START msg=audit(1447063261.030:695224): pid=29213 uid=0 auid=0 ses=22655 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447063261.030:695225): pid=29213 uid=0 auid=0 ses=22655 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447063261.058:695226): pid=29213 uid=0 auid=0 ses=22655 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447063261.060:695227): pid=29213 uid=0 auid=0 ses=22655 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1447063650.759:695228): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447063801.071:695229): pid=30999 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447063801.071:695230): pid=30998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447063801.071:695231): pid=30999 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447063801.071:695232): pid=30998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447063801.072:695233): pid=30998 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22656 res=1
type=LOGIN msg=audit(1447063801.072:695234): pid=30999 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22657 res=1
type=USER_START msg=audit(1447063801.085:695235): pid=30999 uid=0 auid=0 ses=22657 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447063801.085:695236): pid=30999 uid=0 auid=0 ses=22657 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447063801.087:695237): pid=30998 uid=0 auid=0 ses=22656 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447063801.087:695238): pid=30998 uid=0 auid=0 ses=22656 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447063801.093:695239): pid=30999 uid=0 auid=0 ses=22657 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447063801.094:695240): pid=30999 uid=0 auid=0 ses=22657 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447063801.102:695241): pid=30998 uid=0 auid=0 ses=22656 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447063801.103:695242): pid=30998 uid=0 auid=0 ses=22656 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447063983.390:695243): pid=31570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=31570 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447063983.390:695244): pid=31570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=31570 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447063983.390:695245): pid=31570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=31570 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447063983.434:695246): pid=31569 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=31570 suid=74 rport=49531 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447063983.434:695247): pid=31569 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=31570 suid=74 rport=49531 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447063983.561:695248): pid=31569 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=49531 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447063983.561:695249): pid=31569 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=49531 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447063983.570:695250): pid=31569 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447063983.572:695251): pid=31569 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=31570 suid=74 rport=49531 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447063983.575:695252): pid=31569 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447063983.575:695253): pid=31569 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447063983.575:695254): pid=31569 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22658 res=1
type=USER_ROLE_CHANGE msg=audit(1447063983.643:695255): pid=31569 uid=0 auid=0 ses=22658 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447063983.664:695256): pid=31569 uid=0 auid=0 ses=22658 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447063983.668:695257): pid=31569 uid=0 auid=0 ses=22658 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447063983.669:695258): pid=31569 uid=0 auid=0 ses=22658 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447063983.671:695259): pid=31572 uid=0 auid=0 ses=22658 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=31572 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447063983.671:695260): pid=31572 uid=0 auid=0 ses=22658 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=31572 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447063983.671:695261): pid=31572 uid=0 auid=0 ses=22658 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=31572 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447063983.672:695262): pid=31572 uid=0 auid=0 ses=22658 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447063983.693:695263): pid=31569 uid=0 auid=0 ses=22658 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447063983.693:695264): pid=31569 uid=0 auid=0 ses=22658 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447063983.697:695265): pid=31569 uid=0 auid=0 ses=22658 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447063983.697:695266): pid=31569 uid=0 auid=0 ses=22658 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447063983.698:695267): pid=31569 uid=0 auid=0 ses=22658 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=31569 suid=0 rport=49531 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447063983.698:695268): pid=31569 uid=0 auid=0 ses=22658 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=31569 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447063983.698:695269): pid=31569 uid=0 auid=0 ses=22658 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=31569 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447063983.698:695270): pid=31569 uid=0 auid=0 ses=22658 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=31569 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447063983.720:695271): pid=31580 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=31580 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447063983.720:695272): pid=31580 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=31580 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447063983.720:695273): pid=31580 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=31580 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447063983.765:695274): pid=31579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=31580 suid=74 rport=49532 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447063983.765:695275): pid=31579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=31580 suid=74 rport=49532 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447063983.888:695276): pid=31579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=49532 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447063983.889:695277): pid=31579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=49532 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447063983.898:695278): pid=31579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447063983.898:695279): pid=31579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=31580 suid=74 rport=49532 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447063983.900:695280): pid=31579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447063983.900:695281): pid=31579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447063983.900:695282): pid=31579 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22659 res=1
type=USER_ROLE_CHANGE msg=audit(1447063983.965:695283): pid=31579 uid=0 auid=0 ses=22659 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447063983.984:695284): pid=31579 uid=0 auid=0 ses=22659 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447063983.986:695285): pid=31579 uid=0 auid=0 ses=22659 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447063983.986:695286): pid=31579 uid=0 auid=0 ses=22659 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447063983.987:695287): pid=31582 uid=0 auid=0 ses=22659 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=31582 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447063983.987:695288): pid=31582 uid=0 auid=0 ses=22659 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=31582 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447063983.988:695289): pid=31582 uid=0 auid=0 ses=22659 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=31582 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447063983.988:695290): pid=31582 uid=0 auid=0 ses=22659 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447063985.281:695291): pid=31579 uid=0 auid=0 ses=22659 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447063985.281:695292): pid=31579 uid=0 auid=0 ses=22659 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447063985.286:695293): pid=31579 uid=0 auid=0 ses=22659 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447063985.286:695294): pid=31579 uid=0 auid=0 ses=22659 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447063985.286:695295): pid=31579 uid=0 auid=0 ses=22659 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=31579 suid=0 rport=49532 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447063985.286:695296): pid=31579 uid=0 auid=0 ses=22659 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=31579 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447063985.286:695297): pid=31579 uid=0 auid=0 ses=22659 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=31579 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447063985.286:695298): pid=31579 uid=0 auid=0 ses=22659 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=31579 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447063985.322:695299): pid=31632 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=31632 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447063985.323:695300): pid=31632 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=31632 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447063985.323:695301): pid=31632 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=31632 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447063985.367:695302): pid=31631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=31632 suid=74 rport=49536 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447063985.367:695303): pid=31631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=31632 suid=74 rport=49536 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447063985.497:695304): pid=31631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=49536 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447063985.497:695305): pid=31631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=49536 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447063985.507:695306): pid=31631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447063985.507:695307): pid=31631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=31632 suid=74 rport=49536 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447063985.509:695308): pid=31631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447063985.509:695309): pid=31631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447063985.509:695310): pid=31631 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22660 res=1
type=USER_ROLE_CHANGE msg=audit(1447063985.574:695311): pid=31631 uid=0 auid=0 ses=22660 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447063985.598:695312): pid=31631 uid=0 auid=0 ses=22660 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447063985.601:695313): pid=31631 uid=0 auid=0 ses=22660 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447063985.601:695314): pid=31631 uid=0 auid=0 ses=22660 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447063985.603:695315): pid=31634 uid=0 auid=0 ses=22660 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=31634 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447063985.603:695316): pid=31634 uid=0 auid=0 ses=22660 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=31634 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447063985.603:695317): pid=31634 uid=0 auid=0 ses=22660 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=31634 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447063985.603:695318): pid=31634 uid=0 auid=0 ses=22660 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447063985.622:695319): pid=31631 uid=0 auid=0 ses=22660 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447063985.622:695320): pid=31631 uid=0 auid=0 ses=22660 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447063985.626:695321): pid=31631 uid=0 auid=0 ses=22660 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447063985.627:695322): pid=31631 uid=0 auid=0 ses=22660 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447063985.627:695323): pid=31631 uid=0 auid=0 ses=22660 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=31631 suid=0 rport=49536 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447063985.627:695324): pid=31631 uid=0 auid=0 ses=22660 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=31631 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447063985.627:695325): pid=31631 uid=0 auid=0 ses=22660 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=31631 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447063985.627:695326): pid=31631 uid=0 auid=0 ses=22660 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=31631 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447064401.127:695328): pid=470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447064401.127:695327): pid=471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447064401.127:695329): pid=470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447064401.127:695330): pid=471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447064401.128:695331): pid=471 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22661 res=1
type=LOGIN msg=audit(1447064401.128:695332): pid=470 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22662 res=1
type=USER_START msg=audit(1447064401.149:695333): pid=470 uid=0 auid=0 ses=22662 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447064401.149:695334): pid=471 uid=0 auid=0 ses=22661 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447064401.149:695335): pid=470 uid=0 auid=0 ses=22662 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447064401.149:695336): pid=471 uid=0 auid=0 ses=22661 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447064401.158:695337): pid=471 uid=0 auid=0 ses=22661 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447064401.161:695338): pid=471 uid=0 auid=0 ses=22661 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447064401.171:695339): pid=470 uid=0 auid=0 ses=22662 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447064401.173:695340): pid=470 uid=0 auid=0 ses=22662 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447065001.187:695341): pid=2420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447065001.187:695342): pid=2419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447065001.187:695343): pid=2419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447065001.187:695344): pid=2420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447065001.187:695345): pid=2420 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22663 res=1
type=LOGIN msg=audit(1447065001.187:695346): pid=2419 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22664 res=1
type=USER_START msg=audit(1447065001.202:695347): pid=2419 uid=0 auid=0 ses=22664 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447065001.203:695348): pid=2419 uid=0 auid=0 ses=22664 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447065001.203:695349): pid=2420 uid=0 auid=0 ses=22663 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447065001.203:695350): pid=2420 uid=0 auid=0 ses=22663 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447065001.209:695351): pid=2420 uid=0 auid=0 ses=22663 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447065001.210:695352): pid=2420 uid=0 auid=0 ses=22663 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447065001.220:695353): pid=2419 uid=0 auid=0 ses=22664 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447065001.221:695354): pid=2419 uid=0 auid=0 ses=22664 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447065182.812:695355): pid=2989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=2989 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447065182.812:695356): pid=2989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=2989 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447065182.812:695357): pid=2989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=2989 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447065182.855:695358): pid=2988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=2989 suid=74 rport=51512 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447065182.856:695359): pid=2988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=2989 suid=74 rport=51512 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447065182.986:695360): pid=2988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=51512 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447065182.986:695361): pid=2988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=51512 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447065182.995:695362): pid=2988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447065182.997:695363): pid=2988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2989 suid=74 rport=51512 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447065182.999:695364): pid=2988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447065183.000:695365): pid=2988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447065183.000:695366): pid=2988 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22665 res=1
type=USER_ROLE_CHANGE msg=audit(1447065183.068:695367): pid=2988 uid=0 auid=0 ses=22665 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447065183.089:695368): pid=2988 uid=0 auid=0 ses=22665 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447065183.092:695369): pid=2988 uid=0 auid=0 ses=22665 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447065183.092:695370): pid=2988 uid=0 auid=0 ses=22665 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447065183.094:695371): pid=2991 uid=0 auid=0 ses=22665 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=2991 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447065183.094:695372): pid=2991 uid=0 auid=0 ses=22665 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=2991 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447065183.094:695373): pid=2991 uid=0 auid=0 ses=22665 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=2991 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447065183.095:695374): pid=2991 uid=0 auid=0 ses=22665 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447065183.116:695375): pid=2988 uid=0 auid=0 ses=22665 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447065183.116:695376): pid=2988 uid=0 auid=0 ses=22665 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447065183.120:695377): pid=2988 uid=0 auid=0 ses=22665 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447065183.120:695378): pid=2988 uid=0 auid=0 ses=22665 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447065183.121:695379): pid=2988 uid=0 auid=0 ses=22665 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2988 suid=0 rport=51512 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447065183.121:695380): pid=2988 uid=0 auid=0 ses=22665 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=2988 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447065183.121:695381): pid=2988 uid=0 auid=0 ses=22665 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=2988 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447065183.121:695382): pid=2988 uid=0 auid=0 ses=22665 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=2988 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447065183.142:695383): pid=2999 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=2999 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447065183.142:695384): pid=2999 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=2999 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447065183.142:695385): pid=2999 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=2999 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447065183.188:695386): pid=2998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=2999 suid=74 rport=51513 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447065183.188:695387): pid=2998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=2999 suid=74 rport=51513 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447065183.314:695388): pid=2998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=51513 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447065183.314:695389): pid=2998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=51513 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447065183.323:695390): pid=2998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447065183.324:695391): pid=2998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2999 suid=74 rport=51513 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447065183.326:695392): pid=2998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447065183.327:695393): pid=2998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447065183.327:695394): pid=2998 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22666 res=1
type=USER_ROLE_CHANGE msg=audit(1447065183.395:695395): pid=2998 uid=0 auid=0 ses=22666 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447065183.418:695396): pid=2998 uid=0 auid=0 ses=22666 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447065183.421:695397): pid=2998 uid=0 auid=0 ses=22666 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447065183.421:695398): pid=2998 uid=0 auid=0 ses=22666 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447065183.423:695399): pid=3001 uid=0 auid=0 ses=22666 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=3001 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447065183.423:695400): pid=3001 uid=0 auid=0 ses=22666 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=3001 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447065183.423:695401): pid=3001 uid=0 auid=0 ses=22666 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=3001 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447065183.424:695402): pid=3001 uid=0 auid=0 ses=22666 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447065184.708:695403): pid=2998 uid=0 auid=0 ses=22666 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447065184.708:695404): pid=2998 uid=0 auid=0 ses=22666 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447065184.712:695405): pid=2998 uid=0 auid=0 ses=22666 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447065184.712:695406): pid=2998 uid=0 auid=0 ses=22666 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447065184.712:695407): pid=2998 uid=0 auid=0 ses=22666 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2998 suid=0 rport=51513 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447065184.712:695408): pid=2998 uid=0 auid=0 ses=22666 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=2998 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447065184.712:695409): pid=2998 uid=0 auid=0 ses=22666 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=2998 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447065184.712:695410): pid=2998 uid=0 auid=0 ses=22666 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=2998 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447065184.742:695411): pid=3051 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=3051 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447065184.742:695412): pid=3051 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=3051 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447065184.742:695413): pid=3051 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=3051 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447065184.787:695414): pid=3050 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=3051 suid=74 rport=51517 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447065184.787:695415): pid=3050 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=3051 suid=74 rport=51517 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447065184.910:695416): pid=3050 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=51517 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447065184.910:695417): pid=3050 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=51517 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447065184.915:695418): pid=3050 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447065184.917:695419): pid=3050 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3051 suid=74 rport=51517 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447065184.919:695420): pid=3050 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447065184.919:695421): pid=3050 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447065184.919:695422): pid=3050 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22667 res=1
type=USER_ROLE_CHANGE msg=audit(1447065184.983:695423): pid=3050 uid=0 auid=0 ses=22667 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447065185.005:695424): pid=3050 uid=0 auid=0 ses=22667 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447065185.008:695425): pid=3050 uid=0 auid=0 ses=22667 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447065185.008:695426): pid=3050 uid=0 auid=0 ses=22667 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447065185.010:695427): pid=3053 uid=0 auid=0 ses=22667 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=3053 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447065185.010:695428): pid=3053 uid=0 auid=0 ses=22667 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=3053 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447065185.010:695429): pid=3053 uid=0 auid=0 ses=22667 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=3053 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447065185.010:695430): pid=3053 uid=0 auid=0 ses=22667 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447065185.027:695431): pid=3050 uid=0 auid=0 ses=22667 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447065185.027:695432): pid=3050 uid=0 auid=0 ses=22667 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447065185.031:695433): pid=3050 uid=0 auid=0 ses=22667 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447065185.031:695434): pid=3050 uid=0 auid=0 ses=22667 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447065185.032:695435): pid=3050 uid=0 auid=0 ses=22667 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3050 suid=0 rport=51517 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447065185.032:695436): pid=3050 uid=0 auid=0 ses=22667 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=3050 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447065185.032:695437): pid=3050 uid=0 auid=0 ses=22667 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=3050 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447065185.032:695438): pid=3050 uid=0 auid=0 ses=22667 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=3050 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447065601.242:695440): pid=4336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447065601.242:695439): pid=4335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447065601.242:695441): pid=4336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447065601.242:695442): pid=4335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447065601.243:695443): pid=4336 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22668 res=1
type=LOGIN msg=audit(1447065601.243:695444): pid=4335 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22669 res=1
type=USER_START msg=audit(1447065601.262:695445): pid=4336 uid=0 auid=0 ses=22668 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447065601.262:695446): pid=4336 uid=0 auid=0 ses=22668 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447065601.262:695447): pid=4335 uid=0 auid=0 ses=22669 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447065601.263:695448): pid=4335 uid=0 auid=0 ses=22669 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447065601.272:695449): pid=4336 uid=0 auid=0 ses=22668 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447065601.273:695450): pid=4336 uid=0 auid=0 ses=22668 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447065601.287:695451): pid=4335 uid=0 auid=0 ses=22669 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447065601.289:695452): pid=4335 uid=0 auid=0 ses=22669 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1447065751.758:695453): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447066201.308:695454): pid=6160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447066201.309:695455): pid=6161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447066201.309:695456): pid=6160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447066201.309:695457): pid=6161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447066201.309:695458): pid=6160 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22670 res=1
type=LOGIN msg=audit(1447066201.309:695459): pid=6161 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22671 res=1
type=USER_START msg=audit(1447066201.327:695460): pid=6160 uid=0 auid=0 ses=22670 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447066201.327:695461): pid=6160 uid=0 auid=0 ses=22670 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447066201.332:695462): pid=6161 uid=0 auid=0 ses=22671 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447066201.333:695463): pid=6161 uid=0 auid=0 ses=22671 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447066201.338:695464): pid=6161 uid=0 auid=0 ses=22671 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447066201.339:695465): pid=6161 uid=0 auid=0 ses=22671 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447066201.340:695466): pid=6160 uid=0 auid=0 ses=22670 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447066226.368:695467): pid=6160 uid=0 auid=0 ses=22670 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=CRYPTO_KEY_USER msg=audit(1447066382.819:695468): pid=6726 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=6726 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447066382.819:695469): pid=6726 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=6726 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447066382.819:695470): pid=6726 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=6726 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447066382.862:695471): pid=6725 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=6726 suid=74 rport=53492 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447066382.863:695472): pid=6725 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=6726 suid=74 rport=53492 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447066382.990:695473): pid=6725 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=53492 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447066382.990:695474): pid=6725 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=53492 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447066382.994:695475): pid=6725 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447066382.995:695476): pid=6725 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6726 suid=74 rport=53492 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447066382.996:695477): pid=6725 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447066382.996:695478): pid=6725 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447066382.996:695479): pid=6725 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22672 res=1
type=USER_ROLE_CHANGE msg=audit(1447066383.064:695480): pid=6725 uid=0 auid=0 ses=22672 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447066383.088:695481): pid=6725 uid=0 auid=0 ses=22672 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447066383.091:695482): pid=6725 uid=0 auid=0 ses=22672 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447066383.091:695483): pid=6725 uid=0 auid=0 ses=22672 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447066383.093:695484): pid=6740 uid=0 auid=0 ses=22672 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=6740 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447066383.093:695485): pid=6740 uid=0 auid=0 ses=22672 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=6740 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447066383.093:695486): pid=6740 uid=0 auid=0 ses=22672 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=6740 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447066383.093:695487): pid=6740 uid=0 auid=0 ses=22672 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447066383.112:695488): pid=6725 uid=0 auid=0 ses=22672 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447066383.112:695489): pid=6725 uid=0 auid=0 ses=22672 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447066383.118:695490): pid=6725 uid=0 auid=0 ses=22672 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447066383.118:695491): pid=6725 uid=0 auid=0 ses=22672 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447066383.119:695492): pid=6725 uid=0 auid=0 ses=22672 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6725 suid=0 rport=53492 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447066383.119:695493): pid=6725 uid=0 auid=0 ses=22672 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=6725 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447066383.119:695494): pid=6725 uid=0 auid=0 ses=22672 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=6725 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447066383.119:695495): pid=6725 uid=0 auid=0 ses=22672 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=6725 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447066383.139:695496): pid=6748 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=6748 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447066383.139:695497): pid=6748 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=6748 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447066383.139:695498): pid=6748 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=6748 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447066383.184:695499): pid=6747 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=6748 suid=74 rport=53493 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447066383.184:695500): pid=6747 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=6748 suid=74 rport=53493 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447066383.312:695501): pid=6747 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=53493 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447066383.312:695502): pid=6747 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=53493 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447066383.321:695503): pid=6747 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447066383.322:695504): pid=6747 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6748 suid=74 rport=53493 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447066383.325:695505): pid=6747 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447066383.326:695506): pid=6747 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447066383.326:695507): pid=6747 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22673 res=1
type=USER_ROLE_CHANGE msg=audit(1447066383.394:695508): pid=6747 uid=0 auid=0 ses=22673 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447066383.416:695509): pid=6747 uid=0 auid=0 ses=22673 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447066383.419:695510): pid=6747 uid=0 auid=0 ses=22673 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447066383.420:695511): pid=6747 uid=0 auid=0 ses=22673 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447066383.421:695512): pid=6750 uid=0 auid=0 ses=22673 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=6750 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447066383.421:695513): pid=6750 uid=0 auid=0 ses=22673 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=6750 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447066383.421:695514): pid=6750 uid=0 auid=0 ses=22673 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=6750 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447066383.422:695515): pid=6750 uid=0 auid=0 ses=22673 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447066384.685:695516): pid=6747 uid=0 auid=0 ses=22673 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447066384.685:695517): pid=6747 uid=0 auid=0 ses=22673 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447066384.691:695518): pid=6747 uid=0 auid=0 ses=22673 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447066384.691:695519): pid=6747 uid=0 auid=0 ses=22673 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447066384.691:695520): pid=6747 uid=0 auid=0 ses=22673 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6747 suid=0 rport=53493 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447066384.691:695521): pid=6747 uid=0 auid=0 ses=22673 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=6747 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447066384.691:695522): pid=6747 uid=0 auid=0 ses=22673 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=6747 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447066384.691:695523): pid=6747 uid=0 auid=0 ses=22673 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=6747 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447066384.727:695524): pid=6810 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=6810 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447066384.727:695525): pid=6810 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=6810 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447066384.727:695526): pid=6810 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=6810 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447066384.771:695527): pid=6809 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=6810 suid=74 rport=53494 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447066384.771:695528): pid=6809 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=6810 suid=74 rport=53494 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447066384.893:695529): pid=6809 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=53494 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447066384.893:695530): pid=6809 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=53494 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447066384.899:695531): pid=6809 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447066384.900:695532): pid=6809 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6810 suid=74 rport=53494 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447066384.902:695533): pid=6809 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447066384.902:695534): pid=6809 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447066384.902:695535): pid=6809 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22674 res=1
type=USER_ROLE_CHANGE msg=audit(1447066384.966:695536): pid=6809 uid=0 auid=0 ses=22674 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447066384.991:695537): pid=6809 uid=0 auid=0 ses=22674 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447066384.994:695538): pid=6809 uid=0 auid=0 ses=22674 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447066384.994:695539): pid=6809 uid=0 auid=0 ses=22674 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447066384.995:695540): pid=6812 uid=0 auid=0 ses=22674 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=6812 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447066384.995:695541): pid=6812 uid=0 auid=0 ses=22674 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=6812 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447066384.995:695542): pid=6812 uid=0 auid=0 ses=22674 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=6812 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447066384.996:695543): pid=6812 uid=0 auid=0 ses=22674 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447066385.012:695544): pid=6809 uid=0 auid=0 ses=22674 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447066385.012:695545): pid=6809 uid=0 auid=0 ses=22674 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447066385.017:695546): pid=6809 uid=0 auid=0 ses=22674 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447066385.018:695547): pid=6809 uid=0 auid=0 ses=22674 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447066385.018:695548): pid=6809 uid=0 auid=0 ses=22674 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6809 suid=0 rport=53494 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447066385.018:695549): pid=6809 uid=0 auid=0 ses=22674 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=6809 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447066385.018:695550): pid=6809 uid=0 auid=0 ses=22674 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=6809 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447066385.018:695551): pid=6809 uid=0 auid=0 ses=22674 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=6809 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447066801.392:695552): pid=8036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447066801.392:695553): pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447066801.393:695554): pid=8036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447066801.393:695555): pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447066801.394:695556): pid=8035 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22675 res=1
type=LOGIN msg=audit(1447066801.394:695557): pid=8036 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22676 res=1
type=USER_START msg=audit(1447066801.410:695558): pid=8036 uid=0 auid=0 ses=22676 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447066801.411:695559): pid=8036 uid=0 auid=0 ses=22676 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447066801.413:695560): pid=8035 uid=0 auid=0 ses=22675 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447066801.413:695561): pid=8035 uid=0 auid=0 ses=22675 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447066801.421:695562): pid=8036 uid=0 auid=0 ses=22676 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447066801.428:695563): pid=8035 uid=0 auid=0 ses=22675 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447066801.428:695564): pid=8036 uid=0 auid=0 ses=22676 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447066801.433:695565): pid=8035 uid=0 auid=0 ses=22675 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1447066803.660:695566): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447066861.440:695567): pid=8274 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447066861.440:695568): pid=8274 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447066861.441:695569): pid=8274 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22677 res=1
type=USER_START msg=audit(1447066861.454:695570): pid=8274 uid=0 auid=0 ses=22677 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447066861.454:695571): pid=8274 uid=0 auid=0 ses=22677 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447066861.480:695572): pid=8274 uid=0 auid=0 ses=22677 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447066861.482:695573): pid=8274 uid=0 auid=0 ses=22677 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447067401.499:695574): pid=9944 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447067401.499:695575): pid=9945 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447067401.499:695576): pid=9944 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447067401.499:695577): pid=9945 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447067401.499:695578): pid=9945 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22678 res=1
type=LOGIN msg=audit(1447067401.499:695579): pid=9944 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22679 res=1
type=USER_START msg=audit(1447067401.514:695580): pid=9944 uid=0 auid=0 ses=22679 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447067401.514:695581): pid=9944 uid=0 auid=0 ses=22679 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447067401.516:695582): pid=9945 uid=0 auid=0 ses=22678 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447067401.516:695583): pid=9945 uid=0 auid=0 ses=22678 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447067401.522:695584): pid=9945 uid=0 auid=0 ses=22678 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447067401.525:695585): pid=9945 uid=0 auid=0 ses=22678 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447067401.529:695586): pid=9944 uid=0 auid=0 ses=22679 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447067401.532:695587): pid=9944 uid=0 auid=0 ses=22679 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447067582.803:695588): pid=10515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=10515 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447067582.803:695589): pid=10515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=10515 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447067582.804:695590): pid=10515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=10515 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447067582.846:695591): pid=10514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=10515 suid=74 rport=55473 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447067582.847:695592): pid=10514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=10515 suid=74 rport=55473 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447067582.976:695593): pid=10514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=55473 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447067582.976:695594): pid=10514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=55473 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447067582.985:695595): pid=10514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447067582.986:695596): pid=10514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10515 suid=74 rport=55473 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447067582.988:695597): pid=10514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447067582.989:695598): pid=10514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447067582.989:695599): pid=10514 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22680 res=1
type=USER_ROLE_CHANGE msg=audit(1447067583.056:695600): pid=10514 uid=0 auid=0 ses=22680 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447067583.078:695601): pid=10514 uid=0 auid=0 ses=22680 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447067583.081:695602): pid=10514 uid=0 auid=0 ses=22680 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447067583.081:695603): pid=10514 uid=0 auid=0 ses=22680 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447067583.082:695604): pid=10517 uid=0 auid=0 ses=22680 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=10517 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447067583.083:695605): pid=10517 uid=0 auid=0 ses=22680 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=10517 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447067583.083:695606): pid=10517 uid=0 auid=0 ses=22680 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=10517 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447067583.084:695607): pid=10517 uid=0 auid=0 ses=22680 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447067583.104:695608): pid=10514 uid=0 auid=0 ses=22680 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447067583.104:695609): pid=10514 uid=0 auid=0 ses=22680 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447067583.110:695610): pid=10514 uid=0 auid=0 ses=22680 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447067583.111:695611): pid=10514 uid=0 auid=0 ses=22680 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447067583.111:695612): pid=10514 uid=0 auid=0 ses=22680 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10514 suid=0 rport=55473 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447067583.111:695613): pid=10514 uid=0 auid=0 ses=22680 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=10514 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447067583.112:695614): pid=10514 uid=0 auid=0 ses=22680 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=10514 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447067583.112:695615): pid=10514 uid=0 auid=0 ses=22680 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=10514 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447067583.131:695616): pid=10525 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=10525 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447067583.131:695617): pid=10525 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=10525 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447067583.131:695618): pid=10525 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=10525 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447067583.174:695619): pid=10524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=10525 suid=74 rport=55474 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447067583.175:695620): pid=10524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=10525 suid=74 rport=55474 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447067583.303:695621): pid=10524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=55474 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447067583.303:695622): pid=10524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=55474 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447067583.310:695623): pid=10524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447067583.311:695624): pid=10524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10525 suid=74 rport=55474 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447067583.312:695625): pid=10524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447067583.313:695626): pid=10524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447067583.313:695627): pid=10524 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22681 res=1
type=USER_ROLE_CHANGE msg=audit(1447067583.377:695628): pid=10524 uid=0 auid=0 ses=22681 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447067583.395:695629): pid=10524 uid=0 auid=0 ses=22681 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447067583.398:695630): pid=10524 uid=0 auid=0 ses=22681 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447067583.398:695631): pid=10524 uid=0 auid=0 ses=22681 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447067583.400:695632): pid=10527 uid=0 auid=0 ses=22681 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=10527 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447067583.400:695633): pid=10527 uid=0 auid=0 ses=22681 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=10527 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447067583.400:695634): pid=10527 uid=0 auid=0 ses=22681 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=10527 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447067583.401:695635): pid=10527 uid=0 auid=0 ses=22681 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447067584.656:695636): pid=10524 uid=0 auid=0 ses=22681 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447067584.656:695637): pid=10524 uid=0 auid=0 ses=22681 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447067584.663:695638): pid=10524 uid=0 auid=0 ses=22681 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447067584.663:695639): pid=10524 uid=0 auid=0 ses=22681 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447067584.664:695640): pid=10524 uid=0 auid=0 ses=22681 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10524 suid=0 rport=55474 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447067584.664:695641): pid=10524 uid=0 auid=0 ses=22681 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=10524 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447067584.664:695642): pid=10524 uid=0 auid=0 ses=22681 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=10524 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447067584.664:695643): pid=10524 uid=0 auid=0 ses=22681 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=10524 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447067584.689:695644): pid=10577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=10577 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447067584.689:695645): pid=10577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=10577 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447067584.689:695646): pid=10577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=10577 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447067584.733:695647): pid=10576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=10577 suid=74 rport=55475 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447067584.734:695648): pid=10576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=10577 suid=74 rport=55475 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447067584.861:695649): pid=10576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=55475 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447067584.861:695650): pid=10576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=55475 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447067584.868:695651): pid=10576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447067584.869:695652): pid=10576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10577 suid=74 rport=55475 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447067584.871:695653): pid=10576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447067584.871:695654): pid=10576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447067584.871:695655): pid=10576 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22682 res=1
type=USER_ROLE_CHANGE msg=audit(1447067584.936:695656): pid=10576 uid=0 auid=0 ses=22682 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447067584.957:695657): pid=10576 uid=0 auid=0 ses=22682 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447067584.960:695658): pid=10576 uid=0 auid=0 ses=22682 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447067584.960:695659): pid=10576 uid=0 auid=0 ses=22682 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447067584.961:695660): pid=10579 uid=0 auid=0 ses=22682 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=10579 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447067584.961:695661): pid=10579 uid=0 auid=0 ses=22682 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=10579 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447067584.961:695662): pid=10579 uid=0 auid=0 ses=22682 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=10579 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447067584.962:695663): pid=10579 uid=0 auid=0 ses=22682 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447067584.979:695664): pid=10576 uid=0 auid=0 ses=22682 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447067584.979:695665): pid=10576 uid=0 auid=0 ses=22682 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447067584.983:695666): pid=10576 uid=0 auid=0 ses=22682 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447067584.983:695667): pid=10576 uid=0 auid=0 ses=22682 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447067584.984:695668): pid=10576 uid=0 auid=0 ses=22682 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10576 suid=0 rport=55475 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447067584.984:695669): pid=10576 uid=0 auid=0 ses=22682 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=10576 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447067584.984:695670): pid=10576 uid=0 auid=0 ses=22682 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=10576 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447067584.984:695671): pid=10576 uid=0 auid=0 ses=22682 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=10576 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=SYSCALL msg=audit(1447067848.726:695672): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447068001.550:695673): pid=11868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447068001.551:695674): pid=11867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447068001.551:695675): pid=11868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447068001.551:695676): pid=11867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447068001.552:695677): pid=11868 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22683 res=1
type=LOGIN msg=audit(1447068001.552:695678): pid=11867 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22684 res=1
type=USER_START msg=audit(1447068001.571:695679): pid=11868 uid=0 auid=0 ses=22683 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447068001.571:695680): pid=11868 uid=0 auid=0 ses=22683 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447068001.571:695681): pid=11867 uid=0 auid=0 ses=22684 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447068001.571:695682): pid=11867 uid=0 auid=0 ses=22684 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447068001.579:695683): pid=11868 uid=0 auid=0 ses=22683 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447068001.581:695684): pid=11868 uid=0 auid=0 ses=22683 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447068001.588:695685): pid=11867 uid=0 auid=0 ses=22684 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447068001.589:695686): pid=11867 uid=0 auid=0 ses=22684 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447068601.606:695687): pid=13711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447068601.606:695688): pid=13712 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447068601.606:695689): pid=13711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447068601.606:695690): pid=13712 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447068601.607:695691): pid=13712 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22685 res=1
type=LOGIN msg=audit(1447068601.607:695692): pid=13711 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22686 res=1
type=USER_START msg=audit(1447068601.621:695693): pid=13711 uid=0 auid=0 ses=22686 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447068601.621:695694): pid=13712 uid=0 auid=0 ses=22685 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447068601.621:695695): pid=13711 uid=0 auid=0 ses=22686 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447068601.621:695696): pid=13712 uid=0 auid=0 ses=22685 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447068601.629:695697): pid=13712 uid=0 auid=0 ses=22685 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447068601.630:695698): pid=13712 uid=0 auid=0 ses=22685 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447068601.636:695699): pid=13711 uid=0 auid=0 ses=22686 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447068601.637:695700): pid=13711 uid=0 auid=0 ses=22686 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447068783.146:695701): pid=14277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=14277 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447068783.146:695702): pid=14277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=14277 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447068783.146:695703): pid=14277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=14277 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447068783.190:695704): pid=14276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=14277 suid=74 rport=57454 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447068783.190:695705): pid=14276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=14277 suid=74 rport=57454 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447068783.321:695706): pid=14276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=57454 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447068783.321:695707): pid=14276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=57454 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447068783.326:695708): pid=14276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447068783.328:695709): pid=14276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14277 suid=74 rport=57454 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447068783.329:695710): pid=14276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447068783.329:695711): pid=14276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447068783.329:695712): pid=14276 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22687 res=1
type=USER_ROLE_CHANGE msg=audit(1447068783.400:695713): pid=14276 uid=0 auid=0 ses=22687 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447068783.420:695714): pid=14276 uid=0 auid=0 ses=22687 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447068783.424:695715): pid=14276 uid=0 auid=0 ses=22687 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447068783.424:695716): pid=14276 uid=0 auid=0 ses=22687 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447068783.426:695717): pid=14279 uid=0 auid=0 ses=22687 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=14279 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447068783.426:695718): pid=14279 uid=0 auid=0 ses=22687 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=14279 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447068783.426:695719): pid=14279 uid=0 auid=0 ses=22687 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=14279 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447068783.427:695720): pid=14279 uid=0 auid=0 ses=22687 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447068783.446:695721): pid=14276 uid=0 auid=0 ses=22687 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447068783.447:695722): pid=14276 uid=0 auid=0 ses=22687 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447068783.451:695723): pid=14276 uid=0 auid=0 ses=22687 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447068783.451:695724): pid=14276 uid=0 auid=0 ses=22687 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447068783.452:695725): pid=14276 uid=0 auid=0 ses=22687 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14276 suid=0 rport=57454 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447068783.452:695726): pid=14276 uid=0 auid=0 ses=22687 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=14276 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447068783.452:695727): pid=14276 uid=0 auid=0 ses=22687 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=14276 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447068783.452:695728): pid=14276 uid=0 auid=0 ses=22687 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=14276 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447068783.473:695729): pid=14287 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=14287 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447068783.473:695730): pid=14287 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=14287 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447068783.473:695731): pid=14287 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=14287 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447068783.518:695732): pid=14286 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=14287 suid=74 rport=57455 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447068783.519:695733): pid=14286 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=14287 suid=74 rport=57455 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447068783.648:695734): pid=14286 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=57455 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447068783.648:695735): pid=14286 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=57455 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447068783.658:695736): pid=14286 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447068783.659:695737): pid=14286 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14287 suid=74 rport=57455 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447068783.660:695738): pid=14286 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447068783.660:695739): pid=14286 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447068783.660:695740): pid=14286 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22688 res=1
type=USER_ROLE_CHANGE msg=audit(1447068783.729:695741): pid=14286 uid=0 auid=0 ses=22688 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447068783.746:695742): pid=14286 uid=0 auid=0 ses=22688 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447068783.750:695743): pid=14286 uid=0 auid=0 ses=22688 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447068783.751:695744): pid=14286 uid=0 auid=0 ses=22688 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447068783.752:695745): pid=14289 uid=0 auid=0 ses=22688 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=14289 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447068783.752:695746): pid=14289 uid=0 auid=0 ses=22688 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=14289 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447068783.752:695747): pid=14289 uid=0 auid=0 ses=22688 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=14289 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447068783.753:695748): pid=14289 uid=0 auid=0 ses=22688 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447068785.011:695749): pid=14286 uid=0 auid=0 ses=22688 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447068785.012:695750): pid=14286 uid=0 auid=0 ses=22688 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447068785.018:695751): pid=14286 uid=0 auid=0 ses=22688 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447068785.018:695752): pid=14286 uid=0 auid=0 ses=22688 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447068785.019:695753): pid=14286 uid=0 auid=0 ses=22688 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14286 suid=0 rport=57455 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447068785.019:695754): pid=14286 uid=0 auid=0 ses=22688 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=14286 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447068785.019:695755): pid=14286 uid=0 auid=0 ses=22688 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=14286 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447068785.019:695756): pid=14286 uid=0 auid=0 ses=22688 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=14286 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447068785.050:695757): pid=14339 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=14339 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447068785.050:695758): pid=14339 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=14339 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447068785.050:695759): pid=14339 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=14339 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447068785.095:695760): pid=14338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=14339 suid=74 rport=57456 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447068785.095:695761): pid=14338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=14339 suid=74 rport=57456 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447068785.223:695762): pid=14338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=57456 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447068785.223:695763): pid=14338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=57456 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447068785.231:695764): pid=14338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447068785.232:695765): pid=14338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14339 suid=74 rport=57456 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447068785.235:695766): pid=14338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447068785.235:695767): pid=14338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447068785.235:695768): pid=14338 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22689 res=1
type=USER_ROLE_CHANGE msg=audit(1447068785.305:695769): pid=14338 uid=0 auid=0 ses=22689 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447068785.329:695770): pid=14338 uid=0 auid=0 ses=22689 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447068785.331:695771): pid=14338 uid=0 auid=0 ses=22689 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447068785.331:695772): pid=14338 uid=0 auid=0 ses=22689 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447068785.333:695773): pid=14341 uid=0 auid=0 ses=22689 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=14341 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447068785.333:695774): pid=14341 uid=0 auid=0 ses=22689 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=14341 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447068785.333:695775): pid=14341 uid=0 auid=0 ses=22689 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=14341 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447068785.333:695776): pid=14341 uid=0 auid=0 ses=22689 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447068785.350:695777): pid=14338 uid=0 auid=0 ses=22689 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447068785.350:695778): pid=14338 uid=0 auid=0 ses=22689 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447068785.353:695779): pid=14338 uid=0 auid=0 ses=22689 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447068785.353:695780): pid=14338 uid=0 auid=0 ses=22689 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447068785.353:695781): pid=14338 uid=0 auid=0 ses=22689 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14338 suid=0 rport=57456 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447068785.353:695782): pid=14338 uid=0 auid=0 ses=22689 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=14338 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447068785.353:695783): pid=14338 uid=0 auid=0 ses=22689 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=14338 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447068785.353:695784): pid=14338 uid=0 auid=0 ses=22689 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=14338 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=SYSCALL msg=audit(1447068926.759:695785): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447069201.659:695786): pid=15628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447069201.659:695787): pid=15628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447069201.661:695788): pid=15628 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22690 res=1
type=USER_ACCT msg=audit(1447069201.665:695789): pid=15629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447069201.665:695790): pid=15629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447069201.665:695791): pid=15629 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22691 res=1
type=USER_START msg=audit(1447069201.682:695792): pid=15628 uid=0 auid=0 ses=22690 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447069201.682:695793): pid=15628 uid=0 auid=0 ses=22690 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447069201.682:695794): pid=15629 uid=0 auid=0 ses=22691 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447069201.682:695795): pid=15629 uid=0 auid=0 ses=22691 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447069201.691:695796): pid=15629 uid=0 auid=0 ses=22691 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447069201.692:695797): pid=15629 uid=0 auid=0 ses=22691 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447069201.699:695798): pid=15628 uid=0 auid=0 ses=22690 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447069201.701:695799): pid=15628 uid=0 auid=0 ses=22690 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447069801.718:695801): pid=17475 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447069801.718:695800): pid=17476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447069801.718:695802): pid=17475 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447069801.718:695803): pid=17476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447069801.718:695804): pid=17476 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22692 res=1
type=LOGIN msg=audit(1447069801.718:695805): pid=17475 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22693 res=1
type=USER_START msg=audit(1447069801.735:695806): pid=17475 uid=0 auid=0 ses=22693 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447069801.735:695807): pid=17476 uid=0 auid=0 ses=22692 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447069801.736:695808): pid=17476 uid=0 auid=0 ses=22692 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447069801.736:695809): pid=17475 uid=0 auid=0 ses=22693 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447069801.741:695810): pid=17476 uid=0 auid=0 ses=22692 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447069801.742:695811): pid=17476 uid=0 auid=0 ses=22692 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447069801.751:695812): pid=17475 uid=0 auid=0 ses=22693 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447069801.752:695813): pid=17475 uid=0 auid=0 ses=22693 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1447069968.759:695814): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=CRYPTO_KEY_USER msg=audit(1447069982.426:695815): pid=18040 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=18040 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447069982.427:695816): pid=18040 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=18040 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447069982.427:695817): pid=18040 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=18040 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447069982.472:695818): pid=18039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=18040 suid=74 rport=59434 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447069982.472:695819): pid=18039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=18040 suid=74 rport=59434 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447069982.600:695820): pid=18039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59434 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447069982.600:695821): pid=18039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=59434 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447069982.606:695822): pid=18039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447069982.608:695823): pid=18039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18040 suid=74 rport=59434 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447069982.608:695824): pid=18039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447069982.609:695825): pid=18039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447069982.609:695826): pid=18039 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22694 res=1
type=USER_ROLE_CHANGE msg=audit(1447069982.677:695827): pid=18039 uid=0 auid=0 ses=22694 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447069982.696:695828): pid=18039 uid=0 auid=0 ses=22694 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447069982.699:695829): pid=18039 uid=0 auid=0 ses=22694 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447069982.699:695830): pid=18039 uid=0 auid=0 ses=22694 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447069982.700:695831): pid=18042 uid=0 auid=0 ses=22694 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=18042 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447069982.700:695832): pid=18042 uid=0 auid=0 ses=22694 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=18042 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447069982.700:695833): pid=18042 uid=0 auid=0 ses=22694 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=18042 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447069982.701:695834): pid=18042 uid=0 auid=0 ses=22694 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447069982.720:695835): pid=18039 uid=0 auid=0 ses=22694 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447069982.720:695836): pid=18039 uid=0 auid=0 ses=22694 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447069982.723:695837): pid=18039 uid=0 auid=0 ses=22694 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447069982.724:695838): pid=18039 uid=0 auid=0 ses=22694 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447069982.724:695839): pid=18039 uid=0 auid=0 ses=22694 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18039 suid=0 rport=59434 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447069982.724:695840): pid=18039 uid=0 auid=0 ses=22694 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=18039 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447069982.724:695841): pid=18039 uid=0 auid=0 ses=22694 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=18039 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447069982.725:695842): pid=18039 uid=0 auid=0 ses=22694 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=18039 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447069982.746:695843): pid=18050 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=18050 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447069982.746:695844): pid=18050 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=18050 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447069982.746:695845): pid=18050 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=18050 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447069982.791:695846): pid=18049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=18050 suid=74 rport=59435 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447069982.791:695847): pid=18049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=18050 suid=74 rport=59435 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447069982.918:695848): pid=18049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59435 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447069982.918:695849): pid=18049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=59435 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447069982.925:695850): pid=18049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447069982.926:695851): pid=18049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18050 suid=74 rport=59435 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447069982.927:695852): pid=18049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447069982.928:695853): pid=18049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447069982.928:695854): pid=18049 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22695 res=1
type=USER_ROLE_CHANGE msg=audit(1447069982.994:695855): pid=18049 uid=0 auid=0 ses=22695 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447069983.012:695856): pid=18049 uid=0 auid=0 ses=22695 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447069983.015:695857): pid=18049 uid=0 auid=0 ses=22695 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447069983.015:695858): pid=18049 uid=0 auid=0 ses=22695 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447069983.016:695859): pid=18052 uid=0 auid=0 ses=22695 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=18052 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447069983.016:695860): pid=18052 uid=0 auid=0 ses=22695 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=18052 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447069983.017:695861): pid=18052 uid=0 auid=0 ses=22695 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=18052 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447069983.017:695862): pid=18052 uid=0 auid=0 ses=22695 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447069984.324:695863): pid=18049 uid=0 auid=0 ses=22695 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447069984.324:695864): pid=18049 uid=0 auid=0 ses=22695 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447069984.332:695865): pid=18049 uid=0 auid=0 ses=22695 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447069984.332:695866): pid=18049 uid=0 auid=0 ses=22695 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447069984.333:695867): pid=18049 uid=0 auid=0 ses=22695 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18049 suid=0 rport=59435 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447069984.333:695868): pid=18049 uid=0 auid=0 ses=22695 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=18049 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447069984.333:695869): pid=18049 uid=0 auid=0 ses=22695 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=18049 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447069984.333:695870): pid=18049 uid=0 auid=0 ses=22695 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=18049 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447069984.357:695871): pid=18102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=18102 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447069984.357:695872): pid=18102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=18102 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447069984.357:695873): pid=18102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=18102 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447069984.401:695874): pid=18101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=18102 suid=74 rport=59437 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447069984.402:695875): pid=18101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=18102 suid=74 rport=59437 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447069984.531:695876): pid=18101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59437 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447069984.531:695877): pid=18101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=59437 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447069984.540:695878): pid=18101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447069984.542:695879): pid=18101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18102 suid=74 rport=59437 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447069984.544:695880): pid=18101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447069984.544:695881): pid=18101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447069984.544:695882): pid=18101 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22696 res=1
type=USER_ROLE_CHANGE msg=audit(1447069984.611:695883): pid=18101 uid=0 auid=0 ses=22696 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447069984.634:695884): pid=18101 uid=0 auid=0 ses=22696 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447069984.637:695885): pid=18101 uid=0 auid=0 ses=22696 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447069984.637:695886): pid=18101 uid=0 auid=0 ses=22696 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447069984.638:695887): pid=18104 uid=0 auid=0 ses=22696 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=18104 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447069984.638:695888): pid=18104 uid=0 auid=0 ses=22696 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=18104 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447069984.638:695889): pid=18104 uid=0 auid=0 ses=22696 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=18104 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447069984.639:695890): pid=18104 uid=0 auid=0 ses=22696 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447069984.657:695891): pid=18101 uid=0 auid=0 ses=22696 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447069984.657:695892): pid=18101 uid=0 auid=0 ses=22696 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447069984.661:695893): pid=18101 uid=0 auid=0 ses=22696 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447069984.662:695894): pid=18101 uid=0 auid=0 ses=22696 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447069984.662:695895): pid=18101 uid=0 auid=0 ses=22696 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18101 suid=0 rport=59437 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447069984.662:695896): pid=18101 uid=0 auid=0 ses=22696 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=18101 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447069984.662:695897): pid=18101 uid=0 auid=0 ses=22696 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=18101 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447069984.663:695898): pid=18101 uid=0 auid=0 ses=22696 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=18101 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447070401.774:695899): pid=19395 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447070401.775:695900): pid=19395 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447070401.775:695901): pid=19394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447070401.775:695902): pid=19394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447070401.776:695903): pid=19395 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22697 res=1
type=LOGIN msg=audit(1447070401.776:695904): pid=19394 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22698 res=1
type=USER_START msg=audit(1447070401.797:695905): pid=19395 uid=0 auid=0 ses=22697 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447070401.797:695906): pid=19395 uid=0 auid=0 ses=22697 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447070401.797:695907): pid=19394 uid=0 auid=0 ses=22698 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447070401.797:695908): pid=19394 uid=0 auid=0 ses=22698 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447070401.808:695909): pid=19395 uid=0 auid=0 ses=22697 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447070401.810:695910): pid=19395 uid=0 auid=0 ses=22697 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447070401.814:695911): pid=19394 uid=0 auid=0 ses=22698 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447070401.817:695912): pid=19394 uid=0 auid=0 ses=22698 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447070461.830:695913): pid=19628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447070461.830:695914): pid=19628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447070461.830:695915): pid=19628 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22699 res=1
type=USER_START msg=audit(1447070461.840:695916): pid=19628 uid=0 auid=0 ses=22699 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447070461.840:695917): pid=19628 uid=0 auid=0 ses=22699 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447070461.873:695918): pid=19628 uid=0 auid=0 ses=22699 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447070461.875:695919): pid=19628 uid=0 auid=0 ses=22699 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447071001.888:695920): pid=21297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447071001.888:695921): pid=21297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447071001.889:695922): pid=21297 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22700 res=1
type=USER_ACCT msg=audit(1447071001.889:695923): pid=21296 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447071001.889:695924): pid=21296 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447071001.889:695925): pid=21296 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22701 res=1
type=USER_START msg=audit(1447071001.902:695926): pid=21296 uid=0 auid=0 ses=22701 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447071001.903:695927): pid=21296 uid=0 auid=0 ses=22701 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447071001.903:695928): pid=21297 uid=0 auid=0 ses=22700 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447071001.903:695929): pid=21297 uid=0 auid=0 ses=22700 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447071001.911:695930): pid=21297 uid=0 auid=0 ses=22700 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447071001.913:695931): pid=21297 uid=0 auid=0 ses=22700 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447071001.914:695932): pid=21296 uid=0 auid=0 ses=22701 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447071026.941:695933): pid=21296 uid=0 auid=0 ses=22701 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=CRYPTO_KEY_USER msg=audit(1447071182.921:695934): pid=21867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=21867 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447071182.921:695935): pid=21867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=21867 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447071182.921:695936): pid=21867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=21867 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447071182.965:695937): pid=21866 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=21867 suid=74 rport=61414 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447071182.966:695938): pid=21866 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=21867 suid=74 rport=61414 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447071183.095:695939): pid=21866 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=61414 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447071183.095:695940): pid=21866 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=61414 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447071183.103:695941): pid=21866 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447071183.105:695942): pid=21866 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21867 suid=74 rport=61414 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447071183.108:695943): pid=21866 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447071183.108:695944): pid=21866 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447071183.108:695945): pid=21866 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22702 res=1
type=USER_ROLE_CHANGE msg=audit(1447071183.176:695946): pid=21866 uid=0 auid=0 ses=22702 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447071183.196:695947): pid=21866 uid=0 auid=0 ses=22702 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447071183.199:695948): pid=21866 uid=0 auid=0 ses=22702 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447071183.199:695949): pid=21866 uid=0 auid=0 ses=22702 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447071183.200:695950): pid=21869 uid=0 auid=0 ses=22702 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=21869 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447071183.200:695951): pid=21869 uid=0 auid=0 ses=22702 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=21869 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447071183.200:695952): pid=21869 uid=0 auid=0 ses=22702 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=21869 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447071183.202:695953): pid=21869 uid=0 auid=0 ses=22702 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447071183.225:695954): pid=21866 uid=0 auid=0 ses=22702 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447071183.226:695955): pid=21866 uid=0 auid=0 ses=22702 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447071183.232:695956): pid=21866 uid=0 auid=0 ses=22702 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447071183.232:695957): pid=21866 uid=0 auid=0 ses=22702 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447071183.233:695958): pid=21866 uid=0 auid=0 ses=22702 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21866 suid=0 rport=61414 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447071183.233:695959): pid=21866 uid=0 auid=0 ses=22702 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=21866 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447071183.233:695960): pid=21866 uid=0 auid=0 ses=22702 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=21866 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447071183.233:695961): pid=21866 uid=0 auid=0 ses=22702 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=21866 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447071183.252:695962): pid=21877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=21877 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447071183.253:695963): pid=21877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=21877 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447071183.253:695964): pid=21877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=21877 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447071183.297:695965): pid=21876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=21877 suid=74 rport=61415 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447071183.297:695966): pid=21876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=21877 suid=74 rport=61415 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447071183.424:695967): pid=21876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=61415 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447071183.424:695968): pid=21876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=61415 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447071183.433:695969): pid=21876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447071183.434:695970): pid=21876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21877 suid=74 rport=61415 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447071183.436:695971): pid=21876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447071183.436:695972): pid=21876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447071183.437:695973): pid=21876 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22703 res=1
type=USER_ROLE_CHANGE msg=audit(1447071183.500:695974): pid=21876 uid=0 auid=0 ses=22703 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447071183.524:695975): pid=21876 uid=0 auid=0 ses=22703 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447071183.526:695976): pid=21876 uid=0 auid=0 ses=22703 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447071183.526:695977): pid=21876 uid=0 auid=0 ses=22703 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447071183.529:695978): pid=21879 uid=0 auid=0 ses=22703 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=21879 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447071183.529:695979): pid=21879 uid=0 auid=0 ses=22703 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=21879 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447071183.529:695980): pid=21879 uid=0 auid=0 ses=22703 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=21879 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447071183.530:695981): pid=21879 uid=0 auid=0 ses=22703 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447071184.790:695982): pid=21876 uid=0 auid=0 ses=22703 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447071184.790:695983): pid=21876 uid=0 auid=0 ses=22703 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447071184.794:695984): pid=21876 uid=0 auid=0 ses=22703 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447071184.795:695985): pid=21876 uid=0 auid=0 ses=22703 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447071184.795:695986): pid=21876 uid=0 auid=0 ses=22703 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21876 suid=0 rport=61415 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447071184.795:695987): pid=21876 uid=0 auid=0 ses=22703 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=21876 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447071184.795:695988): pid=21876 uid=0 auid=0 ses=22703 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=21876 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447071184.795:695989): pid=21876 uid=0 auid=0 ses=22703 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=21876 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447071184.827:695990): pid=21929 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=21929 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447071184.827:695991): pid=21929 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=21929 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447071184.827:695992): pid=21929 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=21929 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447071184.872:695993): pid=21928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=21929 suid=74 rport=61417 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447071184.873:695994): pid=21928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=21929 suid=74 rport=61417 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447071185.001:695995): pid=21928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=61417 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447071185.001:695996): pid=21928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=61417 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447071185.009:695997): pid=21928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447071185.009:695998): pid=21928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21929 suid=74 rport=61417 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447071185.012:695999): pid=21928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447071185.012:696000): pid=21928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447071185.012:696001): pid=21928 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22704 res=1
type=USER_ROLE_CHANGE msg=audit(1447071185.076:696002): pid=21928 uid=0 auid=0 ses=22704 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447071185.095:696003): pid=21928 uid=0 auid=0 ses=22704 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447071185.097:696004): pid=21928 uid=0 auid=0 ses=22704 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447071185.097:696005): pid=21928 uid=0 auid=0 ses=22704 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447071185.099:696006): pid=21931 uid=0 auid=0 ses=22704 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=21931 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447071185.099:696007): pid=21931 uid=0 auid=0 ses=22704 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=21931 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447071185.099:696008): pid=21931 uid=0 auid=0 ses=22704 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=21931 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447071185.099:696009): pid=21931 uid=0 auid=0 ses=22704 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447071185.115:696010): pid=21928 uid=0 auid=0 ses=22704 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447071185.115:696011): pid=21928 uid=0 auid=0 ses=22704 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447071185.118:696012): pid=21928 uid=0 auid=0 ses=22704 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447071185.118:696013): pid=21928 uid=0 auid=0 ses=22704 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447071185.118:696014): pid=21928 uid=0 auid=0 ses=22704 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21928 suid=0 rport=61417 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447071185.118:696015): pid=21928 uid=0 auid=0 ses=22704 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=21928 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447071185.118:696016): pid=21928 uid=0 auid=0 ses=22704 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=21928 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447071185.119:696017): pid=21928 uid=0 auid=0 ses=22704 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=21928 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447071601.966:696018): pid=23220 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447071601.967:696019): pid=23220 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447071601.967:696020): pid=23221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447071601.967:696021): pid=23221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447071601.968:696022): pid=23221 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22705 res=1
type=LOGIN msg=audit(1447071601.968:696023): pid=23220 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22706 res=1
type=USER_START msg=audit(1447071601.988:696024): pid=23221 uid=0 auid=0 ses=22705 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447071601.988:696025): pid=23221 uid=0 auid=0 ses=22705 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447071601.989:696026): pid=23220 uid=0 auid=0 ses=22706 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447071601.989:696027): pid=23220 uid=0 auid=0 ses=22706 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447071601.996:696028): pid=23221 uid=0 auid=0 ses=22705 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447071601.998:696029): pid=23221 uid=0 auid=0 ses=22705 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447071602.008:696030): pid=23220 uid=0 auid=0 ses=22706 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447071602.010:696031): pid=23220 uid=0 auid=0 ses=22706 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1447072072.759:696032): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447072201.028:696033): pid=25061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447072201.028:696034): pid=25060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447072201.028:696035): pid=25061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447072201.028:696036): pid=25060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447072201.029:696037): pid=25061 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22707 res=1
type=LOGIN msg=audit(1447072201.029:696038): pid=25060 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22708 res=1
type=USER_START msg=audit(1447072201.044:696039): pid=25060 uid=0 auid=0 ses=22708 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447072201.044:696040): pid=25060 uid=0 auid=0 ses=22708 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447072201.045:696041): pid=25061 uid=0 auid=0 ses=22707 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447072201.046:696042): pid=25061 uid=0 auid=0 ses=22707 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447072201.053:696043): pid=25061 uid=0 auid=0 ses=22707 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447072201.056:696044): pid=25060 uid=0 auid=0 ses=22708 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447072201.058:696045): pid=25061 uid=0 auid=0 ses=22707 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447072201.058:696046): pid=25060 uid=0 auid=0 ses=22708 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447072382.466:696047): pid=25630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=25630 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447072382.467:696048): pid=25630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=25630 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447072382.467:696049): pid=25630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=25630 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447072382.510:696050): pid=25629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=25630 suid=74 rport=63503 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447072382.511:696051): pid=25629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=25630 suid=74 rport=63503 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447072382.639:696052): pid=25629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=63503 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447072382.639:696053): pid=25629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=63503 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447072382.645:696054): pid=25629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447072382.646:696055): pid=25629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25630 suid=74 rport=63503 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447072382.648:696056): pid=25629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447072382.648:696057): pid=25629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447072382.649:696058): pid=25629 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22709 res=1
type=USER_ROLE_CHANGE msg=audit(1447072382.718:696059): pid=25629 uid=0 auid=0 ses=22709 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447072382.738:696060): pid=25629 uid=0 auid=0 ses=22709 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447072382.741:696061): pid=25629 uid=0 auid=0 ses=22709 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447072382.741:696062): pid=25629 uid=0 auid=0 ses=22709 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447072382.743:696063): pid=25632 uid=0 auid=0 ses=22709 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=25632 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447072382.743:696064): pid=25632 uid=0 auid=0 ses=22709 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=25632 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447072382.743:696065): pid=25632 uid=0 auid=0 ses=22709 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=25632 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447072382.744:696066): pid=25632 uid=0 auid=0 ses=22709 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447072382.761:696067): pid=25629 uid=0 auid=0 ses=22709 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447072382.761:696068): pid=25629 uid=0 auid=0 ses=22709 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447072382.765:696069): pid=25629 uid=0 auid=0 ses=22709 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447072382.765:696070): pid=25629 uid=0 auid=0 ses=22709 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447072382.765:696071): pid=25629 uid=0 auid=0 ses=22709 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25629 suid=0 rport=63503 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447072382.765:696072): pid=25629 uid=0 auid=0 ses=22709 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=25629 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447072382.765:696073): pid=25629 uid=0 auid=0 ses=22709 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=25629 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447072382.765:696074): pid=25629 uid=0 auid=0 ses=22709 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=25629 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447072382.787:696075): pid=25640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=25640 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447072382.787:696076): pid=25640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=25640 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447072382.787:696077): pid=25640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=25640 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447072382.832:696078): pid=25639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=25640 suid=74 rport=63504 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447072382.832:696079): pid=25639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=25640 suid=74 rport=63504 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447072382.956:696080): pid=25639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=63504 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447072382.956:696081): pid=25639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=63504 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447072382.961:696082): pid=25639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447072382.962:696083): pid=25639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25640 suid=74 rport=63504 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447072382.964:696084): pid=25639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447072382.964:696085): pid=25639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447072382.964:696086): pid=25639 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22710 res=1
type=USER_ROLE_CHANGE msg=audit(1447072383.033:696087): pid=25639 uid=0 auid=0 ses=22710 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447072383.053:696088): pid=25639 uid=0 auid=0 ses=22710 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447072383.057:696089): pid=25639 uid=0 auid=0 ses=22710 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447072383.057:696090): pid=25639 uid=0 auid=0 ses=22710 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447072383.059:696091): pid=25642 uid=0 auid=0 ses=22710 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=25642 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447072383.059:696092): pid=25642 uid=0 auid=0 ses=22710 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=25642 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447072383.059:696093): pid=25642 uid=0 auid=0 ses=22710 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=25642 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447072383.059:696094): pid=25642 uid=0 auid=0 ses=22710 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447072384.355:696095): pid=25639 uid=0 auid=0 ses=22710 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447072384.355:696096): pid=25639 uid=0 auid=0 ses=22710 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447072384.358:696097): pid=25639 uid=0 auid=0 ses=22710 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447072384.358:696098): pid=25639 uid=0 auid=0 ses=22710 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447072384.359:696099): pid=25639 uid=0 auid=0 ses=22710 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25639 suid=0 rport=63504 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447072384.359:696100): pid=25639 uid=0 auid=0 ses=22710 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=25639 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447072384.359:696101): pid=25639 uid=0 auid=0 ses=22710 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=25639 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447072384.359:696102): pid=25639 uid=0 auid=0 ses=22710 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=25639 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447072384.391:696103): pid=25692 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=25692 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447072384.391:696104): pid=25692 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=25692 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447072384.391:696105): pid=25692 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=25692 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447072384.437:696106): pid=25691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=25692 suid=74 rport=63506 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447072384.437:696107): pid=25691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=25692 suid=74 rport=63506 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447072384.561:696108): pid=25691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=63506 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447072384.561:696109): pid=25691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=63506 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447072384.565:696110): pid=25691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447072384.566:696111): pid=25691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25692 suid=74 rport=63506 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447072384.566:696112): pid=25691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447072384.567:696113): pid=25691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447072384.567:696114): pid=25691 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22711 res=1
type=USER_ROLE_CHANGE msg=audit(1447072384.632:696115): pid=25691 uid=0 auid=0 ses=22711 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447072384.653:696116): pid=25691 uid=0 auid=0 ses=22711 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447072384.656:696117): pid=25691 uid=0 auid=0 ses=22711 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447072384.656:696118): pid=25691 uid=0 auid=0 ses=22711 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447072384.658:696119): pid=25694 uid=0 auid=0 ses=22711 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=25694 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447072384.658:696120): pid=25694 uid=0 auid=0 ses=22711 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=25694 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447072384.658:696121): pid=25694 uid=0 auid=0 ses=22711 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=25694 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447072384.658:696122): pid=25694 uid=0 auid=0 ses=22711 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447072384.675:696123): pid=25691 uid=0 auid=0 ses=22711 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447072384.675:696124): pid=25691 uid=0 auid=0 ses=22711 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447072384.679:696125): pid=25691 uid=0 auid=0 ses=22711 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447072384.680:696126): pid=25691 uid=0 auid=0 ses=22711 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447072384.680:696127): pid=25691 uid=0 auid=0 ses=22711 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25691 suid=0 rport=63506 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447072384.680:696128): pid=25691 uid=0 auid=0 ses=22711 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=25691 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447072384.680:696129): pid=25691 uid=0 auid=0 ses=22711 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=25691 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447072384.680:696130): pid=25691 uid=0 auid=0 ses=22711 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=25691 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447072801.081:696132): pid=26977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447072801.081:696131): pid=26978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447072801.081:696133): pid=26977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447072801.081:696134): pid=26978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447072801.082:696135): pid=26978 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22712 res=1
type=LOGIN msg=audit(1447072801.082:696136): pid=26977 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22713 res=1
type=USER_START msg=audit(1447072801.100:696137): pid=26978 uid=0 auid=0 ses=22712 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447072801.100:696138): pid=26978 uid=0 auid=0 ses=22712 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447072801.101:696139): pid=26977 uid=0 auid=0 ses=22713 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447072801.101:696140): pid=26977 uid=0 auid=0 ses=22713 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447072801.109:696141): pid=26978 uid=0 auid=0 ses=22712 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447072801.112:696142): pid=26978 uid=0 auid=0 ses=22712 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447072801.120:696143): pid=26977 uid=0 auid=0 ses=22713 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447072801.123:696144): pid=26977 uid=0 auid=0 ses=22713 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1447073131.759:696145): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447073401.140:696146): pid=28802 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447073401.140:696147): pid=28802 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447073401.140:696148): pid=28803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447073401.140:696149): pid=28803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447073401.141:696150): pid=28802 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22714 res=1
type=LOGIN msg=audit(1447073401.141:696151): pid=28803 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22715 res=1
type=USER_START msg=audit(1447073401.158:696152): pid=28802 uid=0 auid=0 ses=22714 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447073401.158:696153): pid=28802 uid=0 auid=0 ses=22714 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447073401.158:696154): pid=28803 uid=0 auid=0 ses=22715 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447073401.158:696155): pid=28803 uid=0 auid=0 ses=22715 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447073401.165:696156): pid=28803 uid=0 auid=0 ses=22715 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447073401.170:696157): pid=28802 uid=0 auid=0 ses=22714 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447073401.170:696158): pid=28803 uid=0 auid=0 ses=22715 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447073401.174:696159): pid=28802 uid=0 auid=0 ses=22714 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447073582.910:696160): pid=29380 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=29380 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447073582.911:696161): pid=29380 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=29380 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447073582.911:696162): pid=29380 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=29380 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447073582.955:696163): pid=29379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=29380 suid=74 rport=65484 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447073582.955:696164): pid=29379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=29380 suid=74 rport=65484 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447073583.078:696165): pid=29379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=65484 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447073583.079:696166): pid=29379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=65484 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447073583.084:696167): pid=29379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447073583.085:696168): pid=29379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29380 suid=74 rport=65484 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447073583.086:696169): pid=29379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447073583.086:696170): pid=29379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447073583.086:696171): pid=29379 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22716 res=1
type=USER_ROLE_CHANGE msg=audit(1447073583.157:696172): pid=29379 uid=0 auid=0 ses=22716 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447073583.180:696173): pid=29379 uid=0 auid=0 ses=22716 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447073583.183:696174): pid=29379 uid=0 auid=0 ses=22716 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447073583.183:696175): pid=29379 uid=0 auid=0 ses=22716 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447073583.185:696176): pid=29382 uid=0 auid=0 ses=22716 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=29382 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447073583.185:696177): pid=29382 uid=0 auid=0 ses=22716 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=29382 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447073583.185:696178): pid=29382 uid=0 auid=0 ses=22716 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=29382 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447073583.186:696179): pid=29382 uid=0 auid=0 ses=22716 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447073583.206:696180): pid=29379 uid=0 auid=0 ses=22716 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447073583.206:696181): pid=29379 uid=0 auid=0 ses=22716 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447073583.209:696182): pid=29379 uid=0 auid=0 ses=22716 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447073583.209:696183): pid=29379 uid=0 auid=0 ses=22716 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447073583.210:696184): pid=29379 uid=0 auid=0 ses=22716 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29379 suid=0 rport=65484 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447073583.210:696185): pid=29379 uid=0 auid=0 ses=22716 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=29379 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447073583.210:696186): pid=29379 uid=0 auid=0 ses=22716 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=29379 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447073583.210:696187): pid=29379 uid=0 auid=0 ses=22716 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=29379 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447073583.232:696188): pid=29390 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=29390 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447073583.232:696189): pid=29390 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=29390 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447073583.232:696190): pid=29390 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=29390 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447073583.277:696191): pid=29389 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=29390 suid=74 rport=65485 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447073583.277:696192): pid=29389 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=29390 suid=74 rport=65485 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447073583.404:696193): pid=29389 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=65485 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447073583.404:696194): pid=29389 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=65485 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447073583.412:696195): pid=29389 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447073583.414:696196): pid=29389 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29390 suid=74 rport=65485 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447073583.416:696197): pid=29389 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447073583.416:696198): pid=29389 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447073583.416:696199): pid=29389 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22717 res=1
type=USER_ROLE_CHANGE msg=audit(1447073583.480:696200): pid=29389 uid=0 auid=0 ses=22717 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447073583.503:696201): pid=29389 uid=0 auid=0 ses=22717 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447073583.506:696202): pid=29389 uid=0 auid=0 ses=22717 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447073583.506:696203): pid=29389 uid=0 auid=0 ses=22717 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447073583.507:696204): pid=29402 uid=0 auid=0 ses=22717 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=29402 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447073583.507:696205): pid=29402 uid=0 auid=0 ses=22717 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=29402 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447073583.507:696206): pid=29402 uid=0 auid=0 ses=22717 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=29402 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447073583.508:696207): pid=29402 uid=0 auid=0 ses=22717 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447073584.796:696208): pid=29389 uid=0 auid=0 ses=22717 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447073584.796:696209): pid=29389 uid=0 auid=0 ses=22717 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447073584.799:696210): pid=29389 uid=0 auid=0 ses=22717 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447073584.800:696211): pid=29389 uid=0 auid=0 ses=22717 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447073584.801:696212): pid=29389 uid=0 auid=0 ses=22717 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29389 suid=0 rport=65485 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447073584.801:696213): pid=29389 uid=0 auid=0 ses=22717 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=29389 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447073584.801:696214): pid=29389 uid=0 auid=0 ses=22717 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=29389 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447073584.801:696215): pid=29389 uid=0 auid=0 ses=22717 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=29389 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447073584.830:696216): pid=29452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=29452 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447073584.831:696217): pid=29452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=29452 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447073584.831:696218): pid=29452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=29452 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447073584.874:696219): pid=29451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=29452 suid=74 rport=65487 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447073584.874:696220): pid=29451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=29452 suid=74 rport=65487 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447073584.998:696221): pid=29451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=65487 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447073584.998:696222): pid=29451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=65487 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447073585.005:696223): pid=29451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447073585.006:696224): pid=29451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29452 suid=74 rport=65487 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447073585.007:696225): pid=29451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447073585.007:696226): pid=29451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447073585.007:696227): pid=29451 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22718 res=1
type=USER_ROLE_CHANGE msg=audit(1447073585.072:696228): pid=29451 uid=0 auid=0 ses=22718 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447073585.093:696229): pid=29451 uid=0 auid=0 ses=22718 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447073585.096:696230): pid=29451 uid=0 auid=0 ses=22718 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447073585.096:696231): pid=29451 uid=0 auid=0 ses=22718 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447073585.097:696232): pid=29454 uid=0 auid=0 ses=22718 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=29454 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447073585.097:696233): pid=29454 uid=0 auid=0 ses=22718 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=29454 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447073585.098:696234): pid=29454 uid=0 auid=0 ses=22718 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=29454 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447073585.098:696235): pid=29454 uid=0 auid=0 ses=22718 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447073585.115:696236): pid=29451 uid=0 auid=0 ses=22718 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447073585.115:696237): pid=29451 uid=0 auid=0 ses=22718 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447073585.118:696238): pid=29451 uid=0 auid=0 ses=22718 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447073585.118:696239): pid=29451 uid=0 auid=0 ses=22718 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447073585.119:696240): pid=29451 uid=0 auid=0 ses=22718 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29451 suid=0 rport=65487 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447073585.119:696241): pid=29451 uid=0 auid=0 ses=22718 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=29451 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447073585.119:696242): pid=29451 uid=0 auid=0 ses=22718 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=29451 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447073585.119:696243): pid=29451 uid=0 auid=0 ses=22718 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=29451 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447074001.200:696244): pid=30795 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447074001.200:696245): pid=30796 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447074001.200:696246): pid=30795 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447074001.200:696247): pid=30796 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447074001.201:696248): pid=30796 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22719 res=1
type=LOGIN msg=audit(1447074001.201:696249): pid=30795 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22720 res=1
type=USER_START msg=audit(1447074001.221:696250): pid=30796 uid=0 auid=0 ses=22719 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447074001.221:696251): pid=30796 uid=0 auid=0 ses=22719 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447074001.222:696252): pid=30795 uid=0 auid=0 ses=22720 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447074001.222:696253): pid=30795 uid=0 auid=0 ses=22720 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447074001.229:696254): pid=30796 uid=0 auid=0 ses=22719 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447074001.230:696255): pid=30796 uid=0 auid=0 ses=22719 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447074001.238:696256): pid=30795 uid=0 auid=0 ses=22720 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447074001.239:696257): pid=30795 uid=0 auid=0 ses=22720 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447074061.253:696258): pid=31031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447074061.253:696259): pid=31031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447074061.255:696260): pid=31031 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22721 res=1
type=USER_START msg=audit(1447074061.266:696261): pid=31031 uid=0 auid=0 ses=22721 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447074061.266:696262): pid=31031 uid=0 auid=0 ses=22721 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447074061.288:696263): pid=31031 uid=0 auid=0 ses=22721 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447074061.290:696264): pid=31031 uid=0 auid=0 ses=22721 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447074601.310:696265): pid=32699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447074601.310:696266): pid=32698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447074601.310:696267): pid=32698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447074601.310:696268): pid=32699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447074601.310:696269): pid=32699 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22722 res=1
type=LOGIN msg=audit(1447074601.310:696270): pid=32698 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22723 res=1
type=USER_START msg=audit(1447074601.325:696271): pid=32699 uid=0 auid=0 ses=22722 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447074601.325:696272): pid=32699 uid=0 auid=0 ses=22722 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447074601.325:696273): pid=32698 uid=0 auid=0 ses=22723 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447074601.325:696274): pid=32698 uid=0 auid=0 ses=22723 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447074601.332:696275): pid=32699 uid=0 auid=0 ses=22722 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447074601.335:696276): pid=32699 uid=0 auid=0 ses=22722 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447074601.340:696277): pid=32698 uid=0 auid=0 ses=22723 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447074626.367:696278): pid=32698 uid=0 auid=0 ses=22723 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=CRYPTO_KEY_USER msg=audit(1447074782.975:696279): pid=917 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=917 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447074782.976:696280): pid=917 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=917 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447074782.976:696281): pid=917 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=917 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447074783.019:696282): pid=916 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=917 suid=74 rport=34698 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447074783.019:696283): pid=916 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=917 suid=74 rport=34698 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447074783.149:696284): pid=916 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34698 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447074783.149:696285): pid=916 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=34698 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447074783.158:696286): pid=916 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447074783.160:696287): pid=916 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=917 suid=74 rport=34698 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447074783.164:696288): pid=916 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447074783.164:696289): pid=916 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447074783.165:696290): pid=916 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22724 res=1
type=USER_ROLE_CHANGE msg=audit(1447074783.233:696291): pid=916 uid=0 auid=0 ses=22724 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447074783.253:696292): pid=916 uid=0 auid=0 ses=22724 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447074783.256:696293): pid=916 uid=0 auid=0 ses=22724 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447074783.256:696294): pid=916 uid=0 auid=0 ses=22724 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447074783.258:696295): pid=919 uid=0 auid=0 ses=22724 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=919 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447074783.258:696296): pid=919 uid=0 auid=0 ses=22724 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=919 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447074783.258:696297): pid=919 uid=0 auid=0 ses=22724 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=919 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447074783.260:696298): pid=919 uid=0 auid=0 ses=22724 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447074783.287:696299): pid=916 uid=0 auid=0 ses=22724 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447074783.287:696300): pid=916 uid=0 auid=0 ses=22724 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447074783.291:696301): pid=916 uid=0 auid=0 ses=22724 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447074783.291:696302): pid=916 uid=0 auid=0 ses=22724 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447074783.292:696303): pid=916 uid=0 auid=0 ses=22724 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=916 suid=0 rport=34698 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447074783.292:696304): pid=916 uid=0 auid=0 ses=22724 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=916 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447074783.292:696305): pid=916 uid=0 auid=0 ses=22724 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=916 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447074783.292:696306): pid=916 uid=0 auid=0 ses=22724 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=916 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447074783.315:696307): pid=927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=927 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447074783.316:696308): pid=927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=927 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447074783.316:696309): pid=927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=927 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447074783.359:696310): pid=926 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=927 suid=74 rport=34699 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447074783.359:696311): pid=926 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=927 suid=74 rport=34699 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447074783.489:696312): pid=926 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34699 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447074783.490:696313): pid=926 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=34699 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447074783.499:696314): pid=926 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447074783.499:696315): pid=926 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=927 suid=74 rport=34699 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447074783.500:696316): pid=926 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447074783.501:696317): pid=926 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447074783.501:696318): pid=926 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22725 res=1
type=USER_ROLE_CHANGE msg=audit(1447074783.563:696319): pid=926 uid=0 auid=0 ses=22725 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447074783.591:696320): pid=926 uid=0 auid=0 ses=22725 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447074783.593:696321): pid=926 uid=0 auid=0 ses=22725 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447074783.593:696322): pid=926 uid=0 auid=0 ses=22725 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447074783.595:696323): pid=929 uid=0 auid=0 ses=22725 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=929 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447074783.595:696324): pid=929 uid=0 auid=0 ses=22725 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=929 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447074783.595:696325): pid=929 uid=0 auid=0 ses=22725 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=929 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447074783.596:696326): pid=929 uid=0 auid=0 ses=22725 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447074784.886:696327): pid=926 uid=0 auid=0 ses=22725 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447074784.886:696328): pid=926 uid=0 auid=0 ses=22725 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447074784.893:696329): pid=926 uid=0 auid=0 ses=22725 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447074784.894:696330): pid=926 uid=0 auid=0 ses=22725 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447074784.894:696331): pid=926 uid=0 auid=0 ses=22725 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=926 suid=0 rport=34699 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447074784.894:696332): pid=926 uid=0 auid=0 ses=22725 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=926 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447074784.894:696333): pid=926 uid=0 auid=0 ses=22725 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=926 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447074784.894:696334): pid=926 uid=0 auid=0 ses=22725 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=926 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447074784.925:696335): pid=983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=983 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447074784.925:696336): pid=983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=983 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447074784.925:696337): pid=983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=983 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447074784.969:696338): pid=982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=983 suid=74 rport=34700 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447074784.970:696339): pid=982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=983 suid=74 rport=34700 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447074785.099:696340): pid=982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34700 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447074785.099:696341): pid=982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=34700 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447074785.108:696342): pid=982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447074785.109:696343): pid=982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=983 suid=74 rport=34700 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447074785.111:696344): pid=982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447074785.111:696345): pid=982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447074785.111:696346): pid=982 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22726 res=1
type=USER_ROLE_CHANGE msg=audit(1447074785.174:696347): pid=982 uid=0 auid=0 ses=22726 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447074785.197:696348): pid=982 uid=0 auid=0 ses=22726 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447074785.200:696349): pid=982 uid=0 auid=0 ses=22726 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447074785.200:696350): pid=982 uid=0 auid=0 ses=22726 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447074785.201:696351): pid=985 uid=0 auid=0 ses=22726 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=985 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447074785.201:696352): pid=985 uid=0 auid=0 ses=22726 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=985 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447074785.201:696353): pid=985 uid=0 auid=0 ses=22726 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=985 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447074785.202:696354): pid=985 uid=0 auid=0 ses=22726 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447074785.220:696355): pid=982 uid=0 auid=0 ses=22726 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447074785.220:696356): pid=982 uid=0 auid=0 ses=22726 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447074785.224:696357): pid=982 uid=0 auid=0 ses=22726 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447074785.225:696358): pid=982 uid=0 auid=0 ses=22726 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447074785.226:696359): pid=982 uid=0 auid=0 ses=22726 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=982 suid=0 rport=34700 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447074785.226:696360): pid=982 uid=0 auid=0 ses=22726 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=982 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447074785.226:696361): pid=982 uid=0 auid=0 ses=22726 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=982 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447074785.226:696362): pid=982 uid=0 auid=0 ses=22726 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=982 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447075201.392:696363): pid=2276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447075201.392:696364): pid=2277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447075201.392:696365): pid=2276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447075201.392:696366): pid=2277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447075201.393:696367): pid=2277 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22727 res=1
type=LOGIN msg=audit(1447075201.393:696368): pid=2276 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22728 res=1
type=USER_START msg=audit(1447075201.415:696369): pid=2276 uid=0 auid=0 ses=22728 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447075201.415:696370): pid=2277 uid=0 auid=0 ses=22727 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447075201.415:696371): pid=2276 uid=0 auid=0 ses=22728 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447075201.415:696372): pid=2277 uid=0 auid=0 ses=22727 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447075201.425:696373): pid=2277 uid=0 auid=0 ses=22727 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447075201.427:696374): pid=2277 uid=0 auid=0 ses=22727 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447075201.433:696375): pid=2276 uid=0 auid=0 ses=22728 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447075226.461:696376): pid=2276 uid=0 auid=0 ses=22728 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=SYSCALL msg=audit(1447075250.759:696377): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447075801.482:696378): pid=4120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447075801.482:696379): pid=4121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447075801.482:696380): pid=4120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447075801.482:696381): pid=4121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447075801.482:696382): pid=4121 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22729 res=1
type=LOGIN msg=audit(1447075801.482:696383): pid=4120 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22730 res=1
type=USER_START msg=audit(1447075801.496:696384): pid=4121 uid=0 auid=0 ses=22729 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447075801.497:696385): pid=4121 uid=0 auid=0 ses=22729 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447075801.497:696386): pid=4120 uid=0 auid=0 ses=22730 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447075801.497:696387): pid=4120 uid=0 auid=0 ses=22730 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447075801.505:696388): pid=4121 uid=0 auid=0 ses=22729 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447075801.509:696389): pid=4120 uid=0 auid=0 ses=22730 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447075801.510:696390): pid=4121 uid=0 auid=0 ses=22729 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447075801.511:696391): pid=4120 uid=0 auid=0 ses=22730 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447075983.225:696392): pid=4689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=4689 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447075983.226:696393): pid=4689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=4689 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447075983.226:696394): pid=4689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=4689 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447075983.269:696395): pid=4688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=4689 suid=74 rport=36678 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447075983.269:696396): pid=4688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=4689 suid=74 rport=36678 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447075983.397:696397): pid=4688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=36678 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447075983.397:696398): pid=4688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=36678 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447075983.407:696399): pid=4688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447075983.408:696400): pid=4688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4689 suid=74 rport=36678 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447075983.411:696401): pid=4688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447075983.411:696402): pid=4688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447075983.411:696403): pid=4688 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22731 res=1
type=USER_ROLE_CHANGE msg=audit(1447075983.486:696404): pid=4688 uid=0 auid=0 ses=22731 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447075983.504:696405): pid=4688 uid=0 auid=0 ses=22731 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447075983.507:696406): pid=4688 uid=0 auid=0 ses=22731 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447075983.507:696407): pid=4688 uid=0 auid=0 ses=22731 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447075983.508:696408): pid=4691 uid=0 auid=0 ses=22731 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=4691 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447075983.508:696409): pid=4691 uid=0 auid=0 ses=22731 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=4691 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447075983.508:696410): pid=4691 uid=0 auid=0 ses=22731 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=4691 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447075983.509:696411): pid=4691 uid=0 auid=0 ses=22731 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447075983.527:696412): pid=4688 uid=0 auid=0 ses=22731 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447075983.527:696413): pid=4688 uid=0 auid=0 ses=22731 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447075983.530:696414): pid=4688 uid=0 auid=0 ses=22731 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447075983.530:696415): pid=4688 uid=0 auid=0 ses=22731 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447075983.531:696416): pid=4688 uid=0 auid=0 ses=22731 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4688 suid=0 rport=36678 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447075983.531:696417): pid=4688 uid=0 auid=0 ses=22731 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=4688 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447075983.531:696418): pid=4688 uid=0 auid=0 ses=22731 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=4688 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447075983.531:696419): pid=4688 uid=0 auid=0 ses=22731 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=4688 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447075983.555:696420): pid=4699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=4699 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447075983.555:696421): pid=4699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=4699 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447075983.555:696422): pid=4699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=4699 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447075983.599:696423): pid=4698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=4699 suid=74 rport=36680 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447075983.599:696424): pid=4698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=4699 suid=74 rport=36680 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447075983.727:696425): pid=4698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=36680 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447075983.727:696426): pid=4698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=36680 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447075983.736:696427): pid=4698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447075983.737:696428): pid=4698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4699 suid=74 rport=36680 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447075983.740:696429): pid=4698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447075983.741:696430): pid=4698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447075983.741:696431): pid=4698 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22732 res=1
type=USER_ROLE_CHANGE msg=audit(1447075983.808:696432): pid=4698 uid=0 auid=0 ses=22732 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447075983.835:696433): pid=4698 uid=0 auid=0 ses=22732 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447075983.837:696434): pid=4698 uid=0 auid=0 ses=22732 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447075983.837:696435): pid=4698 uid=0 auid=0 ses=22732 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447075983.839:696436): pid=4701 uid=0 auid=0 ses=22732 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=4701 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447075983.839:696437): pid=4701 uid=0 auid=0 ses=22732 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=4701 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447075983.839:696438): pid=4701 uid=0 auid=0 ses=22732 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=4701 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447075983.840:696439): pid=4701 uid=0 auid=0 ses=22732 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447075985.123:696440): pid=4698 uid=0 auid=0 ses=22732 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447075985.123:696441): pid=4698 uid=0 auid=0 ses=22732 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447075985.129:696442): pid=4698 uid=0 auid=0 ses=22732 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447075985.129:696443): pid=4698 uid=0 auid=0 ses=22732 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447075985.130:696444): pid=4698 uid=0 auid=0 ses=22732 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4698 suid=0 rport=36680 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447075985.130:696445): pid=4698 uid=0 auid=0 ses=22732 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=4698 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447075985.130:696446): pid=4698 uid=0 auid=0 ses=22732 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=4698 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447075985.130:696447): pid=4698 uid=0 auid=0 ses=22732 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=4698 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447075985.158:696448): pid=4751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=4751 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447075985.158:696449): pid=4751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=4751 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447075985.158:696450): pid=4751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=4751 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447075985.203:696451): pid=4750 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=4751 suid=74 rport=36681 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447075985.204:696452): pid=4750 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=4751 suid=74 rport=36681 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447075985.333:696453): pid=4750 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=36681 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447075985.333:696454): pid=4750 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=36681 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447075985.342:696455): pid=4750 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447075985.343:696456): pid=4750 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4751 suid=74 rport=36681 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447075985.344:696457): pid=4750 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447075985.345:696458): pid=4750 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447075985.345:696459): pid=4750 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22733 res=1
type=USER_ROLE_CHANGE msg=audit(1447075985.411:696460): pid=4750 uid=0 auid=0 ses=22733 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447075985.436:696461): pid=4750 uid=0 auid=0 ses=22733 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447075985.439:696462): pid=4750 uid=0 auid=0 ses=22733 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447075985.439:696463): pid=4750 uid=0 auid=0 ses=22733 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447075985.440:696464): pid=4753 uid=0 auid=0 ses=22733 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=4753 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447075985.440:696465): pid=4753 uid=0 auid=0 ses=22733 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=4753 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447075985.440:696466): pid=4753 uid=0 auid=0 ses=22733 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=4753 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447075985.441:696467): pid=4753 uid=0 auid=0 ses=22733 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447075985.456:696468): pid=4750 uid=0 auid=0 ses=22733 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447075985.457:696469): pid=4750 uid=0 auid=0 ses=22733 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447075985.461:696470): pid=4750 uid=0 auid=0 ses=22733 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447075985.461:696471): pid=4750 uid=0 auid=0 ses=22733 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447075985.462:696472): pid=4750 uid=0 auid=0 ses=22733 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4750 suid=0 rport=36681 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447075985.462:696473): pid=4750 uid=0 auid=0 ses=22733 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=4750 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447075985.462:696474): pid=4750 uid=0 auid=0 ses=22733 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=4750 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447075985.462:696475): pid=4750 uid=0 auid=0 ses=22733 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=4750 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=SYSCALL msg=audit(1447076308.757:696476): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447076401.533:696477): pid=6037 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447076401.533:696478): pid=6038 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447076401.533:696479): pid=6038 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447076401.533:696480): pid=6037 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447076401.534:696481): pid=6037 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22734 res=1
type=LOGIN msg=audit(1447076401.534:696482): pid=6038 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22735 res=1
type=USER_START msg=audit(1447076401.557:696483): pid=6037 uid=0 auid=0 ses=22734 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447076401.557:696484): pid=6038 uid=0 auid=0 ses=22735 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447076401.557:696485): pid=6038 uid=0 auid=0 ses=22735 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447076401.557:696486): pid=6037 uid=0 auid=0 ses=22734 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447076401.568:696487): pid=6038 uid=0 auid=0 ses=22735 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447076401.573:696488): pid=6038 uid=0 auid=0 ses=22735 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447076401.573:696489): pid=6037 uid=0 auid=0 ses=22734 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447076426.604:696490): pid=6037 uid=0 auid=0 ses=22734 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=USER_ACCT msg=audit(1447077001.624:696491): pid=7884 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447077001.624:696492): pid=7884 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447077001.624:696493): pid=7884 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22736 res=1
type=USER_ACCT msg=audit(1447077001.625:696494): pid=7883 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447077001.625:696495): pid=7883 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447077001.626:696496): pid=7883 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22737 res=1
type=USER_START msg=audit(1447077001.639:696497): pid=7884 uid=0 auid=0 ses=22736 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447077001.639:696498): pid=7883 uid=0 auid=0 ses=22737 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447077001.639:696499): pid=7884 uid=0 auid=0 ses=22736 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447077001.639:696500): pid=7883 uid=0 auid=0 ses=22737 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447077001.645:696501): pid=7884 uid=0 auid=0 ses=22736 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447077001.651:696502): pid=7884 uid=0 auid=0 ses=22736 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447077001.651:696503): pid=7883 uid=0 auid=0 ses=22737 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447077001.655:696504): pid=7883 uid=0 auid=0 ses=22737 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447077182.653:696505): pid=8453 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=8453 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447077182.653:696506): pid=8453 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=8453 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447077182.654:696507): pid=8453 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=8453 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447077182.697:696508): pid=8452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=8453 suid=74 rport=38655 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447077182.697:696509): pid=8452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=8453 suid=74 rport=38655 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447077182.823:696510): pid=8452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38655 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447077182.823:696511): pid=8452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=38655 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447077182.831:696512): pid=8452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447077182.833:696513): pid=8452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8453 suid=74 rport=38655 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447077182.834:696514): pid=8452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447077182.834:696515): pid=8452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447077182.835:696516): pid=8452 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22738 res=1
type=USER_ROLE_CHANGE msg=audit(1447077182.904:696517): pid=8452 uid=0 auid=0 ses=22738 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447077182.929:696518): pid=8452 uid=0 auid=0 ses=22738 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447077182.933:696519): pid=8452 uid=0 auid=0 ses=22738 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447077182.933:696520): pid=8452 uid=0 auid=0 ses=22738 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447077182.934:696521): pid=8455 uid=0 auid=0 ses=22738 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=8455 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447077182.934:696522): pid=8455 uid=0 auid=0 ses=22738 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=8455 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447077182.934:696523): pid=8455 uid=0 auid=0 ses=22738 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=8455 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447077182.935:696524): pid=8455 uid=0 auid=0 ses=22738 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447077182.957:696525): pid=8452 uid=0 auid=0 ses=22738 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447077182.957:696526): pid=8452 uid=0 auid=0 ses=22738 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447077182.963:696527): pid=8452 uid=0 auid=0 ses=22738 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447077182.963:696528): pid=8452 uid=0 auid=0 ses=22738 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447077182.964:696529): pid=8452 uid=0 auid=0 ses=22738 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8452 suid=0 rport=38655 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447077182.964:696530): pid=8452 uid=0 auid=0 ses=22738 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=8452 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447077182.964:696531): pid=8452 uid=0 auid=0 ses=22738 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=8452 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447077182.964:696532): pid=8452 uid=0 auid=0 ses=22738 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=8452 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447077182.982:696533): pid=8463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=8463 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447077182.983:696534): pid=8463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=8463 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447077182.983:696535): pid=8463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=8463 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447077183.028:696536): pid=8462 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=8463 suid=74 rport=38656 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447077183.028:696537): pid=8462 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=8463 suid=74 rport=38656 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447077183.157:696538): pid=8462 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38656 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447077183.158:696539): pid=8462 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=38656 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447077183.166:696540): pid=8462 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447077183.167:696541): pid=8462 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8463 suid=74 rport=38656 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447077183.169:696542): pid=8462 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447077183.169:696543): pid=8462 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447077183.169:696544): pid=8462 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22739 res=1
type=USER_ROLE_CHANGE msg=audit(1447077183.235:696545): pid=8462 uid=0 auid=0 ses=22739 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447077183.253:696546): pid=8462 uid=0 auid=0 ses=22739 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447077183.255:696547): pid=8462 uid=0 auid=0 ses=22739 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447077183.255:696548): pid=8462 uid=0 auid=0 ses=22739 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447077183.257:696549): pid=8465 uid=0 auid=0 ses=22739 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=8465 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447077183.257:696550): pid=8465 uid=0 auid=0 ses=22739 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=8465 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447077183.257:696551): pid=8465 uid=0 auid=0 ses=22739 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=8465 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447077183.258:696552): pid=8465 uid=0 auid=0 ses=22739 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447077184.537:696553): pid=8462 uid=0 auid=0 ses=22739 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447077184.537:696554): pid=8462 uid=0 auid=0 ses=22739 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447077184.541:696555): pid=8462 uid=0 auid=0 ses=22739 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447077184.541:696556): pid=8462 uid=0 auid=0 ses=22739 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447077184.542:696557): pid=8462 uid=0 auid=0 ses=22739 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8462 suid=0 rport=38656 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447077184.542:696558): pid=8462 uid=0 auid=0 ses=22739 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=8462 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447077184.542:696559): pid=8462 uid=0 auid=0 ses=22739 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=8462 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447077184.542:696560): pid=8462 uid=0 auid=0 ses=22739 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=8462 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447077184.577:696561): pid=8515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=8515 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447077184.578:696562): pid=8515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=8515 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447077184.578:696563): pid=8515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=8515 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447077184.623:696564): pid=8514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=8515 suid=74 rport=38661 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447077184.623:696565): pid=8514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=8515 suid=74 rport=38661 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447077184.751:696566): pid=8514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38661 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447077184.751:696567): pid=8514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=38661 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447077184.760:696568): pid=8514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447077184.761:696569): pid=8514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8515 suid=74 rport=38661 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447077184.763:696570): pid=8514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447077184.763:696571): pid=8514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447077184.763:696572): pid=8514 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22740 res=1
type=USER_ROLE_CHANGE msg=audit(1447077184.826:696573): pid=8514 uid=0 auid=0 ses=22740 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447077184.848:696574): pid=8514 uid=0 auid=0 ses=22740 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447077184.851:696575): pid=8514 uid=0 auid=0 ses=22740 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447077184.851:696576): pid=8514 uid=0 auid=0 ses=22740 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447077184.853:696577): pid=8517 uid=0 auid=0 ses=22740 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=8517 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447077184.853:696578): pid=8517 uid=0 auid=0 ses=22740 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=8517 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447077184.853:696579): pid=8517 uid=0 auid=0 ses=22740 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=8517 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447077184.854:696580): pid=8517 uid=0 auid=0 ses=22740 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447077184.870:696581): pid=8514 uid=0 auid=0 ses=22740 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447077184.870:696582): pid=8514 uid=0 auid=0 ses=22740 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447077184.873:696583): pid=8514 uid=0 auid=0 ses=22740 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447077184.873:696584): pid=8514 uid=0 auid=0 ses=22740 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447077184.874:696585): pid=8514 uid=0 auid=0 ses=22740 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8514 suid=0 rport=38661 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447077184.874:696586): pid=8514 uid=0 auid=0 ses=22740 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=8514 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447077184.874:696587): pid=8514 uid=0 auid=0 ses=22740 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=8514 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447077184.874:696588): pid=8514 uid=0 auid=0 ses=22740 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=8514 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447077601.675:696589): pid=9804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447077601.675:696590): pid=9804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447077601.675:696591): pid=9805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447077601.675:696592): pid=9805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447077601.676:696593): pid=9805 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22741 res=1
type=LOGIN msg=audit(1447077601.676:696594): pid=9804 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22742 res=1
type=USER_START msg=audit(1447077601.696:696595): pid=9805 uid=0 auid=0 ses=22741 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447077601.696:696596): pid=9804 uid=0 auid=0 ses=22742 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447077601.696:696597): pid=9805 uid=0 auid=0 ses=22741 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447077601.697:696598): pid=9804 uid=0 auid=0 ses=22742 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447077601.706:696599): pid=9805 uid=0 auid=0 ses=22741 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447077601.707:696600): pid=9805 uid=0 auid=0 ses=22741 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447077601.719:696601): pid=9804 uid=0 auid=0 ses=22742 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447077601.721:696602): pid=9804 uid=0 auid=0 ses=22742 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447077661.729:696603): pid=10042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447077661.729:696604): pid=10042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447077661.730:696605): pid=10042 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22743 res=1
type=USER_START msg=audit(1447077661.739:696606): pid=10042 uid=0 auid=0 ses=22743 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447077661.739:696607): pid=10042 uid=0 auid=0 ses=22743 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447077661.769:696608): pid=10042 uid=0 auid=0 ses=22743 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447077661.772:696609): pid=10042 uid=0 auid=0 ses=22743 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447078201.781:696610): pid=11711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447078201.782:696611): pid=11711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447078201.782:696612): pid=11711 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22744 res=1
type=USER_ACCT msg=audit(1447078201.782:696613): pid=11712 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447078201.782:696614): pid=11712 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447078201.783:696615): pid=11712 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22745 res=1
type=USER_START msg=audit(1447078201.797:696616): pid=11712 uid=0 auid=0 ses=22745 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447078201.797:696617): pid=11711 uid=0 auid=0 ses=22744 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447078201.798:696618): pid=11712 uid=0 auid=0 ses=22745 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447078201.798:696619): pid=11711 uid=0 auid=0 ses=22744 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447078201.805:696620): pid=11712 uid=0 auid=0 ses=22745 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447078201.807:696621): pid=11712 uid=0 auid=0 ses=22745 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447078201.812:696622): pid=11711 uid=0 auid=0 ses=22744 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447078201.814:696623): pid=11711 uid=0 auid=0 ses=22744 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447078383.130:696624): pid=12281 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12281 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447078383.130:696625): pid=12281 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12281 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447078383.130:696626): pid=12281 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12281 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447078383.173:696627): pid=12280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=12281 suid=74 rport=40637 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447078383.173:696628): pid=12280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=12281 suid=74 rport=40637 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447078383.303:696629): pid=12280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=40637 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447078383.303:696630): pid=12280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=40637 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447078383.310:696631): pid=12280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447078383.312:696632): pid=12280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12281 suid=74 rport=40637 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447078383.314:696633): pid=12280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447078383.316:696634): pid=12280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447078383.317:696635): pid=12280 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22746 res=1
type=USER_ROLE_CHANGE msg=audit(1447078383.385:696636): pid=12280 uid=0 auid=0 ses=22746 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447078383.407:696637): pid=12280 uid=0 auid=0 ses=22746 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447078383.410:696638): pid=12280 uid=0 auid=0 ses=22746 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447078383.410:696639): pid=12280 uid=0 auid=0 ses=22746 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447078383.412:696640): pid=12283 uid=0 auid=0 ses=22746 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12283 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447078383.412:696641): pid=12283 uid=0 auid=0 ses=22746 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12283 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447078383.412:696642): pid=12283 uid=0 auid=0 ses=22746 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12283 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447078383.413:696643): pid=12283 uid=0 auid=0 ses=22746 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447078383.432:696644): pid=12280 uid=0 auid=0 ses=22746 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447078383.432:696645): pid=12280 uid=0 auid=0 ses=22746 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447078383.437:696646): pid=12280 uid=0 auid=0 ses=22746 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447078383.437:696647): pid=12280 uid=0 auid=0 ses=22746 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447078383.438:696648): pid=12280 uid=0 auid=0 ses=22746 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12280 suid=0 rport=40637 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447078383.438:696649): pid=12280 uid=0 auid=0 ses=22746 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12280 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447078383.439:696650): pid=12280 uid=0 auid=0 ses=22746 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12280 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447078383.439:696651): pid=12280 uid=0 auid=0 ses=22746 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12280 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447078383.457:696652): pid=12291 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12291 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447078383.458:696653): pid=12291 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12291 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447078383.458:696654): pid=12291 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12291 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447078383.502:696655): pid=12290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=12291 suid=74 rport=40638 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447078383.502:696656): pid=12290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=12291 suid=74 rport=40638 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447078383.630:696657): pid=12290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=40638 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447078383.630:696658): pid=12290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=40638 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447078383.635:696659): pid=12290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447078383.635:696660): pid=12290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12291 suid=74 rport=40638 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447078383.636:696661): pid=12290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447078383.637:696662): pid=12290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447078383.637:696663): pid=12290 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22747 res=1
type=USER_ROLE_CHANGE msg=audit(1447078383.702:696664): pid=12290 uid=0 auid=0 ses=22747 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447078383.721:696665): pid=12290 uid=0 auid=0 ses=22747 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447078383.724:696666): pid=12290 uid=0 auid=0 ses=22747 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447078383.724:696667): pid=12290 uid=0 auid=0 ses=22747 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447078383.726:696668): pid=12293 uid=0 auid=0 ses=22747 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12293 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447078383.726:696669): pid=12293 uid=0 auid=0 ses=22747 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12293 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447078383.726:696670): pid=12293 uid=0 auid=0 ses=22747 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12293 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447078383.727:696671): pid=12293 uid=0 auid=0 ses=22747 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447078385.014:696672): pid=12290 uid=0 auid=0 ses=22747 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447078385.014:696673): pid=12290 uid=0 auid=0 ses=22747 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447078385.018:696674): pid=12290 uid=0 auid=0 ses=22747 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447078385.019:696675): pid=12290 uid=0 auid=0 ses=22747 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447078385.019:696676): pid=12290 uid=0 auid=0 ses=22747 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12290 suid=0 rport=40638 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447078385.019:696677): pid=12290 uid=0 auid=0 ses=22747 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12290 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447078385.019:696678): pid=12290 uid=0 auid=0 ses=22747 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12290 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447078385.019:696679): pid=12290 uid=0 auid=0 ses=22747 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12290 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447078385.052:696680): pid=12343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12343 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447078385.052:696681): pid=12343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12343 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447078385.052:696682): pid=12343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12343 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447078385.096:696683): pid=12342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=12343 suid=74 rport=40643 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447078385.097:696684): pid=12342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=12343 suid=74 rport=40643 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447078385.217:696685): pid=12342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=40643 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447078385.217:696686): pid=12342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=40643 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447078385.221:696687): pid=12342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447078385.222:696688): pid=12342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12343 suid=74 rport=40643 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447078385.224:696689): pid=12342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447078385.224:696690): pid=12342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447078385.224:696691): pid=12342 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22748 res=1
type=USER_ROLE_CHANGE msg=audit(1447078385.293:696692): pid=12342 uid=0 auid=0 ses=22748 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447078385.313:696693): pid=12342 uid=0 auid=0 ses=22748 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447078385.316:696694): pid=12342 uid=0 auid=0 ses=22748 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447078385.316:696695): pid=12342 uid=0 auid=0 ses=22748 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447078385.318:696696): pid=12345 uid=0 auid=0 ses=22748 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12345 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447078385.318:696697): pid=12345 uid=0 auid=0 ses=22748 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12345 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447078385.318:696698): pid=12345 uid=0 auid=0 ses=22748 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12345 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447078385.319:696699): pid=12345 uid=0 auid=0 ses=22748 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447078385.336:696700): pid=12342 uid=0 auid=0 ses=22748 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447078385.336:696701): pid=12342 uid=0 auid=0 ses=22748 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447078385.339:696702): pid=12342 uid=0 auid=0 ses=22748 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447078385.340:696703): pid=12342 uid=0 auid=0 ses=22748 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447078385.340:696704): pid=12342 uid=0 auid=0 ses=22748 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12342 suid=0 rport=40643 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447078385.340:696705): pid=12342 uid=0 auid=0 ses=22748 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12342 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447078385.340:696706): pid=12342 uid=0 auid=0 ses=22748 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12342 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447078385.340:696707): pid=12342 uid=0 auid=0 ses=22748 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12342 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=SYSCALL msg=audit(1447078442.675:696708): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447078801.837:696710): pid=13634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447078801.837:696709): pid=13635 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447078801.837:696711): pid=13634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447078801.837:696712): pid=13635 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447078801.838:696713): pid=13635 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22749 res=1
type=LOGIN msg=audit(1447078801.838:696714): pid=13634 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22750 res=1
type=USER_START msg=audit(1447078801.855:696715): pid=13634 uid=0 auid=0 ses=22750 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447078801.855:696716): pid=13635 uid=0 auid=0 ses=22749 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447078801.856:696717): pid=13634 uid=0 auid=0 ses=22750 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447078801.856:696718): pid=13635 uid=0 auid=0 ses=22749 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447078801.863:696719): pid=13635 uid=0 auid=0 ses=22749 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447078801.864:696720): pid=13635 uid=0 auid=0 ses=22749 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447078801.874:696721): pid=13634 uid=0 auid=0 ses=22750 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447078801.875:696722): pid=13634 uid=0 auid=0 ses=22750 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447079401.887:696723): pid=15479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447079401.887:696724): pid=15479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447079401.887:696725): pid=15479 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22751 res=1
type=USER_ACCT msg=audit(1447079401.888:696726): pid=15478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447079401.888:696727): pid=15478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447079401.888:696728): pid=15478 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22752 res=1
type=USER_START msg=audit(1447079401.906:696729): pid=15479 uid=0 auid=0 ses=22751 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447079401.906:696730): pid=15479 uid=0 auid=0 ses=22751 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447079401.907:696731): pid=15478 uid=0 auid=0 ses=22752 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447079401.907:696732): pid=15478 uid=0 auid=0 ses=22752 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447079401.914:696733): pid=15479 uid=0 auid=0 ses=22751 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447079401.916:696734): pid=15479 uid=0 auid=0 ses=22751 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447079401.923:696735): pid=15478 uid=0 auid=0 ses=22752 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447079401.924:696736): pid=15478 uid=0 auid=0 ses=22752 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1447079472.759:696737): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=CRYPTO_KEY_USER msg=audit(1447079582.698:696738): pid=16045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16045 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447079582.698:696739): pid=16045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16045 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447079582.698:696740): pid=16045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16045 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447079582.742:696741): pid=16044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=16045 suid=74 rport=42617 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447079582.742:696742): pid=16044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=16045 suid=74 rport=42617 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447079582.869:696743): pid=16044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42617 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447079582.869:696744): pid=16044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=42617 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447079582.876:696745): pid=16044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447079582.879:696746): pid=16044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16045 suid=74 rport=42617 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447079582.881:696747): pid=16044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447079582.881:696748): pid=16044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447079582.882:696749): pid=16044 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22753 res=1
type=USER_ROLE_CHANGE msg=audit(1447079582.953:696750): pid=16044 uid=0 auid=0 ses=22753 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447079582.975:696751): pid=16044 uid=0 auid=0 ses=22753 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447079582.977:696752): pid=16044 uid=0 auid=0 ses=22753 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447079582.977:696753): pid=16044 uid=0 auid=0 ses=22753 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447079582.979:696754): pid=16047 uid=0 auid=0 ses=22753 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16047 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447079582.979:696755): pid=16047 uid=0 auid=0 ses=22753 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16047 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447079582.979:696756): pid=16047 uid=0 auid=0 ses=22753 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16047 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447079582.979:696757): pid=16047 uid=0 auid=0 ses=22753 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447079582.999:696758): pid=16044 uid=0 auid=0 ses=22753 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447079582.999:696759): pid=16044 uid=0 auid=0 ses=22753 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447079583.004:696760): pid=16044 uid=0 auid=0 ses=22753 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447079583.004:696761): pid=16044 uid=0 auid=0 ses=22753 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447079583.005:696762): pid=16044 uid=0 auid=0 ses=22753 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16044 suid=0 rport=42617 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447079583.005:696763): pid=16044 uid=0 auid=0 ses=22753 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16044 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447079583.005:696764): pid=16044 uid=0 auid=0 ses=22753 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16044 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447079583.005:696765): pid=16044 uid=0 auid=0 ses=22753 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16044 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447079583.026:696766): pid=16055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16055 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447079583.026:696767): pid=16055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16055 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447079583.026:696768): pid=16055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16055 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447079583.072:696769): pid=16054 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=16055 suid=74 rport=42619 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447079583.072:696770): pid=16054 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=16055 suid=74 rport=42619 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447079583.195:696771): pid=16054 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42619 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447079583.195:696772): pid=16054 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=42619 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447079583.203:696773): pid=16054 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447079583.204:696774): pid=16054 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16055 suid=74 rport=42619 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447079583.204:696775): pid=16054 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447079583.205:696776): pid=16054 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447079583.205:696777): pid=16054 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22754 res=1
type=USER_ROLE_CHANGE msg=audit(1447079583.268:696778): pid=16054 uid=0 auid=0 ses=22754 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447079583.290:696779): pid=16054 uid=0 auid=0 ses=22754 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447079583.292:696780): pid=16054 uid=0 auid=0 ses=22754 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447079583.292:696781): pid=16054 uid=0 auid=0 ses=22754 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447079583.294:696782): pid=16057 uid=0 auid=0 ses=22754 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16057 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447079583.294:696783): pid=16057 uid=0 auid=0 ses=22754 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16057 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447079583.294:696784): pid=16057 uid=0 auid=0 ses=22754 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16057 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447079583.295:696785): pid=16057 uid=0 auid=0 ses=22754 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447079584.556:696786): pid=16054 uid=0 auid=0 ses=22754 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447079584.556:696787): pid=16054 uid=0 auid=0 ses=22754 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447079584.562:696788): pid=16054 uid=0 auid=0 ses=22754 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447079584.562:696789): pid=16054 uid=0 auid=0 ses=22754 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447079584.562:696790): pid=16054 uid=0 auid=0 ses=22754 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16054 suid=0 rport=42619 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447079584.562:696791): pid=16054 uid=0 auid=0 ses=22754 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16054 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447079584.562:696792): pid=16054 uid=0 auid=0 ses=22754 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16054 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447079584.562:696793): pid=16054 uid=0 auid=0 ses=22754 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16054 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447079584.596:696794): pid=16107 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16107 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447079584.596:696795): pid=16107 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16107 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447079584.596:696796): pid=16107 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16107 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447079584.641:696797): pid=16106 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=16107 suid=74 rport=42623 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447079584.642:696798): pid=16106 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=16107 suid=74 rport=42623 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447079584.771:696799): pid=16106 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42623 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447079584.772:696800): pid=16106 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=42623 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447079584.780:696801): pid=16106 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447079584.781:696802): pid=16106 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16107 suid=74 rport=42623 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447079584.782:696803): pid=16106 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447079584.782:696804): pid=16106 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447079584.782:696805): pid=16106 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22755 res=1
type=USER_ROLE_CHANGE msg=audit(1447079584.845:696806): pid=16106 uid=0 auid=0 ses=22755 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447079584.869:696807): pid=16106 uid=0 auid=0 ses=22755 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447079584.872:696808): pid=16106 uid=0 auid=0 ses=22755 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447079584.872:696809): pid=16106 uid=0 auid=0 ses=22755 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447079584.873:696810): pid=16109 uid=0 auid=0 ses=22755 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16109 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447079584.873:696811): pid=16109 uid=0 auid=0 ses=22755 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16109 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447079584.873:696812): pid=16109 uid=0 auid=0 ses=22755 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16109 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447079584.874:696813): pid=16109 uid=0 auid=0 ses=22755 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447079584.891:696814): pid=16106 uid=0 auid=0 ses=22755 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447079584.891:696815): pid=16106 uid=0 auid=0 ses=22755 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447079584.894:696816): pid=16106 uid=0 auid=0 ses=22755 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447079584.894:696817): pid=16106 uid=0 auid=0 ses=22755 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447079584.895:696818): pid=16106 uid=0 auid=0 ses=22755 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16106 suid=0 rport=42623 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447079584.895:696819): pid=16106 uid=0 auid=0 ses=22755 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16106 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447079584.895:696820): pid=16106 uid=0 auid=0 ses=22755 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16106 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447079584.895:696821): pid=16106 uid=0 auid=0 ses=22755 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16106 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447080001.947:696822): pid=17397 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447080001.947:696823): pid=17396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447080001.947:696824): pid=17396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447080001.947:696825): pid=17397 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447080001.948:696826): pid=17397 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22756 res=1
type=LOGIN msg=audit(1447080001.948:696827): pid=17396 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22757 res=1
type=USER_START msg=audit(1447080001.965:696828): pid=17397 uid=0 auid=0 ses=22756 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447080001.965:696829): pid=17397 uid=0 auid=0 ses=22756 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447080001.965:696830): pid=17396 uid=0 auid=0 ses=22757 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447080001.965:696831): pid=17396 uid=0 auid=0 ses=22757 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447080001.975:696832): pid=17397 uid=0 auid=0 ses=22756 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447080001.981:696833): pid=17396 uid=0 auid=0 ses=22757 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447080001.981:696834): pid=17397 uid=0 auid=0 ses=22756 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447080001.985:696835): pid=17396 uid=0 auid=0 ses=22757 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447080602.001:696836): pid=19221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447080602.001:696837): pid=19221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447080602.001:696838): pid=19221 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22758 res=1
type=USER_ACCT msg=audit(1447080602.006:696839): pid=19220 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447080602.006:696840): pid=19220 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447080602.006:696841): pid=19220 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22759 res=1
type=USER_START msg=audit(1447080602.020:696842): pid=19220 uid=0 auid=0 ses=22759 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447080602.020:696843): pid=19221 uid=0 auid=0 ses=22758 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447080602.020:696844): pid=19221 uid=0 auid=0 ses=22758 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447080602.020:696845): pid=19220 uid=0 auid=0 ses=22759 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447080602.029:696846): pid=19221 uid=0 auid=0 ses=22758 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447080602.030:696847): pid=19221 uid=0 auid=0 ses=22758 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447080602.033:696848): pid=19220 uid=0 auid=0 ses=22759 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447080602.036:696849): pid=19220 uid=0 auid=0 ses=22759 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447080783.384:696850): pid=19796 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=19796 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447080783.385:696851): pid=19796 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=19796 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447080783.385:696852): pid=19796 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=19796 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447080783.428:696853): pid=19795 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=19796 suid=74 rport=44598 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447080783.429:696854): pid=19795 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=19796 suid=74 rport=44598 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447080783.556:696855): pid=19795 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=44598 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447080783.556:696856): pid=19795 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=44598 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447080783.561:696857): pid=19795 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447080783.562:696858): pid=19795 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19796 suid=74 rport=44598 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447080783.562:696859): pid=19795 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447080783.563:696860): pid=19795 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447080783.563:696861): pid=19795 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22760 res=1
type=USER_ROLE_CHANGE msg=audit(1447080783.630:696862): pid=19795 uid=0 auid=0 ses=22760 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447080783.649:696863): pid=19795 uid=0 auid=0 ses=22760 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447080783.651:696864): pid=19795 uid=0 auid=0 ses=22760 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447080783.652:696865): pid=19795 uid=0 auid=0 ses=22760 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447080783.653:696866): pid=19808 uid=0 auid=0 ses=22760 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=19808 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447080783.653:696867): pid=19808 uid=0 auid=0 ses=22760 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=19808 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447080783.653:696868): pid=19808 uid=0 auid=0 ses=22760 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=19808 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447080783.654:696869): pid=19808 uid=0 auid=0 ses=22760 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447080783.671:696870): pid=19795 uid=0 auid=0 ses=22760 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447080783.671:696871): pid=19795 uid=0 auid=0 ses=22760 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447080783.674:696872): pid=19795 uid=0 auid=0 ses=22760 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447080783.674:696873): pid=19795 uid=0 auid=0 ses=22760 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447080783.674:696874): pid=19795 uid=0 auid=0 ses=22760 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19795 suid=0 rport=44598 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447080783.674:696875): pid=19795 uid=0 auid=0 ses=22760 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=19795 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447080783.675:696876): pid=19795 uid=0 auid=0 ses=22760 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=19795 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447080783.675:696877): pid=19795 uid=0 auid=0 ses=22760 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=19795 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447080783.699:696878): pid=19816 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=19816 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447080783.699:696879): pid=19816 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=19816 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447080783.700:696880): pid=19816 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=19816 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447080783.743:696881): pid=19815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=19816 suid=74 rport=44600 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447080783.744:696882): pid=19815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=19816 suid=74 rport=44600 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447080783.873:696883): pid=19815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=44600 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447080783.873:696884): pid=19815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=44600 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447080783.882:696885): pid=19815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447080783.883:696886): pid=19815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19816 suid=74 rport=44600 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447080783.885:696887): pid=19815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447080783.885:696888): pid=19815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447080783.886:696889): pid=19815 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22761 res=1
type=USER_ROLE_CHANGE msg=audit(1447080783.951:696890): pid=19815 uid=0 auid=0 ses=22761 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447080783.972:696891): pid=19815 uid=0 auid=0 ses=22761 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447080783.974:696892): pid=19815 uid=0 auid=0 ses=22761 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447080783.974:696893): pid=19815 uid=0 auid=0 ses=22761 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447080783.975:696894): pid=19818 uid=0 auid=0 ses=22761 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=19818 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447080783.976:696895): pid=19818 uid=0 auid=0 ses=22761 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=19818 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447080783.976:696896): pid=19818 uid=0 auid=0 ses=22761 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=19818 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447080783.976:696897): pid=19818 uid=0 auid=0 ses=22761 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447080785.254:696898): pid=19815 uid=0 auid=0 ses=22761 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447080785.255:696899): pid=19815 uid=0 auid=0 ses=22761 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447080785.258:696900): pid=19815 uid=0 auid=0 ses=22761 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447080785.258:696901): pid=19815 uid=0 auid=0 ses=22761 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447080785.259:696902): pid=19815 uid=0 auid=0 ses=22761 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19815 suid=0 rport=44600 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447080785.259:696903): pid=19815 uid=0 auid=0 ses=22761 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=19815 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447080785.259:696904): pid=19815 uid=0 auid=0 ses=22761 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=19815 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447080785.259:696905): pid=19815 uid=0 auid=0 ses=22761 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=19815 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447080785.299:696906): pid=19868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=19868 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447080785.299:696907): pid=19868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=19868 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447080785.299:696908): pid=19868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=19868 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447080785.344:696909): pid=19867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=19868 suid=74 rport=44603 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447080785.345:696910): pid=19867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=19868 suid=74 rport=44603 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447080785.475:696911): pid=19867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=44603 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447080785.475:696912): pid=19867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=44603 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447080785.484:696913): pid=19867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447080785.484:696914): pid=19867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19868 suid=74 rport=44603 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447080785.487:696915): pid=19867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447080785.487:696916): pid=19867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447080785.487:696917): pid=19867 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22762 res=1
type=USER_ROLE_CHANGE msg=audit(1447080785.556:696918): pid=19867 uid=0 auid=0 ses=22762 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447080785.581:696919): pid=19867 uid=0 auid=0 ses=22762 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447080785.583:696920): pid=19867 uid=0 auid=0 ses=22762 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447080785.583:696921): pid=19867 uid=0 auid=0 ses=22762 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447080785.585:696922): pid=19870 uid=0 auid=0 ses=22762 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=19870 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447080785.585:696923): pid=19870 uid=0 auid=0 ses=22762 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=19870 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447080785.585:696924): pid=19870 uid=0 auid=0 ses=22762 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=19870 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447080785.585:696925): pid=19870 uid=0 auid=0 ses=22762 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447080785.603:696926): pid=19867 uid=0 auid=0 ses=22762 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447080785.603:696927): pid=19867 uid=0 auid=0 ses=22762 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447080785.609:696928): pid=19867 uid=0 auid=0 ses=22762 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447080785.609:696929): pid=19867 uid=0 auid=0 ses=22762 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447080785.610:696930): pid=19867 uid=0 auid=0 ses=22762 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19867 suid=0 rport=44603 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447080785.610:696931): pid=19867 uid=0 auid=0 ses=22762 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=19867 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447080785.610:696932): pid=19867 uid=0 auid=0 ses=22762 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=19867 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447080785.610:696933): pid=19867 uid=0 auid=0 ses=22762 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=19867 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447081201.063:696934): pid=21093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447081201.063:696935): pid=21092 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447081201.063:696936): pid=21093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447081201.063:696937): pid=21092 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447081201.064:696938): pid=21093 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22763 res=1
type=LOGIN msg=audit(1447081201.064:696939): pid=21092 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22764 res=1
type=USER_START msg=audit(1447081201.085:696940): pid=21092 uid=0 auid=0 ses=22764 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447081201.085:696941): pid=21093 uid=0 auid=0 ses=22763 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447081201.085:696942): pid=21092 uid=0 auid=0 ses=22764 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447081201.085:696943): pid=21093 uid=0 auid=0 ses=22763 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447081201.092:696944): pid=21093 uid=0 auid=0 ses=22763 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447081201.094:696945): pid=21093 uid=0 auid=0 ses=22763 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447081201.104:696946): pid=21092 uid=0 auid=0 ses=22764 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447081201.105:696947): pid=21092 uid=0 auid=0 ses=22764 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447081261.117:696948): pid=21329 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447081261.118:696949): pid=21329 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447081261.118:696950): pid=21329 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22765 res=1
type=USER_START msg=audit(1447081261.131:696951): pid=21329 uid=0 auid=0 ses=22765 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447081261.131:696952): pid=21329 uid=0 auid=0 ses=22765 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447081261.153:696953): pid=21329 uid=0 auid=0 ses=22765 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447081261.155:696954): pid=21329 uid=0 auid=0 ses=22765 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1447081587.696:696955): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447081801.173:696957): pid=22996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447081801.173:696956): pid=22997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447081801.174:696958): pid=22996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447081801.174:696959): pid=22997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447081801.175:696960): pid=22996 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22766 res=1
type=LOGIN msg=audit(1447081801.175:696961): pid=22997 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22767 res=1
type=USER_START msg=audit(1447081801.190:696962): pid=22996 uid=0 auid=0 ses=22766 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447081801.190:696963): pid=22996 uid=0 auid=0 ses=22766 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447081801.190:696964): pid=22997 uid=0 auid=0 ses=22767 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447081801.190:696965): pid=22997 uid=0 auid=0 ses=22767 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447081801.198:696966): pid=22997 uid=0 auid=0 ses=22767 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447081801.201:696967): pid=22997 uid=0 auid=0 ses=22767 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447081801.201:696968): pid=22996 uid=0 auid=0 ses=22766 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447081801.206:696969): pid=22996 uid=0 auid=0 ses=22766 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447081983.411:696970): pid=23571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=23571 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447081983.411:696971): pid=23571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=23571 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447081983.411:696972): pid=23571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=23571 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447081983.456:696973): pid=23570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=23571 suid=74 rport=46578 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447081983.456:696974): pid=23570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=23571 suid=74 rport=46578 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447081983.575:696975): pid=23570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=46578 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447081983.575:696976): pid=23570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=46578 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447081983.580:696977): pid=23570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447081983.581:696978): pid=23570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23571 suid=74 rport=46578 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447081983.583:696979): pid=23570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447081983.583:696980): pid=23570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447081983.584:696981): pid=23570 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22768 res=1
type=USER_ROLE_CHANGE msg=audit(1447081983.654:696982): pid=23570 uid=0 auid=0 ses=22768 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447081983.675:696983): pid=23570 uid=0 auid=0 ses=22768 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447081983.677:696984): pid=23570 uid=0 auid=0 ses=22768 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447081983.677:696985): pid=23570 uid=0 auid=0 ses=22768 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447081983.679:696986): pid=23573 uid=0 auid=0 ses=22768 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=23573 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447081983.679:696987): pid=23573 uid=0 auid=0 ses=22768 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=23573 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447081983.679:696988): pid=23573 uid=0 auid=0 ses=22768 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=23573 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447081983.680:696989): pid=23573 uid=0 auid=0 ses=22768 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447081983.698:696990): pid=23570 uid=0 auid=0 ses=22768 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447081983.698:696991): pid=23570 uid=0 auid=0 ses=22768 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447081983.702:696992): pid=23570 uid=0 auid=0 ses=22768 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447081983.702:696993): pid=23570 uid=0 auid=0 ses=22768 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447081983.703:696994): pid=23570 uid=0 auid=0 ses=22768 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23570 suid=0 rport=46578 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447081983.703:696995): pid=23570 uid=0 auid=0 ses=22768 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=23570 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447081983.703:696996): pid=23570 uid=0 auid=0 ses=22768 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=23570 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447081983.703:696997): pid=23570 uid=0 auid=0 ses=22768 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=23570 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447081983.725:696998): pid=23581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=23581 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447081983.725:696999): pid=23581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=23581 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447081983.725:697000): pid=23581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=23581 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447081983.770:697001): pid=23580 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=23581 suid=74 rport=46579 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447081983.770:697002): pid=23580 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=23581 suid=74 rport=46579 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447081983.890:697003): pid=23580 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=46579 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447081983.890:697004): pid=23580 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=46579 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447081983.895:697005): pid=23580 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447081983.896:697006): pid=23580 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23581 suid=74 rport=46579 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447081983.897:697007): pid=23580 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447081983.898:697008): pid=23580 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447081983.898:697009): pid=23580 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22769 res=1
type=USER_ROLE_CHANGE msg=audit(1447081983.964:697010): pid=23580 uid=0 auid=0 ses=22769 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447081983.989:697011): pid=23580 uid=0 auid=0 ses=22769 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447081983.992:697012): pid=23580 uid=0 auid=0 ses=22769 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447081983.992:697013): pid=23580 uid=0 auid=0 ses=22769 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447081983.994:697014): pid=23583 uid=0 auid=0 ses=22769 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=23583 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447081983.994:697015): pid=23583 uid=0 auid=0 ses=22769 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=23583 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447081983.994:697016): pid=23583 uid=0 auid=0 ses=22769 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=23583 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447081983.995:697017): pid=23583 uid=0 auid=0 ses=22769 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447081985.289:697018): pid=23580 uid=0 auid=0 ses=22769 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447081985.289:697019): pid=23580 uid=0 auid=0 ses=22769 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447081985.295:697020): pid=23580 uid=0 auid=0 ses=22769 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447081985.295:697021): pid=23580 uid=0 auid=0 ses=22769 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447081985.295:697022): pid=23580 uid=0 auid=0 ses=22769 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23580 suid=0 rport=46579 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447081985.295:697023): pid=23580 uid=0 auid=0 ses=22769 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=23580 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447081985.295:697024): pid=23580 uid=0 auid=0 ses=22769 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=23580 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447081985.295:697025): pid=23580 uid=0 auid=0 ses=22769 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=23580 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447081985.327:697026): pid=23633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=23633 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447081985.327:697027): pid=23633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=23633 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447081985.327:697028): pid=23633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=23633 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447081985.371:697029): pid=23632 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=23633 suid=74 rport=46583 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447081985.371:697030): pid=23632 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=23633 suid=74 rport=46583 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447081985.493:697031): pid=23632 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=46583 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447081985.493:697032): pid=23632 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=46583 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447081985.498:697033): pid=23632 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447081985.499:697034): pid=23632 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23633 suid=74 rport=46583 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447081985.500:697035): pid=23632 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447081985.501:697036): pid=23632 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447081985.501:697037): pid=23632 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22770 res=1
type=USER_ROLE_CHANGE msg=audit(1447081985.570:697038): pid=23632 uid=0 auid=0 ses=22770 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447081985.589:697039): pid=23632 uid=0 auid=0 ses=22770 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447081985.593:697040): pid=23632 uid=0 auid=0 ses=22770 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447081985.593:697041): pid=23632 uid=0 auid=0 ses=22770 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447081985.594:697042): pid=23635 uid=0 auid=0 ses=22770 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=23635 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447081985.594:697043): pid=23635 uid=0 auid=0 ses=22770 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=23635 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447081985.594:697044): pid=23635 uid=0 auid=0 ses=22770 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=23635 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447081985.595:697045): pid=23635 uid=0 auid=0 ses=22770 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447081985.612:697046): pid=23632 uid=0 auid=0 ses=22770 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447081985.612:697047): pid=23632 uid=0 auid=0 ses=22770 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447081985.615:697048): pid=23632 uid=0 auid=0 ses=22770 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447081985.616:697049): pid=23632 uid=0 auid=0 ses=22770 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447081985.616:697050): pid=23632 uid=0 auid=0 ses=22770 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23632 suid=0 rport=46583 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447081985.616:697051): pid=23632 uid=0 auid=0 ses=22770 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=23632 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447081985.616:697052): pid=23632 uid=0 auid=0 ses=22770 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=23632 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447081985.616:697053): pid=23632 uid=0 auid=0 ses=22770 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=23632 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447082401.233:697054): pid=24919 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447082401.233:697055): pid=24920 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447082401.233:697057): pid=24920 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447082401.233:697056): pid=24919 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447082401.234:697058): pid=24920 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22771 res=1
type=LOGIN msg=audit(1447082401.234:697059): pid=24919 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22772 res=1
type=USER_START msg=audit(1447082401.254:697060): pid=24920 uid=0 auid=0 ses=22771 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447082401.254:697061): pid=24919 uid=0 auid=0 ses=22772 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447082401.255:697062): pid=24920 uid=0 auid=0 ses=22771 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447082401.255:697063): pid=24919 uid=0 auid=0 ses=22772 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447082401.264:697064): pid=24920 uid=0 auid=0 ses=22771 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447082401.267:697065): pid=24920 uid=0 auid=0 ses=22771 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447082401.271:697066): pid=24919 uid=0 auid=0 ses=22772 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447082426.297:697067): pid=24919 uid=0 auid=0 ses=22772 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=USER_ACCT msg=audit(1447083001.312:697068): pid=26767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447083001.312:697069): pid=26767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447083001.312:697070): pid=26767 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22773 res=1
type=USER_ACCT msg=audit(1447083001.314:697071): pid=26766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447083001.314:697072): pid=26766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447083001.314:697073): pid=26766 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22774 res=1
type=USER_START msg=audit(1447083001.328:697074): pid=26766 uid=0 auid=0 ses=22774 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447083001.328:697075): pid=26767 uid=0 auid=0 ses=22773 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447083001.329:697076): pid=26767 uid=0 auid=0 ses=22773 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447083001.329:697077): pid=26766 uid=0 auid=0 ses=22774 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447083001.334:697078): pid=26767 uid=0 auid=0 ses=22773 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447083001.336:697079): pid=26767 uid=0 auid=0 ses=22773 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447083001.345:697080): pid=26766 uid=0 auid=0 ses=22774 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447083001.347:697081): pid=26766 uid=0 auid=0 ses=22774 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447083182.969:697082): pid=27335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=27335 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447083182.969:697083): pid=27335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=27335 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447083182.969:697084): pid=27335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27335 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447083183.014:697085): pid=27334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=27335 suid=74 rport=48558 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447083183.015:697086): pid=27334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=27335 suid=74 rport=48558 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447083183.139:697087): pid=27334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=48558 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447083183.139:697088): pid=27334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=48558 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447083183.147:697089): pid=27334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447083183.149:697090): pid=27334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27335 suid=74 rport=48558 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447083183.151:697091): pid=27334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447083183.151:697092): pid=27334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447083183.151:697093): pid=27334 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22775 res=1
type=USER_ROLE_CHANGE msg=audit(1447083183.219:697094): pid=27334 uid=0 auid=0 ses=22775 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447083183.245:697095): pid=27334 uid=0 auid=0 ses=22775 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447083183.249:697096): pid=27334 uid=0 auid=0 ses=22775 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447083183.249:697097): pid=27334 uid=0 auid=0 ses=22775 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447083183.251:697098): pid=27337 uid=0 auid=0 ses=22775 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=27337 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447083183.251:697099): pid=27337 uid=0 auid=0 ses=22775 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=27337 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447083183.251:697100): pid=27337 uid=0 auid=0 ses=22775 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27337 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447083183.252:697101): pid=27337 uid=0 auid=0 ses=22775 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447083183.272:697102): pid=27334 uid=0 auid=0 ses=22775 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447083183.272:697103): pid=27334 uid=0 auid=0 ses=22775 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447083183.276:697104): pid=27334 uid=0 auid=0 ses=22775 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447083183.276:697105): pid=27334 uid=0 auid=0 ses=22775 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447083183.277:697106): pid=27334 uid=0 auid=0 ses=22775 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27334 suid=0 rport=48558 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447083183.278:697107): pid=27334 uid=0 auid=0 ses=22775 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=27334 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447083183.278:697108): pid=27334 uid=0 auid=0 ses=22775 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=27334 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447083183.278:697109): pid=27334 uid=0 auid=0 ses=22775 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27334 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447083183.299:697110): pid=27345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=27345 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447083183.299:697111): pid=27345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=27345 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447083183.299:697112): pid=27345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27345 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447083183.343:697113): pid=27344 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=27345 suid=74 rport=48559 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447083183.344:697114): pid=27344 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=27345 suid=74 rport=48559 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447083183.473:697115): pid=27344 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=48559 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447083183.473:697116): pid=27344 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=48559 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447083183.482:697117): pid=27344 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447083183.483:697118): pid=27344 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27345 suid=74 rport=48559 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447083183.485:697119): pid=27344 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447083183.485:697120): pid=27344 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447083183.485:697121): pid=27344 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22776 res=1
type=USER_ROLE_CHANGE msg=audit(1447083183.554:697122): pid=27344 uid=0 auid=0 ses=22776 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447083183.579:697123): pid=27344 uid=0 auid=0 ses=22776 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447083183.583:697124): pid=27344 uid=0 auid=0 ses=22776 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447083183.583:697125): pid=27344 uid=0 auid=0 ses=22776 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447083183.585:697126): pid=27347 uid=0 auid=0 ses=22776 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=27347 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447083183.585:697127): pid=27347 uid=0 auid=0 ses=22776 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=27347 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447083183.585:697128): pid=27347 uid=0 auid=0 ses=22776 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27347 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447083183.586:697129): pid=27347 uid=0 auid=0 ses=22776 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447083184.855:697130): pid=27344 uid=0 auid=0 ses=22776 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447083184.855:697131): pid=27344 uid=0 auid=0 ses=22776 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447083184.859:697132): pid=27344 uid=0 auid=0 ses=22776 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447083184.859:697133): pid=27344 uid=0 auid=0 ses=22776 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447083184.859:697134): pid=27344 uid=0 auid=0 ses=22776 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27344 suid=0 rport=48559 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447083184.859:697135): pid=27344 uid=0 auid=0 ses=22776 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=27344 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447083184.860:697136): pid=27344 uid=0 auid=0 ses=22776 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=27344 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447083184.860:697137): pid=27344 uid=0 auid=0 ses=22776 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27344 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447083184.893:697138): pid=27397 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=27397 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447083184.893:697139): pid=27397 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=27397 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447083184.893:697140): pid=27397 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27397 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447083184.937:697141): pid=27396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=27397 suid=74 rport=48564 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447083184.938:697142): pid=27396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=27397 suid=74 rport=48564 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447083185.061:697143): pid=27396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=48564 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447083185.061:697144): pid=27396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=48564 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447083185.069:697145): pid=27396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447083185.070:697146): pid=27396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27397 suid=74 rport=48564 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447083185.072:697147): pid=27396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447083185.072:697148): pid=27396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447083185.072:697149): pid=27396 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22777 res=1
type=USER_ROLE_CHANGE msg=audit(1447083185.139:697150): pid=27396 uid=0 auid=0 ses=22777 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447083185.162:697151): pid=27396 uid=0 auid=0 ses=22777 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447083185.164:697152): pid=27396 uid=0 auid=0 ses=22777 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447083185.164:697153): pid=27396 uid=0 auid=0 ses=22777 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447083185.166:697154): pid=27399 uid=0 auid=0 ses=22777 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=27399 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447083185.166:697155): pid=27399 uid=0 auid=0 ses=22777 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=27399 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447083185.166:697156): pid=27399 uid=0 auid=0 ses=22777 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27399 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447083185.167:697157): pid=27399 uid=0 auid=0 ses=22777 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447083185.182:697158): pid=27396 uid=0 auid=0 ses=22777 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447083185.182:697159): pid=27396 uid=0 auid=0 ses=22777 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447083185.186:697160): pid=27396 uid=0 auid=0 ses=22777 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447083185.186:697161): pid=27396 uid=0 auid=0 ses=22777 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447083185.186:697162): pid=27396 uid=0 auid=0 ses=22777 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27396 suid=0 rport=48564 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447083185.186:697163): pid=27396 uid=0 auid=0 ses=22777 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=27396 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447083185.186:697164): pid=27396 uid=0 auid=0 ses=22777 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=27396 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447083185.186:697165): pid=27396 uid=0 auid=0 ses=22777 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27396 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447083601.366:697166): pid=28682 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447083601.366:697167): pid=28683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447083601.366:697168): pid=28682 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447083601.366:697169): pid=28683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447083601.367:697170): pid=28683 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22778 res=1
type=LOGIN msg=audit(1447083601.367:697171): pid=28682 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22779 res=1
type=USER_START msg=audit(1447083601.388:697172): pid=28683 uid=0 auid=0 ses=22778 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447083601.388:697173): pid=28683 uid=0 auid=0 ses=22778 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447083601.389:697174): pid=28682 uid=0 auid=0 ses=22779 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447083601.389:697175): pid=28682 uid=0 auid=0 ses=22779 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447083601.399:697176): pid=28683 uid=0 auid=0 ses=22778 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447083601.400:697177): pid=28683 uid=0 auid=0 ses=22778 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447083601.407:697178): pid=28682 uid=0 auid=0 ses=22779 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447083626.436:697179): pid=28682 uid=0 auid=0 ses=22779 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=SYSCALL msg=audit(1447083692.758:697180): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447084201.449:697181): pid=30646 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447084201.449:697182): pid=30646 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447084201.449:697183): pid=30646 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22780 res=1
type=USER_ACCT msg=audit(1447084201.450:697184): pid=30645 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447084201.450:697185): pid=30645 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447084201.450:697186): pid=30645 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22781 res=1
type=USER_START msg=audit(1447084201.464:697187): pid=30646 uid=0 auid=0 ses=22780 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447084201.464:697188): pid=30646 uid=0 auid=0 ses=22780 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447084201.465:697189): pid=30645 uid=0 auid=0 ses=22781 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447084201.465:697190): pid=30645 uid=0 auid=0 ses=22781 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447084201.469:697191): pid=30646 uid=0 auid=0 ses=22780 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447084201.471:697192): pid=30646 uid=0 auid=0 ses=22780 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447084201.481:697193): pid=30645 uid=0 auid=0 ses=22781 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447084201.482:697194): pid=30645 uid=0 auid=0 ses=22781 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447084383.116:697195): pid=31213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=31213 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447084383.116:697196): pid=31213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=31213 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447084383.116:697197): pid=31213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=31213 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447084383.161:697198): pid=31212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=31213 suid=74 rport=50539 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447084383.161:697199): pid=31212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=31213 suid=74 rport=50539 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447084383.291:697200): pid=31212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=50539 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447084383.291:697201): pid=31212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=50539 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447084383.297:697202): pid=31212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447084383.298:697203): pid=31212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=31213 suid=74 rport=50539 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447084383.300:697204): pid=31212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447084383.300:697205): pid=31212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447084383.301:697206): pid=31212 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22782 res=1
type=USER_ROLE_CHANGE msg=audit(1447084383.371:697207): pid=31212 uid=0 auid=0 ses=22782 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447084383.395:697208): pid=31212 uid=0 auid=0 ses=22782 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447084383.397:697209): pid=31212 uid=0 auid=0 ses=22782 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447084383.397:697210): pid=31212 uid=0 auid=0 ses=22782 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447084383.398:697211): pid=31215 uid=0 auid=0 ses=22782 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=31215 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447084383.399:697212): pid=31215 uid=0 auid=0 ses=22782 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=31215 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447084383.399:697213): pid=31215 uid=0 auid=0 ses=22782 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=31215 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447084383.399:697214): pid=31215 uid=0 auid=0 ses=22782 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447084383.416:697215): pid=31212 uid=0 auid=0 ses=22782 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447084383.416:697216): pid=31212 uid=0 auid=0 ses=22782 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447084383.419:697217): pid=31212 uid=0 auid=0 ses=22782 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447084383.419:697218): pid=31212 uid=0 auid=0 ses=22782 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447084383.420:697219): pid=31212 uid=0 auid=0 ses=22782 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=31212 suid=0 rport=50539 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447084383.420:697220): pid=31212 uid=0 auid=0 ses=22782 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=31212 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447084383.420:697221): pid=31212 uid=0 auid=0 ses=22782 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=31212 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447084383.420:697222): pid=31212 uid=0 auid=0 ses=22782 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=31212 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447084383.444:697223): pid=31223 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=31223 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447084383.444:697224): pid=31223 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=31223 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447084383.444:697225): pid=31223 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=31223 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447084383.488:697226): pid=31222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=31223 suid=74 rport=50540 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447084383.488:697227): pid=31222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=31223 suid=74 rport=50540 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447084383.616:697228): pid=31222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=50540 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447084383.616:697229): pid=31222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=50540 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447084383.626:697230): pid=31222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447084383.627:697231): pid=31222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=31223 suid=74 rport=50540 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447084383.628:697232): pid=31222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447084383.629:697233): pid=31222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447084383.629:697234): pid=31222 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22783 res=1
type=USER_ROLE_CHANGE msg=audit(1447084383.699:697235): pid=31222 uid=0 auid=0 ses=22783 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447084383.722:697236): pid=31222 uid=0 auid=0 ses=22783 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447084383.726:697237): pid=31222 uid=0 auid=0 ses=22783 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447084383.726:697238): pid=31222 uid=0 auid=0 ses=22783 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447084383.728:697239): pid=31225 uid=0 auid=0 ses=22783 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=31225 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447084383.728:697240): pid=31225 uid=0 auid=0 ses=22783 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=31225 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447084383.728:697241): pid=31225 uid=0 auid=0 ses=22783 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=31225 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447084383.729:697242): pid=31225 uid=0 auid=0 ses=22783 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447084385.015:697243): pid=31222 uid=0 auid=0 ses=22783 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447084385.015:697244): pid=31222 uid=0 auid=0 ses=22783 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447084385.019:697245): pid=31222 uid=0 auid=0 ses=22783 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447084385.019:697246): pid=31222 uid=0 auid=0 ses=22783 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447084385.019:697247): pid=31222 uid=0 auid=0 ses=22783 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=31222 suid=0 rport=50540 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447084385.019:697248): pid=31222 uid=0 auid=0 ses=22783 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=31222 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447084385.020:697249): pid=31222 uid=0 auid=0 ses=22783 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=31222 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447084385.020:697250): pid=31222 uid=0 auid=0 ses=22783 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=31222 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447084385.050:697251): pid=31275 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=31275 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447084385.050:697252): pid=31275 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=31275 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447084385.050:697253): pid=31275 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=31275 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447084385.095:697254): pid=31274 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=31275 suid=74 rport=50543 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447084385.095:697255): pid=31274 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=31275 suid=74 rport=50543 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447084385.215:697256): pid=31274 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=50543 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447084385.215:697257): pid=31274 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=50543 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447084385.220:697258): pid=31274 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447084385.221:697259): pid=31274 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=31275 suid=74 rport=50543 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447084385.223:697260): pid=31274 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447084385.223:697261): pid=31274 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447084385.224:697262): pid=31274 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22784 res=1
type=USER_ROLE_CHANGE msg=audit(1447084385.290:697263): pid=31274 uid=0 auid=0 ses=22784 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447084385.312:697264): pid=31274 uid=0 auid=0 ses=22784 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447084385.315:697265): pid=31274 uid=0 auid=0 ses=22784 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447084385.315:697266): pid=31274 uid=0 auid=0 ses=22784 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447084385.316:697267): pid=31277 uid=0 auid=0 ses=22784 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=31277 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447084385.316:697268): pid=31277 uid=0 auid=0 ses=22784 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=31277 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447084385.316:697269): pid=31277 uid=0 auid=0 ses=22784 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=31277 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447084385.317:697270): pid=31277 uid=0 auid=0 ses=22784 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447084385.333:697271): pid=31274 uid=0 auid=0 ses=22784 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447084385.333:697272): pid=31274 uid=0 auid=0 ses=22784 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447084385.337:697273): pid=31274 uid=0 auid=0 ses=22784 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447084385.337:697274): pid=31274 uid=0 auid=0 ses=22784 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447084385.337:697275): pid=31274 uid=0 auid=0 ses=22784 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=31274 suid=0 rport=50543 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447084385.337:697276): pid=31274 uid=0 auid=0 ses=22784 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=31274 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447084385.337:697277): pid=31274 uid=0 auid=0 ses=22784 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=31274 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447084385.338:697278): pid=31274 uid=0 auid=0 ses=22784 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=31274 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=SYSCALL msg=audit(1447084762.696:697279): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447084801.504:697280): pid=32564 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447084801.504:697281): pid=32565 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447084801.504:697282): pid=32564 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447084801.504:697283): pid=32565 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447084801.505:697284): pid=32565 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22785 res=1
type=LOGIN msg=audit(1447084801.505:697285): pid=32564 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22786 res=1
type=USER_START msg=audit(1447084801.525:697286): pid=32564 uid=0 auid=0 ses=22786 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447084801.525:697287): pid=32565 uid=0 auid=0 ses=22785 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447084801.526:697288): pid=32564 uid=0 auid=0 ses=22786 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447084801.526:697289): pid=32565 uid=0 auid=0 ses=22785 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447084801.536:697290): pid=32565 uid=0 auid=0 ses=22785 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447084801.538:697291): pid=32565 uid=0 auid=0 ses=22785 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447084801.544:697292): pid=32564 uid=0 auid=0 ses=22786 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447084826.570:697293): pid=32564 uid=0 auid=0 ses=22786 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=USER_ACCT msg=audit(1447084861.586:697294): pid=338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447084861.587:697295): pid=338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447084861.587:697296): pid=338 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22787 res=1
type=USER_START msg=audit(1447084861.598:697297): pid=338 uid=0 auid=0 ses=22787 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447084861.598:697298): pid=338 uid=0 auid=0 ses=22787 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447084861.623:697299): pid=338 uid=0 auid=0 ses=22787 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447084861.625:697300): pid=338 uid=0 auid=0 ses=22787 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447085401.637:697301): pid=2121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447085401.637:697302): pid=2121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447085401.638:697303): pid=2121 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22788 res=1
type=USER_ACCT msg=audit(1447085401.638:697304): pid=2122 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447085401.638:697305): pid=2122 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447085401.638:697306): pid=2122 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22789 res=1
type=USER_START msg=audit(1447085401.653:697307): pid=2121 uid=0 auid=0 ses=22788 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447085401.653:697308): pid=2122 uid=0 auid=0 ses=22789 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447085401.654:697309): pid=2121 uid=0 auid=0 ses=22788 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447085401.654:697310): pid=2122 uid=0 auid=0 ses=22789 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447085401.663:697311): pid=2122 uid=0 auid=0 ses=22789 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447085401.665:697312): pid=2122 uid=0 auid=0 ses=22789 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447085401.668:697313): pid=2121 uid=0 auid=0 ses=22788 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447085426.695:697314): pid=2121 uid=0 auid=0 ses=22788 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=CRYPTO_KEY_USER msg=audit(1447085583.340:697315): pid=2693 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=2693 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447085583.341:697316): pid=2693 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=2693 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447085583.341:697317): pid=2693 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=2693 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447085583.385:697318): pid=2692 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=2693 suid=74 rport=52521 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447085583.386:697319): pid=2692 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=2693 suid=74 rport=52521 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447085583.509:697320): pid=2692 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52521 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447085583.509:697321): pid=2692 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=52521 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447085583.513:697322): pid=2692 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447085583.514:697323): pid=2692 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2693 suid=74 rport=52521 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447085583.516:697324): pid=2692 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447085583.516:697325): pid=2692 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447085583.517:697326): pid=2692 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22790 res=1
type=USER_ROLE_CHANGE msg=audit(1447085583.590:697327): pid=2692 uid=0 auid=0 ses=22790 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447085583.609:697328): pid=2692 uid=0 auid=0 ses=22790 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447085583.612:697329): pid=2692 uid=0 auid=0 ses=22790 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447085583.612:697330): pid=2692 uid=0 auid=0 ses=22790 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447085583.614:697331): pid=2695 uid=0 auid=0 ses=22790 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=2695 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447085583.614:697332): pid=2695 uid=0 auid=0 ses=22790 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=2695 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447085583.614:697333): pid=2695 uid=0 auid=0 ses=22790 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=2695 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447085583.615:697334): pid=2695 uid=0 auid=0 ses=22790 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447085583.632:697335): pid=2692 uid=0 auid=0 ses=22790 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447085583.632:697336): pid=2692 uid=0 auid=0 ses=22790 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447085583.636:697337): pid=2692 uid=0 auid=0 ses=22790 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447085583.636:697338): pid=2692 uid=0 auid=0 ses=22790 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447085583.637:697339): pid=2692 uid=0 auid=0 ses=22790 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2692 suid=0 rport=52521 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447085583.637:697340): pid=2692 uid=0 auid=0 ses=22790 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=2692 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447085583.637:697341): pid=2692 uid=0 auid=0 ses=22790 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=2692 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447085583.637:697342): pid=2692 uid=0 auid=0 ses=22790 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=2692 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447085583.659:697343): pid=2703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=2703 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447085583.659:697344): pid=2703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=2703 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447085583.659:697345): pid=2703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=2703 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447085583.704:697346): pid=2702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=2703 suid=74 rport=52522 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447085583.704:697347): pid=2702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=2703 suid=74 rport=52522 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447085583.835:697348): pid=2702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52522 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447085583.835:697349): pid=2702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=52522 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447085583.845:697350): pid=2702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447085583.847:697351): pid=2702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2703 suid=74 rport=52522 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447085583.849:697352): pid=2702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447085583.849:697353): pid=2702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447085583.849:697354): pid=2702 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22791 res=1
type=USER_ROLE_CHANGE msg=audit(1447085583.918:697355): pid=2702 uid=0 auid=0 ses=22791 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447085583.938:697356): pid=2702 uid=0 auid=0 ses=22791 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447085583.941:697357): pid=2702 uid=0 auid=0 ses=22791 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447085583.941:697358): pid=2702 uid=0 auid=0 ses=22791 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447085583.943:697359): pid=2705 uid=0 auid=0 ses=22791 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=2705 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447085583.943:697360): pid=2705 uid=0 auid=0 ses=22791 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=2705 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447085583.943:697361): pid=2705 uid=0 auid=0 ses=22791 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=2705 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447085583.943:697362): pid=2705 uid=0 auid=0 ses=22791 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447085585.235:697363): pid=2702 uid=0 auid=0 ses=22791 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447085585.235:697364): pid=2702 uid=0 auid=0 ses=22791 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447085585.239:697365): pid=2702 uid=0 auid=0 ses=22791 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447085585.239:697366): pid=2702 uid=0 auid=0 ses=22791 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447085585.240:697367): pid=2702 uid=0 auid=0 ses=22791 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2702 suid=0 rport=52522 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447085585.240:697368): pid=2702 uid=0 auid=0 ses=22791 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=2702 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447085585.240:697369): pid=2702 uid=0 auid=0 ses=22791 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=2702 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447085585.240:697370): pid=2702 uid=0 auid=0 ses=22791 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=2702 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447085585.270:697371): pid=2755 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=2755 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447085585.270:697372): pid=2755 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=2755 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447085585.270:697373): pid=2755 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=2755 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447085585.315:697374): pid=2754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=2755 suid=74 rport=52524 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447085585.315:697375): pid=2754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=2755 suid=74 rport=52524 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447085585.443:697376): pid=2754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52524 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447085585.443:697377): pid=2754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=52524 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447085585.450:697378): pid=2754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447085585.451:697379): pid=2754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2755 suid=74 rport=52524 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447085585.452:697380): pid=2754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447085585.453:697381): pid=2754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447085585.453:697382): pid=2754 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22792 res=1
type=USER_ROLE_CHANGE msg=audit(1447085585.515:697383): pid=2754 uid=0 auid=0 ses=22792 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447085585.535:697384): pid=2754 uid=0 auid=0 ses=22792 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447085585.537:697385): pid=2754 uid=0 auid=0 ses=22792 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447085585.537:697386): pid=2754 uid=0 auid=0 ses=22792 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447085585.539:697387): pid=2757 uid=0 auid=0 ses=22792 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=2757 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447085585.539:697388): pid=2757 uid=0 auid=0 ses=22792 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=2757 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447085585.539:697389): pid=2757 uid=0 auid=0 ses=22792 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=2757 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447085585.540:697390): pid=2757 uid=0 auid=0 ses=22792 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447085585.556:697391): pid=2754 uid=0 auid=0 ses=22792 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447085585.556:697392): pid=2754 uid=0 auid=0 ses=22792 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447085585.560:697393): pid=2754 uid=0 auid=0 ses=22792 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447085585.560:697394): pid=2754 uid=0 auid=0 ses=22792 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447085585.560:697395): pid=2754 uid=0 auid=0 ses=22792 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2754 suid=0 rport=52524 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447085585.560:697396): pid=2754 uid=0 auid=0 ses=22792 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=2754 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447085585.560:697397): pid=2754 uid=0 auid=0 ses=22792 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=2754 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447085585.560:697398): pid=2754 uid=0 auid=0 ses=22792 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=2754 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=SYSCALL msg=audit(1447085793.758:697399): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447086001.719:697401): pid=4042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447086001.719:697400): pid=4043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447086001.720:697402): pid=4042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447086001.720:697403): pid=4043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447086001.721:697404): pid=4043 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22793 res=1
type=LOGIN msg=audit(1447086001.721:697405): pid=4042 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22794 res=1
type=USER_START msg=audit(1447086001.740:697406): pid=4043 uid=0 auid=0 ses=22793 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447086001.741:697407): pid=4042 uid=0 auid=0 ses=22794 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447086001.741:697408): pid=4043 uid=0 auid=0 ses=22793 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447086001.741:697409): pid=4042 uid=0 auid=0 ses=22794 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447086001.750:697410): pid=4043 uid=0 auid=0 ses=22793 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447086001.752:697411): pid=4043 uid=0 auid=0 ses=22793 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447086001.755:697412): pid=4042 uid=0 auid=0 ses=22794 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447086026.783:697413): pid=4042 uid=0 auid=0 ses=22794 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=USER_ACCT msg=audit(1447086601.802:697414): pid=5885 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447086601.802:697415): pid=5886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447086601.802:697416): pid=5885 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447086601.802:697417): pid=5886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447086601.803:697418): pid=5886 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22795 res=1
type=LOGIN msg=audit(1447086601.803:697419): pid=5885 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22796 res=1
type=USER_START msg=audit(1447086601.817:697420): pid=5885 uid=0 auid=0 ses=22796 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447086601.818:697421): pid=5885 uid=0 auid=0 ses=22796 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447086601.818:697422): pid=5886 uid=0 auid=0 ses=22795 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447086601.819:697423): pid=5886 uid=0 auid=0 ses=22795 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447086601.824:697424): pid=5886 uid=0 auid=0 ses=22795 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447086601.825:697425): pid=5886 uid=0 auid=0 ses=22795 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447086601.830:697426): pid=5885 uid=0 auid=0 ses=22796 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447086601.832:697427): pid=5885 uid=0 auid=0 ses=22796 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447086783.383:697428): pid=6455 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=6455 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447086783.383:697429): pid=6455 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=6455 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447086783.383:697430): pid=6455 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=6455 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447086783.427:697431): pid=6454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=6455 suid=74 rport=54501 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447086783.427:697432): pid=6454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=6455 suid=74 rport=54501 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447086783.552:697433): pid=6454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=54501 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447086783.552:697434): pid=6454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=54501 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447086783.557:697435): pid=6454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447086783.559:697436): pid=6454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6455 suid=74 rport=54501 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447086783.560:697437): pid=6454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447086783.560:697438): pid=6454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447086783.560:697439): pid=6454 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22797 res=1
type=USER_ROLE_CHANGE msg=audit(1447086783.632:697440): pid=6454 uid=0 auid=0 ses=22797 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447086783.650:697441): pid=6454 uid=0 auid=0 ses=22797 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447086783.652:697442): pid=6454 uid=0 auid=0 ses=22797 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447086783.652:697443): pid=6454 uid=0 auid=0 ses=22797 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447086783.654:697444): pid=6457 uid=0 auid=0 ses=22797 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=6457 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447086783.654:697445): pid=6457 uid=0 auid=0 ses=22797 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=6457 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447086783.654:697446): pid=6457 uid=0 auid=0 ses=22797 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=6457 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447086783.655:697447): pid=6457 uid=0 auid=0 ses=22797 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447086783.675:697448): pid=6454 uid=0 auid=0 ses=22797 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447086783.675:697449): pid=6454 uid=0 auid=0 ses=22797 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447086783.678:697450): pid=6454 uid=0 auid=0 ses=22797 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447086783.678:697451): pid=6454 uid=0 auid=0 ses=22797 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447086783.679:697452): pid=6454 uid=0 auid=0 ses=22797 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6454 suid=0 rport=54501 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447086783.679:697453): pid=6454 uid=0 auid=0 ses=22797 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=6454 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447086783.679:697454): pid=6454 uid=0 auid=0 ses=22797 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=6454 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447086783.679:697455): pid=6454 uid=0 auid=0 ses=22797 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=6454 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447086783.703:697456): pid=6465 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=6465 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447086783.703:697457): pid=6465 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=6465 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447086783.703:697458): pid=6465 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=6465 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447086783.749:697459): pid=6464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=6465 suid=74 rport=54503 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447086783.749:697460): pid=6464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=6465 suid=74 rport=54503 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447086783.873:697461): pid=6464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=54503 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447086783.873:697462): pid=6464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=54503 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447086783.880:697463): pid=6464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447086783.880:697464): pid=6464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6465 suid=74 rport=54503 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447086783.882:697465): pid=6464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447086783.882:697466): pid=6464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447086783.882:697467): pid=6464 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22798 res=1
type=USER_ROLE_CHANGE msg=audit(1447086783.948:697468): pid=6464 uid=0 auid=0 ses=22798 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447086783.965:697469): pid=6464 uid=0 auid=0 ses=22798 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447086783.968:697470): pid=6464 uid=0 auid=0 ses=22798 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447086783.968:697471): pid=6464 uid=0 auid=0 ses=22798 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447086783.969:697472): pid=6467 uid=0 auid=0 ses=22798 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=6467 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447086783.970:697473): pid=6467 uid=0 auid=0 ses=22798 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=6467 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447086783.970:697474): pid=6467 uid=0 auid=0 ses=22798 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=6467 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447086783.970:697475): pid=6467 uid=0 auid=0 ses=22798 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447086785.254:697476): pid=6464 uid=0 auid=0 ses=22798 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447086785.254:697477): pid=6464 uid=0 auid=0 ses=22798 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447086785.260:697478): pid=6464 uid=0 auid=0 ses=22798 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447086785.260:697479): pid=6464 uid=0 auid=0 ses=22798 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447086785.260:697480): pid=6464 uid=0 auid=0 ses=22798 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6464 suid=0 rport=54503 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447086785.261:697481): pid=6464 uid=0 auid=0 ses=22798 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=6464 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447086785.261:697482): pid=6464 uid=0 auid=0 ses=22798 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=6464 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447086785.261:697483): pid=6464 uid=0 auid=0 ses=22798 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=6464 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447086785.297:697484): pid=6517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=6517 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447086785.297:697485): pid=6517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=6517 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447086785.297:697486): pid=6517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=6517 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447086785.342:697487): pid=6516 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=6517 suid=74 rport=54505 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447086785.343:697488): pid=6516 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=6517 suid=74 rport=54505 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447086785.471:697489): pid=6516 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=54505 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447086785.471:697490): pid=6516 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=54505 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447086785.479:697491): pid=6516 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447086785.480:697492): pid=6516 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6517 suid=74 rport=54505 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447086785.482:697493): pid=6516 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447086785.484:697494): pid=6516 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447086785.484:697495): pid=6516 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22799 res=1
type=USER_ROLE_CHANGE msg=audit(1447086785.552:697496): pid=6516 uid=0 auid=0 ses=22799 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447086785.577:697497): pid=6516 uid=0 auid=0 ses=22799 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447086785.579:697498): pid=6516 uid=0 auid=0 ses=22799 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447086785.579:697499): pid=6516 uid=0 auid=0 ses=22799 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447086785.581:697500): pid=6519 uid=0 auid=0 ses=22799 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=6519 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447086785.581:697501): pid=6519 uid=0 auid=0 ses=22799 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=6519 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447086785.581:697502): pid=6519 uid=0 auid=0 ses=22799 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=6519 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447086785.582:697503): pid=6519 uid=0 auid=0 ses=22799 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447086785.600:697504): pid=6516 uid=0 auid=0 ses=22799 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447086785.600:697505): pid=6516 uid=0 auid=0 ses=22799 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447086785.604:697506): pid=6516 uid=0 auid=0 ses=22799 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447086785.604:697507): pid=6516 uid=0 auid=0 ses=22799 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447086785.604:697508): pid=6516 uid=0 auid=0 ses=22799 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6516 suid=0 rport=54505 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447086785.604:697509): pid=6516 uid=0 auid=0 ses=22799 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=6516 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447086785.604:697510): pid=6516 uid=0 auid=0 ses=22799 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=6516 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447086785.604:697511): pid=6516 uid=0 auid=0 ses=22799 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=6516 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447087201.852:697513): pid=7802 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447087201.852:697512): pid=7803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447087201.852:697515): pid=7802 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447087201.852:697514): pid=7803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447087201.853:697516): pid=7802 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22800 res=1
type=LOGIN msg=audit(1447087201.853:697517): pid=7803 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22801 res=1
type=USER_START msg=audit(1447087201.871:697519): pid=7802 uid=0 auid=0 ses=22800 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447087201.871:697518): pid=7803 uid=0 auid=0 ses=22801 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447087201.872:697520): pid=7802 uid=0 auid=0 ses=22800 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447087201.872:697521): pid=7803 uid=0 auid=0 ses=22801 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447087201.881:697522): pid=7803 uid=0 auid=0 ses=22801 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447087201.884:697523): pid=7803 uid=0 auid=0 ses=22801 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447087201.893:697524): pid=7802 uid=0 auid=0 ses=22800 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447087201.894:697525): pid=7802 uid=0 auid=0 ses=22800 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447087708.707:697526): pid=9297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=9297 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447087708.707:697527): pid=9297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=9297 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447087708.708:697528): pid=9297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=9297 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447087708.751:697529): pid=9296 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=9297 suid=74 rport=56235 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447087708.751:697530): pid=9296 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=9297 suid=74 rport=56235 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447087708.874:697531): pid=9296 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=56235 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447087708.875:697532): pid=9296 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=56235 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447087708.882:697533): pid=9296 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447087708.883:697534): pid=9296 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9297 suid=74 rport=56235 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447087708.887:697535): pid=9296 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447087708.887:697536): pid=9296 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447087708.887:697537): pid=9296 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22802 res=1
type=USER_ROLE_CHANGE msg=audit(1447087708.956:697538): pid=9296 uid=0 auid=0 ses=22802 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447087708.987:697539): pid=9296 uid=0 auid=0 ses=22802 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447087708.991:697540): pid=9296 uid=0 auid=0 ses=22802 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447087708.991:697541): pid=9296 uid=0 auid=0 ses=22802 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447087708.992:697542): pid=9299 uid=0 auid=0 ses=22802 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=9299 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447087708.992:697543): pid=9299 uid=0 auid=0 ses=22802 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=9299 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447087708.992:697544): pid=9299 uid=0 auid=0 ses=22802 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=9299 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447087708.993:697545): pid=9299 uid=0 auid=0 ses=22802 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447087709.052:697546): pid=9296 uid=0 auid=0 ses=22802 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447087709.052:697547): pid=9296 uid=0 auid=0 ses=22802 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447087709.060:697548): pid=9296 uid=0 auid=0 ses=22802 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447087709.060:697549): pid=9296 uid=0 auid=0 ses=22802 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447087709.061:697550): pid=9296 uid=0 auid=0 ses=22802 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9296 suid=0 rport=56235 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447087709.061:697551): pid=9296 uid=0 auid=0 ses=22802 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=9296 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447087709.061:697552): pid=9296 uid=0 auid=0 ses=22802 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=9296 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447087709.061:697553): pid=9296 uid=0 auid=0 ses=22802 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=9296 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447087709.078:697554): pid=9305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=9305 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447087709.078:697555): pid=9305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=9305 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447087709.078:697556): pid=9305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=9305 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447087709.124:697557): pid=9304 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=9305 suid=74 rport=56236 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447087709.124:697558): pid=9304 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=9305 suid=74 rport=56236 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447087709.253:697559): pid=9304 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=56236 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447087709.253:697560): pid=9304 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=56236 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447087709.259:697561): pid=9304 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447087709.260:697562): pid=9304 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9305 suid=74 rport=56236 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447087709.261:697563): pid=9304 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447087709.262:697564): pid=9304 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447087709.262:697565): pid=9304 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22803 res=1
type=USER_ROLE_CHANGE msg=audit(1447087709.326:697566): pid=9304 uid=0 auid=0 ses=22803 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447087709.351:697567): pid=9304 uid=0 auid=0 ses=22803 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447087709.354:697568): pid=9304 uid=0 auid=0 ses=22803 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447087709.354:697569): pid=9304 uid=0 auid=0 ses=22803 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447087709.356:697570): pid=9307 uid=0 auid=0 ses=22803 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=9307 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447087709.356:697571): pid=9307 uid=0 auid=0 ses=22803 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=9307 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447087709.356:697572): pid=9307 uid=0 auid=0 ses=22803 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=9307 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447087709.358:697573): pid=9307 uid=0 auid=0 ses=22803 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447087711.480:697574): pid=9304 uid=0 auid=0 ses=22803 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447087711.480:697575): pid=9304 uid=0 auid=0 ses=22803 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447087711.485:697576): pid=9304 uid=0 auid=0 ses=22803 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447087711.485:697577): pid=9304 uid=0 auid=0 ses=22803 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447087711.486:697578): pid=9304 uid=0 auid=0 ses=22803 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9304 suid=0 rport=56236 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447087711.486:697579): pid=9304 uid=0 auid=0 ses=22803 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=9304 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447087711.486:697580): pid=9304 uid=0 auid=0 ses=22803 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=9304 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447087711.486:697581): pid=9304 uid=0 auid=0 ses=22803 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=9304 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447087711.513:697582): pid=10160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=10160 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447087711.513:697583): pid=10160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=10160 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447087711.513:697584): pid=10160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=10160 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447087711.558:697585): pid=10159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=10160 suid=74 rport=56239 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447087711.558:697586): pid=10159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=10160 suid=74 rport=56239 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447087711.681:697587): pid=10159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=56239 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447087711.681:697588): pid=10159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=56239 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447087711.685:697589): pid=10159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447087711.686:697590): pid=10159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10160 suid=74 rport=56239 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447087711.687:697591): pid=10159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447087711.687:697592): pid=10159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447087711.687:697593): pid=10159 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22804 res=1
type=USER_ROLE_CHANGE msg=audit(1447087711.754:697594): pid=10159 uid=0 auid=0 ses=22804 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447087711.778:697595): pid=10159 uid=0 auid=0 ses=22804 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447087711.780:697596): pid=10159 uid=0 auid=0 ses=22804 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447087711.781:697597): pid=10159 uid=0 auid=0 ses=22804 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447087711.782:697598): pid=10174 uid=0 auid=0 ses=22804 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=10174 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447087711.782:697599): pid=10174 uid=0 auid=0 ses=22804 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=10174 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447087711.782:697600): pid=10174 uid=0 auid=0 ses=22804 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=10174 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447087711.783:697601): pid=10174 uid=0 auid=0 ses=22804 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447087711.797:697602): pid=10159 uid=0 auid=0 ses=22804 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447087711.797:697603): pid=10159 uid=0 auid=0 ses=22804 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447087711.799:697604): pid=10159 uid=0 auid=0 ses=22804 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447087711.799:697605): pid=10159 uid=0 auid=0 ses=22804 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447087711.800:697606): pid=10159 uid=0 auid=0 ses=22804 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10159 suid=0 rport=56239 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447087711.800:697607): pid=10159 uid=0 auid=0 ses=22804 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=10159 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447087711.800:697608): pid=10159 uid=0 auid=0 ses=22804 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=10159 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447087711.800:697609): pid=10159 uid=0 auid=0 ses=22804 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=10159 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447087801.920:697610): pid=10462 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447087801.920:697611): pid=10462 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447087801.921:697612): pid=10462 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22805 res=1
type=USER_START msg=audit(1447087801.936:697613): pid=10462 uid=0 auid=0 ses=22805 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447087801.937:697614): pid=10462 uid=0 auid=0 ses=22805 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447087801.941:697615): pid=10463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447087801.941:697616): pid=10463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447087801.942:697617): pid=10463 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22806 res=1
type=USER_START msg=audit(1447087801.949:697618): pid=10463 uid=0 auid=0 ses=22806 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447087801.949:697619): pid=10463 uid=0 auid=0 ses=22806 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447087801.958:697620): pid=10463 uid=0 auid=0 ses=22806 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447087801.959:697621): pid=10463 uid=0 auid=0 ses=22806 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447087801.961:697622): pid=10462 uid=0 auid=0 ses=22805 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447087826.988:697623): pid=10462 uid=0 auid=0 ses=22805 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=SYSCALL msg=audit(1447087953.758:697624): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=CRYPTO_KEY_USER msg=audit(1447087982.813:697625): pid=11038 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=11038 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447087982.814:697626): pid=11038 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=11038 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447087982.814:697627): pid=11038 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=11038 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447087982.858:697628): pid=11037 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=11038 suid=74 rport=56714 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447087982.859:697629): pid=11037 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=11038 suid=74 rport=56714 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447087982.984:697630): pid=11037 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=56714 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447087982.984:697631): pid=11037 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=56714 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447087982.989:697632): pid=11037 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447087982.990:697633): pid=11037 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11038 suid=74 rport=56714 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447087982.993:697634): pid=11037 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447087982.994:697635): pid=11037 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447087982.994:697636): pid=11037 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22807 res=1
type=USER_ROLE_CHANGE msg=audit(1447087983.063:697637): pid=11037 uid=0 auid=0 ses=22807 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447087983.081:697638): pid=11037 uid=0 auid=0 ses=22807 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447087983.085:697639): pid=11037 uid=0 auid=0 ses=22807 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447087983.085:697640): pid=11037 uid=0 auid=0 ses=22807 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447087983.087:697641): pid=11040 uid=0 auid=0 ses=22807 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=11040 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447087983.088:697642): pid=11040 uid=0 auid=0 ses=22807 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=11040 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447087983.088:697643): pid=11040 uid=0 auid=0 ses=22807 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=11040 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447087983.088:697644): pid=11040 uid=0 auid=0 ses=22807 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447087983.107:697645): pid=11037 uid=0 auid=0 ses=22807 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447087983.107:697646): pid=11037 uid=0 auid=0 ses=22807 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447087983.111:697647): pid=11037 uid=0 auid=0 ses=22807 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447087983.111:697648): pid=11037 uid=0 auid=0 ses=22807 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447087983.112:697649): pid=11037 uid=0 auid=0 ses=22807 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11037 suid=0 rport=56714 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447087983.112:697650): pid=11037 uid=0 auid=0 ses=22807 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=11037 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447087983.112:697651): pid=11037 uid=0 auid=0 ses=22807 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=11037 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447087983.112:697652): pid=11037 uid=0 auid=0 ses=22807 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=11037 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447087983.134:697653): pid=11048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=11048 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447087983.134:697654): pid=11048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=11048 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447087983.134:697655): pid=11048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=11048 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447087983.178:697656): pid=11047 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=11048 suid=74 rport=56715 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447087983.179:697657): pid=11047 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=11048 suid=74 rport=56715 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447087983.302:697658): pid=11047 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=56715 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447087983.302:697659): pid=11047 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=56715 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447087983.306:697660): pid=11047 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447087983.307:697661): pid=11047 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11048 suid=74 rport=56715 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447087983.308:697662): pid=11047 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447087983.308:697663): pid=11047 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447087983.309:697664): pid=11047 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22808 res=1
type=USER_ROLE_CHANGE msg=audit(1447087983.374:697665): pid=11047 uid=0 auid=0 ses=22808 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447087983.393:697666): pid=11047 uid=0 auid=0 ses=22808 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447087983.396:697667): pid=11047 uid=0 auid=0 ses=22808 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447087983.396:697668): pid=11047 uid=0 auid=0 ses=22808 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447087983.398:697669): pid=11050 uid=0 auid=0 ses=22808 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=11050 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447087983.398:697670): pid=11050 uid=0 auid=0 ses=22808 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=11050 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447087983.398:697671): pid=11050 uid=0 auid=0 ses=22808 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=11050 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447087983.398:697672): pid=11050 uid=0 auid=0 ses=22808 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447087984.654:697673): pid=11047 uid=0 auid=0 ses=22808 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447087984.654:697674): pid=11047 uid=0 auid=0 ses=22808 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447087984.660:697675): pid=11047 uid=0 auid=0 ses=22808 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447087984.660:697676): pid=11047 uid=0 auid=0 ses=22808 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447087984.660:697677): pid=11047 uid=0 auid=0 ses=22808 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11047 suid=0 rport=56715 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447087984.660:697678): pid=11047 uid=0 auid=0 ses=22808 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=11047 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447087984.660:697679): pid=11047 uid=0 auid=0 ses=22808 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=11047 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447087984.660:697680): pid=11047 uid=0 auid=0 ses=22808 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=11047 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447087984.692:697681): pid=11110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=11110 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447087984.692:697682): pid=11110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=11110 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447087984.692:697683): pid=11110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=11110 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447087984.737:697684): pid=11109 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=11110 suid=74 rport=56717 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447087984.737:697685): pid=11109 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=11110 suid=74 rport=56717 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447087984.866:697686): pid=11109 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=56717 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447087984.866:697687): pid=11109 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=56717 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447087984.874:697688): pid=11109 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447087984.876:697689): pid=11109 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11110 suid=74 rport=56717 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447087984.879:697690): pid=11109 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447087984.879:697691): pid=11109 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447087984.879:697692): pid=11109 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22809 res=1
type=USER_ROLE_CHANGE msg=audit(1447087984.947:697693): pid=11109 uid=0 auid=0 ses=22809 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447087984.971:697694): pid=11109 uid=0 auid=0 ses=22809 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447087984.973:697695): pid=11109 uid=0 auid=0 ses=22809 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447087984.973:697696): pid=11109 uid=0 auid=0 ses=22809 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447087984.975:697697): pid=11112 uid=0 auid=0 ses=22809 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=11112 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447087984.975:697698): pid=11112 uid=0 auid=0 ses=22809 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=11112 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447087984.975:697699): pid=11112 uid=0 auid=0 ses=22809 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=11112 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447087984.976:697700): pid=11112 uid=0 auid=0 ses=22809 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447087984.996:697701): pid=11109 uid=0 auid=0 ses=22809 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447087984.996:697702): pid=11109 uid=0 auid=0 ses=22809 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447087985.002:697703): pid=11109 uid=0 auid=0 ses=22809 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447087985.002:697704): pid=11109 uid=0 auid=0 ses=22809 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447087985.002:697705): pid=11109 uid=0 auid=0 ses=22809 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11109 suid=0 rport=56717 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447087985.002:697706): pid=11109 uid=0 auid=0 ses=22809 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=11109 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447087985.002:697707): pid=11109 uid=0 auid=0 ses=22809 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=11109 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447087985.002:697708): pid=11109 uid=0 auid=0 ses=22809 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=11109 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447088402.012:697709): pid=12338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447088402.012:697710): pid=12339 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447088402.012:697711): pid=12338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447088402.012:697712): pid=12339 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447088402.013:697713): pid=12339 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22810 res=1
type=LOGIN msg=audit(1447088402.013:697714): pid=12338 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22811 res=1
type=USER_START msg=audit(1447088402.032:697715): pid=12338 uid=0 auid=0 ses=22811 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447088402.032:697716): pid=12339 uid=0 auid=0 ses=22810 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447088402.032:697717): pid=12338 uid=0 auid=0 ses=22811 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447088402.032:697718): pid=12339 uid=0 auid=0 ses=22810 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447088402.043:697719): pid=12339 uid=0 auid=0 ses=22810 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447088402.044:697720): pid=12339 uid=0 auid=0 ses=22810 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447088402.046:697721): pid=12338 uid=0 auid=0 ses=22811 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447088427.076:697722): pid=12338 uid=0 auid=0 ses=22811 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=USER_ACCT msg=audit(1447088461.092:697723): pid=12572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447088461.092:697724): pid=12572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447088461.092:697725): pid=12572 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22812 res=1
type=USER_START msg=audit(1447088461.107:697726): pid=12572 uid=0 auid=0 ses=22812 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447088461.107:697727): pid=12572 uid=0 auid=0 ses=22812 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447088461.135:697728): pid=12572 uid=0 auid=0 ses=22812 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447088461.136:697729): pid=12572 uid=0 auid=0 ses=22812 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447089001.149:697730): pid=14240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447089001.149:697731): pid=14240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447089001.150:697732): pid=14240 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22813 res=1
type=USER_ACCT msg=audit(1447089001.150:697733): pid=14241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447089001.150:697734): pid=14241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447089001.150:697735): pid=14241 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22814 res=1
type=USER_START msg=audit(1447089001.166:697736): pid=14241 uid=0 auid=0 ses=22814 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447089001.166:697737): pid=14240 uid=0 auid=0 ses=22813 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447089001.166:697738): pid=14241 uid=0 auid=0 ses=22814 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447089001.166:697739): pid=14240 uid=0 auid=0 ses=22813 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447089001.173:697740): pid=14241 uid=0 auid=0 ses=22814 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447089001.174:697741): pid=14241 uid=0 auid=0 ses=22814 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447089001.181:697742): pid=14240 uid=0 auid=0 ses=22813 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1447089009.743:697743): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_END msg=audit(1447089026.208:697744): pid=14240 uid=0 auid=0 ses=22813 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=CRYPTO_KEY_USER msg=audit(1447089183.420:697745): pid=14814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=14814 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447089183.420:697746): pid=14814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=14814 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447089183.420:697747): pid=14814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=14814 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447089183.464:697748): pid=14813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=14814 suid=74 rport=58696 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447089183.464:697749): pid=14813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=14814 suid=74 rport=58696 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447089183.588:697750): pid=14813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=58696 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447089183.588:697751): pid=14813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=58696 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447089183.593:697752): pid=14813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447089183.594:697753): pid=14813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14814 suid=74 rport=58696 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447089183.595:697754): pid=14813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447089183.595:697755): pid=14813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447089183.595:697756): pid=14813 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22815 res=1
type=USER_ROLE_CHANGE msg=audit(1447089183.667:697757): pid=14813 uid=0 auid=0 ses=22815 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447089183.686:697758): pid=14813 uid=0 auid=0 ses=22815 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447089183.689:697759): pid=14813 uid=0 auid=0 ses=22815 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447089183.689:697760): pid=14813 uid=0 auid=0 ses=22815 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447089183.690:697761): pid=14816 uid=0 auid=0 ses=22815 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=14816 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447089183.690:697762): pid=14816 uid=0 auid=0 ses=22815 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=14816 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447089183.690:697763): pid=14816 uid=0 auid=0 ses=22815 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=14816 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447089183.691:697764): pid=14816 uid=0 auid=0 ses=22815 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447089183.709:697765): pid=14813 uid=0 auid=0 ses=22815 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447089183.709:697766): pid=14813 uid=0 auid=0 ses=22815 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447089183.713:697767): pid=14813 uid=0 auid=0 ses=22815 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447089183.713:697768): pid=14813 uid=0 auid=0 ses=22815 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447089183.714:697769): pid=14813 uid=0 auid=0 ses=22815 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14813 suid=0 rport=58696 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447089183.714:697770): pid=14813 uid=0 auid=0 ses=22815 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=14813 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447089183.714:697771): pid=14813 uid=0 auid=0 ses=22815 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=14813 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447089183.714:697772): pid=14813 uid=0 auid=0 ses=22815 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=14813 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447089183.737:697773): pid=14824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=14824 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447089183.737:697774): pid=14824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=14824 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447089183.737:697775): pid=14824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=14824 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447089183.782:697776): pid=14823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=14824 suid=74 rport=58697 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447089183.782:697777): pid=14823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=14824 suid=74 rport=58697 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447089183.903:697778): pid=14823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=58697 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447089183.903:697779): pid=14823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=58697 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447089183.908:697780): pid=14823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447089183.909:697781): pid=14823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14824 suid=74 rport=58697 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447089183.909:697782): pid=14823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447089183.910:697783): pid=14823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447089183.910:697784): pid=14823 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22816 res=1
type=USER_ROLE_CHANGE msg=audit(1447089183.977:697785): pid=14823 uid=0 auid=0 ses=22816 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447089183.996:697786): pid=14823 uid=0 auid=0 ses=22816 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447089183.999:697787): pid=14823 uid=0 auid=0 ses=22816 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447089183.999:697788): pid=14823 uid=0 auid=0 ses=22816 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447089184.001:697789): pid=14826 uid=0 auid=0 ses=22816 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=14826 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447089184.001:697790): pid=14826 uid=0 auid=0 ses=22816 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=14826 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447089184.001:697791): pid=14826 uid=0 auid=0 ses=22816 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=14826 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447089184.002:697792): pid=14826 uid=0 auid=0 ses=22816 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447089185.282:697793): pid=14823 uid=0 auid=0 ses=22816 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447089185.282:697794): pid=14823 uid=0 auid=0 ses=22816 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447089185.286:697795): pid=14823 uid=0 auid=0 ses=22816 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447089185.286:697796): pid=14823 uid=0 auid=0 ses=22816 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447089185.286:697797): pid=14823 uid=0 auid=0 ses=22816 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14823 suid=0 rport=58697 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447089185.286:697798): pid=14823 uid=0 auid=0 ses=22816 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=14823 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447089185.286:697799): pid=14823 uid=0 auid=0 ses=22816 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=14823 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447089185.286:697800): pid=14823 uid=0 auid=0 ses=22816 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=14823 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447089185.323:697801): pid=14876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=14876 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447089185.323:697802): pid=14876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=14876 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447089185.323:697803): pid=14876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=14876 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447089185.368:697804): pid=14875 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=14876 suid=74 rport=58699 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447089185.368:697805): pid=14875 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=14876 suid=74 rport=58699 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447089185.491:697806): pid=14875 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=58699 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447089185.491:697807): pid=14875 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=58699 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447089185.496:697808): pid=14875 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447089185.497:697809): pid=14875 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14876 suid=74 rport=58699 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447089185.497:697810): pid=14875 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447089185.498:697811): pid=14875 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447089185.498:697812): pid=14875 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22817 res=1
type=USER_ROLE_CHANGE msg=audit(1447089185.563:697813): pid=14875 uid=0 auid=0 ses=22817 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447089185.583:697814): pid=14875 uid=0 auid=0 ses=22817 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447089185.586:697815): pid=14875 uid=0 auid=0 ses=22817 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447089185.586:697816): pid=14875 uid=0 auid=0 ses=22817 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447089185.587:697817): pid=14878 uid=0 auid=0 ses=22817 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=14878 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447089185.587:697818): pid=14878 uid=0 auid=0 ses=22817 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=14878 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447089185.587:697819): pid=14878 uid=0 auid=0 ses=22817 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=14878 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447089185.588:697820): pid=14878 uid=0 auid=0 ses=22817 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447089185.605:697821): pid=14875 uid=0 auid=0 ses=22817 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447089185.605:697822): pid=14875 uid=0 auid=0 ses=22817 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447089185.608:697823): pid=14875 uid=0 auid=0 ses=22817 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447089185.608:697824): pid=14875 uid=0 auid=0 ses=22817 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447089185.609:697825): pid=14875 uid=0 auid=0 ses=22817 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14875 suid=0 rport=58699 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447089185.609:697826): pid=14875 uid=0 auid=0 ses=22817 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=14875 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447089185.609:697827): pid=14875 uid=0 auid=0 ses=22817 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=14875 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447089185.609:697828): pid=14875 uid=0 auid=0 ses=22817 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=14875 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447089601.228:697830): pid=16164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447089601.228:697829): pid=16165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447089601.228:697831): pid=16165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447089601.228:697832): pid=16164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447089601.229:697833): pid=16165 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22818 res=1
type=LOGIN msg=audit(1447089601.229:697834): pid=16164 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22819 res=1
type=USER_START msg=audit(1447089601.248:697835): pid=16164 uid=0 auid=0 ses=22819 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447089601.248:697836): pid=16165 uid=0 auid=0 ses=22818 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447089601.249:697837): pid=16165 uid=0 auid=0 ses=22818 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447089601.249:697838): pid=16164 uid=0 auid=0 ses=22819 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447089601.258:697839): pid=16165 uid=0 auid=0 ses=22818 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447089601.263:697840): pid=16164 uid=0 auid=0 ses=22819 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447089601.263:697841): pid=16165 uid=0 auid=0 ses=22818 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447089601.268:697842): pid=16164 uid=0 auid=0 ses=22819 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447090201.288:697843): pid=18010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447090201.288:697844): pid=18010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447090201.288:697845): pid=18011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447090201.288:697846): pid=18011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447090201.288:697847): pid=18010 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22820 res=1
type=LOGIN msg=audit(1447090201.289:697848): pid=18011 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22821 res=1
type=USER_START msg=audit(1447090201.304:697849): pid=18010 uid=0 auid=0 ses=22820 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447090201.304:697850): pid=18010 uid=0 auid=0 ses=22820 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447090201.306:697851): pid=18011 uid=0 auid=0 ses=22821 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447090201.306:697852): pid=18011 uid=0 auid=0 ses=22821 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447090201.312:697853): pid=18011 uid=0 auid=0 ses=22821 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447090201.318:697854): pid=18010 uid=0 auid=0 ses=22820 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447090201.319:697855): pid=18011 uid=0 auid=0 ses=22821 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447090201.324:697856): pid=18010 uid=0 auid=0 ses=22820 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447090382.884:697857): pid=18579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=18579 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447090382.885:697858): pid=18579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=18579 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447090382.885:697859): pid=18579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=18579 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447090382.930:697860): pid=18578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=18579 suid=74 rport=60682 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447090382.930:697861): pid=18578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=18579 suid=74 rport=60682 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447090383.051:697862): pid=18578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60682 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447090383.051:697863): pid=18578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=60682 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447090383.056:697864): pid=18578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447090383.057:697865): pid=18578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18579 suid=74 rport=60682 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447090383.059:697866): pid=18578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447090383.059:697867): pid=18578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447090383.059:697868): pid=18578 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22822 res=1
type=USER_ROLE_CHANGE msg=audit(1447090383.133:697869): pid=18578 uid=0 auid=0 ses=22822 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447090383.154:697870): pid=18578 uid=0 auid=0 ses=22822 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447090383.157:697871): pid=18578 uid=0 auid=0 ses=22822 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447090383.157:697872): pid=18578 uid=0 auid=0 ses=22822 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447090383.158:697873): pid=18581 uid=0 auid=0 ses=22822 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=18581 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447090383.158:697874): pid=18581 uid=0 auid=0 ses=22822 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=18581 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447090383.159:697875): pid=18581 uid=0 auid=0 ses=22822 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=18581 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447090383.159:697876): pid=18581 uid=0 auid=0 ses=22822 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447090383.177:697877): pid=18578 uid=0 auid=0 ses=22822 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447090383.177:697878): pid=18578 uid=0 auid=0 ses=22822 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447090383.182:697879): pid=18578 uid=0 auid=0 ses=22822 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447090383.182:697880): pid=18578 uid=0 auid=0 ses=22822 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447090383.183:697881): pid=18578 uid=0 auid=0 ses=22822 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18578 suid=0 rport=60682 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447090383.183:697882): pid=18578 uid=0 auid=0 ses=22822 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=18578 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447090383.183:697883): pid=18578 uid=0 auid=0 ses=22822 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=18578 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447090383.183:697884): pid=18578 uid=0 auid=0 ses=22822 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=18578 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447090383.204:697885): pid=18589 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=18589 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447090383.205:697886): pid=18589 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=18589 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447090383.205:697887): pid=18589 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=18589 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447090383.250:697888): pid=18588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=18589 suid=74 rport=60684 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447090383.250:697889): pid=18588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=18589 suid=74 rport=60684 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447090383.370:697890): pid=18588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60684 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447090383.370:697891): pid=18588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=60684 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447090383.376:697892): pid=18588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447090383.376:697893): pid=18588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18589 suid=74 rport=60684 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447090383.378:697894): pid=18588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447090383.379:697895): pid=18588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447090383.379:697896): pid=18588 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22823 res=1
type=USER_ROLE_CHANGE msg=audit(1447090383.448:697897): pid=18588 uid=0 auid=0 ses=22823 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447090383.470:697898): pid=18588 uid=0 auid=0 ses=22823 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447090383.474:697899): pid=18588 uid=0 auid=0 ses=22823 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447090383.474:697900): pid=18588 uid=0 auid=0 ses=22823 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447090383.475:697901): pid=18591 uid=0 auid=0 ses=22823 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=18591 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447090383.475:697902): pid=18591 uid=0 auid=0 ses=22823 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=18591 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447090383.475:697903): pid=18591 uid=0 auid=0 ses=22823 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=18591 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447090383.476:697904): pid=18591 uid=0 auid=0 ses=22823 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447090384.743:697905): pid=18588 uid=0 auid=0 ses=22823 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447090384.743:697906): pid=18588 uid=0 auid=0 ses=22823 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447090384.746:697907): pid=18588 uid=0 auid=0 ses=22823 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447090384.746:697908): pid=18588 uid=0 auid=0 ses=22823 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447090384.747:697909): pid=18588 uid=0 auid=0 ses=22823 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18588 suid=0 rport=60684 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447090384.747:697910): pid=18588 uid=0 auid=0 ses=22823 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=18588 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447090384.747:697911): pid=18588 uid=0 auid=0 ses=22823 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=18588 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447090384.747:697912): pid=18588 uid=0 auid=0 ses=22823 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=18588 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447090384.783:697913): pid=18641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=18641 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447090384.784:697914): pid=18641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=18641 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447090384.784:697915): pid=18641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=18641 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447090384.828:697916): pid=18640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=18641 suid=74 rport=60687 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447090384.829:697917): pid=18640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=18641 suid=74 rport=60687 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447090384.958:697918): pid=18640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60687 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447090384.958:697919): pid=18640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=60687 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447090384.967:697920): pid=18640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447090384.969:697921): pid=18640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18641 suid=74 rport=60687 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447090384.971:697922): pid=18640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447090384.971:697923): pid=18640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447090384.971:697924): pid=18640 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22824 res=1
type=USER_ROLE_CHANGE msg=audit(1447090385.040:697925): pid=18640 uid=0 auid=0 ses=22824 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447090385.061:697926): pid=18640 uid=0 auid=0 ses=22824 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447090385.064:697927): pid=18640 uid=0 auid=0 ses=22824 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447090385.064:697928): pid=18640 uid=0 auid=0 ses=22824 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447090385.066:697929): pid=18643 uid=0 auid=0 ses=22824 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=18643 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447090385.066:697930): pid=18643 uid=0 auid=0 ses=22824 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=18643 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447090385.066:697931): pid=18643 uid=0 auid=0 ses=22824 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=18643 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447090385.067:697932): pid=18643 uid=0 auid=0 ses=22824 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447090385.090:697933): pid=18640 uid=0 auid=0 ses=22824 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447090385.090:697934): pid=18640 uid=0 auid=0 ses=22824 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447090385.095:697935): pid=18640 uid=0 auid=0 ses=22824 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447090385.095:697936): pid=18640 uid=0 auid=0 ses=22824 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447090385.095:697937): pid=18640 uid=0 auid=0 ses=22824 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18640 suid=0 rport=60687 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447090385.095:697938): pid=18640 uid=0 auid=0 ses=22824 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=18640 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447090385.096:697939): pid=18640 uid=0 auid=0 ses=22824 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=18640 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447090385.096:697940): pid=18640 uid=0 auid=0 ses=22824 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=18640 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447090801.353:697941): pid=19927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447090801.353:697942): pid=19927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447090801.353:697943): pid=19928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447090801.353:697944): pid=19928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447090801.354:697945): pid=19927 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22825 res=1
type=LOGIN msg=audit(1447090801.354:697946): pid=19928 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22826 res=1
type=USER_START msg=audit(1447090801.371:697947): pid=19927 uid=0 auid=0 ses=22825 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447090801.372:697948): pid=19928 uid=0 auid=0 ses=22826 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447090801.372:697949): pid=19927 uid=0 auid=0 ses=22825 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447090801.372:697950): pid=19928 uid=0 auid=0 ses=22826 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447090801.382:697951): pid=19928 uid=0 auid=0 ses=22826 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447090801.387:697952): pid=19927 uid=0 auid=0 ses=22825 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447090801.387:697953): pid=19928 uid=0 auid=0 ses=22826 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447090801.391:697954): pid=19927 uid=0 auid=0 ses=22825 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1447091156.758:697955): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=SERVICE_START msg=audit(1447091313.932:697956): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-tmpfiles-clean" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=SERVICE_STOP msg=audit(1447091313.932:697957): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-tmpfiles-clean" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1447091401.409:697958): pid=21775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447091401.409:697959): pid=21775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447091401.410:697960): pid=21775 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22827 res=1
type=USER_ACCT msg=audit(1447091401.410:697961): pid=21776 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447091401.410:697962): pid=21776 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447091401.410:697963): pid=21776 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22828 res=1
type=USER_START msg=audit(1447091401.426:697964): pid=21776 uid=0 auid=0 ses=22828 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447091401.427:697965): pid=21776 uid=0 auid=0 ses=22828 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447091401.427:697966): pid=21775 uid=0 auid=0 ses=22827 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447091401.427:697967): pid=21775 uid=0 auid=0 ses=22827 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447091401.436:697968): pid=21776 uid=0 auid=0 ses=22828 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447091401.438:697969): pid=21776 uid=0 auid=0 ses=22828 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447091401.440:697970): pid=21775 uid=0 auid=0 ses=22827 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447091401.444:697971): pid=21775 uid=0 auid=0 ses=22827 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447091582.764:697972): pid=22343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=22343 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447091582.765:697973): pid=22343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=22343 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447091582.765:697974): pid=22343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=22343 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447091582.809:697975): pid=22342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=22343 suid=74 rport=62661 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447091582.809:697976): pid=22342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=22343 suid=74 rport=62661 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447091582.939:697977): pid=22342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=62661 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447091582.939:697978): pid=22342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=62661 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447091582.945:697979): pid=22342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447091582.947:697980): pid=22342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22343 suid=74 rport=62661 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447091582.951:697981): pid=22342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447091582.952:697982): pid=22342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447091582.952:697983): pid=22342 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22829 res=1
type=USER_ROLE_CHANGE msg=audit(1447091583.021:697984): pid=22342 uid=0 auid=0 ses=22829 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447091583.046:697985): pid=22342 uid=0 auid=0 ses=22829 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447091583.049:697986): pid=22342 uid=0 auid=0 ses=22829 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447091583.049:697987): pid=22342 uid=0 auid=0 ses=22829 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447091583.051:697988): pid=22345 uid=0 auid=0 ses=22829 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=22345 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447091583.051:697989): pid=22345 uid=0 auid=0 ses=22829 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=22345 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447091583.051:697990): pid=22345 uid=0 auid=0 ses=22829 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=22345 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447091583.051:697991): pid=22345 uid=0 auid=0 ses=22829 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447091583.072:697992): pid=22342 uid=0 auid=0 ses=22829 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447091583.072:697993): pid=22342 uid=0 auid=0 ses=22829 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447091583.078:697994): pid=22342 uid=0 auid=0 ses=22829 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447091583.079:697995): pid=22342 uid=0 auid=0 ses=22829 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447091583.080:697996): pid=22342 uid=0 auid=0 ses=22829 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22342 suid=0 rport=62661 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447091583.080:697997): pid=22342 uid=0 auid=0 ses=22829 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=22342 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447091583.080:697998): pid=22342 uid=0 auid=0 ses=22829 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=22342 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447091583.080:697999): pid=22342 uid=0 auid=0 ses=22829 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=22342 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447091583.100:698000): pid=22353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=22353 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447091583.100:698001): pid=22353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=22353 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447091583.100:698002): pid=22353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=22353 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447091583.145:698003): pid=22352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=22353 suid=74 rport=62663 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447091583.145:698004): pid=22352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=22353 suid=74 rport=62663 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447091583.275:698005): pid=22352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=62663 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447091583.275:698006): pid=22352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=62663 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447091583.284:698007): pid=22352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447091583.285:698008): pid=22352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22353 suid=74 rport=62663 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447091583.287:698009): pid=22352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447091583.288:698010): pid=22352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447091583.288:698011): pid=22352 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22830 res=1
type=USER_ROLE_CHANGE msg=audit(1447091583.353:698012): pid=22352 uid=0 auid=0 ses=22830 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447091583.381:698013): pid=22352 uid=0 auid=0 ses=22830 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447091583.383:698014): pid=22352 uid=0 auid=0 ses=22830 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447091583.383:698015): pid=22352 uid=0 auid=0 ses=22830 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447091583.385:698016): pid=22355 uid=0 auid=0 ses=22830 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=22355 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447091583.385:698017): pid=22355 uid=0 auid=0 ses=22830 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=22355 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447091583.385:698018): pid=22355 uid=0 auid=0 ses=22830 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=22355 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447091583.386:698019): pid=22355 uid=0 auid=0 ses=22830 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447091584.665:698020): pid=22352 uid=0 auid=0 ses=22830 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447091584.666:698021): pid=22352 uid=0 auid=0 ses=22830 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447091584.672:698022): pid=22352 uid=0 auid=0 ses=22830 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447091584.672:698023): pid=22352 uid=0 auid=0 ses=22830 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447091584.672:698024): pid=22352 uid=0 auid=0 ses=22830 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22352 suid=0 rport=62663 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447091584.672:698025): pid=22352 uid=0 auid=0 ses=22830 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=22352 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447091584.673:698026): pid=22352 uid=0 auid=0 ses=22830 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=22352 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447091584.673:698027): pid=22352 uid=0 auid=0 ses=22830 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=22352 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447091584.704:698028): pid=22405 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=22405 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447091584.704:698029): pid=22405 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=22405 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447091584.704:698030): pid=22405 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=22405 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447091584.749:698031): pid=22404 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=22405 suid=74 rport=62668 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447091584.749:698032): pid=22404 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=22405 suid=74 rport=62668 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447091584.879:698033): pid=22404 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=62668 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447091584.879:698034): pid=22404 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=62668 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447091584.889:698035): pid=22404 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447091584.889:698036): pid=22404 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22405 suid=74 rport=62668 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447091584.890:698037): pid=22404 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447091584.891:698038): pid=22404 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447091584.891:698039): pid=22404 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22831 res=1
type=USER_ROLE_CHANGE msg=audit(1447091584.959:698040): pid=22404 uid=0 auid=0 ses=22831 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447091584.981:698041): pid=22404 uid=0 auid=0 ses=22831 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447091584.984:698042): pid=22404 uid=0 auid=0 ses=22831 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447091584.984:698043): pid=22404 uid=0 auid=0 ses=22831 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447091584.986:698044): pid=22407 uid=0 auid=0 ses=22831 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=22407 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447091584.986:698045): pid=22407 uid=0 auid=0 ses=22831 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=22407 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447091584.986:698046): pid=22407 uid=0 auid=0 ses=22831 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=22407 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447091584.987:698047): pid=22407 uid=0 auid=0 ses=22831 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447091585.004:698048): pid=22404 uid=0 auid=0 ses=22831 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447091585.004:698049): pid=22404 uid=0 auid=0 ses=22831 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447091585.008:698050): pid=22404 uid=0 auid=0 ses=22831 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447091585.008:698051): pid=22404 uid=0 auid=0 ses=22831 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447091585.009:698052): pid=22404 uid=0 auid=0 ses=22831 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22404 suid=0 rport=62668 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447091585.009:698053): pid=22404 uid=0 auid=0 ses=22831 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=22404 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447091585.009:698054): pid=22404 uid=0 auid=0 ses=22831 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=22404 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447091585.009:698055): pid=22404 uid=0 auid=0 ses=22831 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=22404 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447092001.463:698056): pid=23695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447092001.463:698057): pid=23695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447092001.464:698058): pid=23694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447092001.464:698059): pid=23694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447092001.465:698060): pid=23695 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22832 res=1
type=LOGIN msg=audit(1447092001.465:698061): pid=23694 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22833 res=1
type=USER_START msg=audit(1447092001.483:698062): pid=23694 uid=0 auid=0 ses=22833 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447092001.484:698063): pid=23694 uid=0 auid=0 ses=22833 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447092001.484:698064): pid=23695 uid=0 auid=0 ses=22832 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447092001.485:698065): pid=23695 uid=0 auid=0 ses=22832 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447092001.494:698066): pid=23695 uid=0 auid=0 ses=22832 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447092001.495:698067): pid=23695 uid=0 auid=0 ses=22832 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447092001.502:698068): pid=23694 uid=0 auid=0 ses=22833 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447092001.504:698069): pid=23694 uid=0 auid=0 ses=22833 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447092061.517:698070): pid=23929 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447092061.518:698071): pid=23929 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447092061.518:698072): pid=23929 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22834 res=1
type=USER_START msg=audit(1447092061.531:698073): pid=23929 uid=0 auid=0 ses=22834 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447092061.531:698074): pid=23929 uid=0 auid=0 ses=22834 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447092061.556:698075): pid=23929 uid=0 auid=0 ses=22834 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447092061.557:698076): pid=23929 uid=0 auid=0 ses=22834 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447092601.572:698077): pid=25597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447092601.572:698078): pid=25597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447092601.572:698079): pid=25597 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22835 res=1
type=USER_ACCT msg=audit(1447092601.573:698080): pid=25596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447092601.573:698081): pid=25596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447092601.573:698082): pid=25596 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22836 res=1
type=USER_START msg=audit(1447092601.586:698083): pid=25597 uid=0 auid=0 ses=22835 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447092601.586:698084): pid=25597 uid=0 auid=0 ses=22835 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447092601.588:698085): pid=25596 uid=0 auid=0 ses=22836 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447092601.588:698086): pid=25596 uid=0 auid=0 ses=22836 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447092601.596:698087): pid=25597 uid=0 auid=0 ses=22835 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447092601.597:698088): pid=25597 uid=0 auid=0 ses=22835 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447092601.603:698089): pid=25596 uid=0 auid=0 ses=22836 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447092601.604:698090): pid=25596 uid=0 auid=0 ses=22836 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447092782.595:698091): pid=26170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=26170 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447092782.595:698092): pid=26170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=26170 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447092782.595:698093): pid=26170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=26170 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447092782.640:698094): pid=26169 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=26170 suid=74 rport=64643 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447092782.640:698095): pid=26169 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=26170 suid=74 rport=64643 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447092782.770:698096): pid=26169 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=64643 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447092782.770:698097): pid=26169 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=64643 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447092782.779:698098): pid=26169 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447092782.782:698099): pid=26169 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26170 suid=74 rport=64643 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447092782.785:698100): pid=26169 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447092782.786:698101): pid=26169 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447092782.786:698102): pid=26169 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22837 res=1
type=USER_ROLE_CHANGE msg=audit(1447092782.857:698103): pid=26169 uid=0 auid=0 ses=22837 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447092782.875:698104): pid=26169 uid=0 auid=0 ses=22837 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447092782.877:698105): pid=26169 uid=0 auid=0 ses=22837 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447092782.878:698106): pid=26169 uid=0 auid=0 ses=22837 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447092782.879:698107): pid=26172 uid=0 auid=0 ses=22837 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=26172 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447092782.879:698108): pid=26172 uid=0 auid=0 ses=22837 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=26172 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447092782.879:698109): pid=26172 uid=0 auid=0 ses=22837 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=26172 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447092782.880:698110): pid=26172 uid=0 auid=0 ses=22837 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447092782.897:698111): pid=26169 uid=0 auid=0 ses=22837 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447092782.897:698112): pid=26169 uid=0 auid=0 ses=22837 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447092782.900:698113): pid=26169 uid=0 auid=0 ses=22837 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447092782.900:698114): pid=26169 uid=0 auid=0 ses=22837 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447092782.901:698115): pid=26169 uid=0 auid=0 ses=22837 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26169 suid=0 rport=64643 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447092782.901:698116): pid=26169 uid=0 auid=0 ses=22837 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=26169 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447092782.901:698117): pid=26169 uid=0 auid=0 ses=22837 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=26169 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447092782.902:698118): pid=26169 uid=0 auid=0 ses=22837 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=26169 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447092782.923:698119): pid=26180 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=26180 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447092782.923:698120): pid=26180 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=26180 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447092782.923:698121): pid=26180 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=26180 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447092782.968:698122): pid=26179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=26180 suid=74 rport=64644 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447092782.968:698123): pid=26179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=26180 suid=74 rport=64644 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447092783.095:698124): pid=26179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=64644 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447092783.095:698125): pid=26179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=64644 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447092783.099:698126): pid=26179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447092783.100:698127): pid=26179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26180 suid=74 rport=64644 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447092783.101:698128): pid=26179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447092783.101:698129): pid=26179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447092783.101:698130): pid=26179 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22838 res=1
type=USER_ROLE_CHANGE msg=audit(1447092783.164:698131): pid=26179 uid=0 auid=0 ses=22838 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447092783.187:698132): pid=26179 uid=0 auid=0 ses=22838 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447092783.191:698133): pid=26179 uid=0 auid=0 ses=22838 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447092783.191:698134): pid=26179 uid=0 auid=0 ses=22838 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447092783.193:698135): pid=26182 uid=0 auid=0 ses=22838 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=26182 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447092783.193:698136): pid=26182 uid=0 auid=0 ses=22838 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=26182 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447092783.193:698137): pid=26182 uid=0 auid=0 ses=22838 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=26182 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447092783.194:698138): pid=26182 uid=0 auid=0 ses=22838 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447092784.458:698139): pid=26179 uid=0 auid=0 ses=22838 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447092784.458:698140): pid=26179 uid=0 auid=0 ses=22838 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447092784.464:698141): pid=26179 uid=0 auid=0 ses=22838 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447092784.464:698142): pid=26179 uid=0 auid=0 ses=22838 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447092784.465:698143): pid=26179 uid=0 auid=0 ses=22838 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26179 suid=0 rport=64644 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447092784.465:698144): pid=26179 uid=0 auid=0 ses=22838 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=26179 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447092784.465:698145): pid=26179 uid=0 auid=0 ses=22838 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=26179 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447092784.465:698146): pid=26179 uid=0 auid=0 ses=22838 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=26179 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447092784.495:698147): pid=26232 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=26232 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447092784.495:698148): pid=26232 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=26232 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447092784.495:698149): pid=26232 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=26232 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447092784.540:698150): pid=26231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=26232 suid=74 rport=64648 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447092784.541:698151): pid=26231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=26232 suid=74 rport=64648 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447092784.669:698152): pid=26231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=64648 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447092784.669:698153): pid=26231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=64648 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447092784.679:698154): pid=26231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447092784.680:698155): pid=26231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26232 suid=74 rport=64648 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447092784.682:698156): pid=26231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447092784.683:698157): pid=26231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447092784.683:698158): pid=26231 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22839 res=1
type=USER_ROLE_CHANGE msg=audit(1447092784.752:698159): pid=26231 uid=0 auid=0 ses=22839 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447092784.773:698160): pid=26231 uid=0 auid=0 ses=22839 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447092784.775:698161): pid=26231 uid=0 auid=0 ses=22839 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447092784.775:698162): pid=26231 uid=0 auid=0 ses=22839 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447092784.777:698163): pid=26234 uid=0 auid=0 ses=22839 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=26234 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447092784.777:698164): pid=26234 uid=0 auid=0 ses=22839 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=26234 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447092784.777:698165): pid=26234 uid=0 auid=0 ses=22839 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=26234 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447092784.778:698166): pid=26234 uid=0 auid=0 ses=22839 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447092784.794:698167): pid=26231 uid=0 auid=0 ses=22839 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447092784.794:698168): pid=26231 uid=0 auid=0 ses=22839 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447092784.797:698169): pid=26231 uid=0 auid=0 ses=22839 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447092784.797:698170): pid=26231 uid=0 auid=0 ses=22839 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447092784.797:698171): pid=26231 uid=0 auid=0 ses=22839 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26231 suid=0 rport=64648 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447092784.798:698172): pid=26231 uid=0 auid=0 ses=22839 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=26231 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447092784.798:698173): pid=26231 uid=0 auid=0 ses=22839 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=26231 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447092784.798:698174): pid=26231 uid=0 auid=0 ses=22839 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=26231 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447093201.624:698175): pid=27519 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447093201.624:698176): pid=27518 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447093201.624:698177): pid=27519 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447093201.624:698178): pid=27518 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447093201.625:698179): pid=27519 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22840 res=1
type=LOGIN msg=audit(1447093201.625:698180): pid=27518 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22841 res=1
type=USER_START msg=audit(1447093201.643:698181): pid=27519 uid=0 auid=0 ses=22840 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447093201.643:698182): pid=27518 uid=0 auid=0 ses=22841 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447093201.644:698183): pid=27519 uid=0 auid=0 ses=22840 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447093201.644:698184): pid=27518 uid=0 auid=0 ses=22841 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447093201.651:698185): pid=27519 uid=0 auid=0 ses=22840 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447093201.652:698186): pid=27519 uid=0 auid=0 ses=22840 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447093201.660:698187): pid=27518 uid=0 auid=0 ses=22841 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447093201.661:698188): pid=27518 uid=0 auid=0 ses=22841 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1447093248.731:698189): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447093801.675:698190): pid=29362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447093801.675:698191): pid=29363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447093801.675:698192): pid=29363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447093801.675:698193): pid=29362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447093801.675:698194): pid=29363 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22842 res=1
type=LOGIN msg=audit(1447093801.675:698195): pid=29362 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22843 res=1
type=USER_START msg=audit(1447093801.692:698196): pid=29363 uid=0 auid=0 ses=22842 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447093801.692:698197): pid=29362 uid=0 auid=0 ses=22843 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447093801.692:698198): pid=29363 uid=0 auid=0 ses=22842 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447093801.693:698199): pid=29362 uid=0 auid=0 ses=22843 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447093801.700:698200): pid=29363 uid=0 auid=0 ses=22842 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447093801.705:698201): pid=29363 uid=0 auid=0 ses=22842 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447093801.705:698202): pid=29362 uid=0 auid=0 ses=22843 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447093801.712:698203): pid=29362 uid=0 auid=0 ses=22843 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447093982.859:698204): pid=29998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=29998 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447093982.860:698205): pid=29998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=29998 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447093982.860:698206): pid=29998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=29998 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447093982.904:698207): pid=29997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=29998 suid=74 rport=33860 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447093982.905:698208): pid=29997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=29998 suid=74 rport=33860 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447093983.035:698209): pid=29997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33860 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447093983.035:698210): pid=29997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=33860 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447093983.043:698211): pid=29997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447093983.045:698212): pid=29997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29998 suid=74 rport=33860 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447093983.046:698213): pid=29997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447093983.046:698214): pid=29997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447093983.046:698215): pid=29997 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22844 res=1
type=USER_ROLE_CHANGE msg=audit(1447093983.122:698216): pid=29997 uid=0 auid=0 ses=22844 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447093983.141:698217): pid=29997 uid=0 auid=0 ses=22844 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447093983.143:698218): pid=29997 uid=0 auid=0 ses=22844 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447093983.144:698219): pid=29997 uid=0 auid=0 ses=22844 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447093983.145:698220): pid=30000 uid=0 auid=0 ses=22844 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=30000 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447093983.145:698221): pid=30000 uid=0 auid=0 ses=22844 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=30000 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447093983.145:698222): pid=30000 uid=0 auid=0 ses=22844 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=30000 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447093983.146:698223): pid=30000 uid=0 auid=0 ses=22844 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447093983.164:698224): pid=29997 uid=0 auid=0 ses=22844 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447093983.165:698225): pid=29997 uid=0 auid=0 ses=22844 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447093983.168:698226): pid=29997 uid=0 auid=0 ses=22844 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447093983.168:698227): pid=29997 uid=0 auid=0 ses=22844 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447093983.169:698228): pid=29997 uid=0 auid=0 ses=22844 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29997 suid=0 rport=33860 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447093983.169:698229): pid=29997 uid=0 auid=0 ses=22844 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=29997 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447093983.169:698230): pid=29997 uid=0 auid=0 ses=22844 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=29997 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447093983.169:698231): pid=29997 uid=0 auid=0 ses=22844 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=29997 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447093983.191:698232): pid=30008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=30008 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447093983.191:698233): pid=30008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=30008 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447093983.191:698234): pid=30008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=30008 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447093983.237:698235): pid=30007 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=30008 suid=74 rport=33861 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447093983.237:698236): pid=30007 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=30008 suid=74 rport=33861 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447093983.364:698237): pid=30007 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33861 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447093983.364:698238): pid=30007 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=33861 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447093983.372:698239): pid=30007 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447093983.373:698240): pid=30007 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=30008 suid=74 rport=33861 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447093983.375:698241): pid=30007 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447093983.375:698242): pid=30007 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447093983.376:698243): pid=30007 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22845 res=1
type=USER_ROLE_CHANGE msg=audit(1447093983.441:698244): pid=30007 uid=0 auid=0 ses=22845 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447093983.462:698245): pid=30007 uid=0 auid=0 ses=22845 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447093983.464:698246): pid=30007 uid=0 auid=0 ses=22845 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447093983.464:698247): pid=30007 uid=0 auid=0 ses=22845 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447093983.466:698248): pid=30010 uid=0 auid=0 ses=22845 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=30010 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447093983.466:698249): pid=30010 uid=0 auid=0 ses=22845 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=30010 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447093983.466:698250): pid=30010 uid=0 auid=0 ses=22845 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=30010 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447093983.467:698251): pid=30010 uid=0 auid=0 ses=22845 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447093984.758:698252): pid=30007 uid=0 auid=0 ses=22845 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447093984.758:698253): pid=30007 uid=0 auid=0 ses=22845 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447093984.763:698254): pid=30007 uid=0 auid=0 ses=22845 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447093984.763:698255): pid=30007 uid=0 auid=0 ses=22845 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447093984.764:698256): pid=30007 uid=0 auid=0 ses=22845 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=30007 suid=0 rport=33861 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447093984.764:698257): pid=30007 uid=0 auid=0 ses=22845 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=30007 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447093984.764:698258): pid=30007 uid=0 auid=0 ses=22845 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=30007 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447093984.764:698259): pid=30007 uid=0 auid=0 ses=22845 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=30007 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447093984.793:698260): pid=30098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=30098 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447093984.794:698261): pid=30098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=30098 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447093984.794:698262): pid=30098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=30098 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447093984.840:698263): pid=30097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=30098 suid=74 rport=33865 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447093984.840:698264): pid=30097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=30098 suid=74 rport=33865 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447093984.963:698265): pid=30097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33865 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447093984.963:698266): pid=30097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=33865 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447093984.968:698267): pid=30097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447093984.969:698268): pid=30097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=30098 suid=74 rport=33865 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447093984.970:698269): pid=30097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447093984.970:698270): pid=30097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447093984.970:698271): pid=30097 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22846 res=1
type=USER_ROLE_CHANGE msg=audit(1447093985.034:698272): pid=30097 uid=0 auid=0 ses=22846 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447093985.057:698273): pid=30097 uid=0 auid=0 ses=22846 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447093985.059:698274): pid=30097 uid=0 auid=0 ses=22846 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447093985.059:698275): pid=30097 uid=0 auid=0 ses=22846 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447093985.061:698276): pid=30100 uid=0 auid=0 ses=22846 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=30100 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447093985.061:698277): pid=30100 uid=0 auid=0 ses=22846 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=30100 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447093985.061:698278): pid=30100 uid=0 auid=0 ses=22846 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=30100 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447093985.062:698279): pid=30100 uid=0 auid=0 ses=22846 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447093985.078:698280): pid=30097 uid=0 auid=0 ses=22846 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447093985.078:698281): pid=30097 uid=0 auid=0 ses=22846 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447093985.082:698282): pid=30097 uid=0 auid=0 ses=22846 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447093985.082:698283): pid=30097 uid=0 auid=0 ses=22846 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447093985.082:698284): pid=30097 uid=0 auid=0 ses=22846 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=30097 suid=0 rport=33865 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447093985.082:698285): pid=30097 uid=0 auid=0 ses=22846 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=30097 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447093985.082:698286): pid=30097 uid=0 auid=0 ses=22846 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=30097 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447093985.082:698287): pid=30097 uid=0 auid=0 ses=22846 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=30097 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=SYSCALL msg=audit(1447094315.758:698288): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447094401.728:698289): pid=31397 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447094401.728:698290): pid=31396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447094401.728:698291): pid=31397 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447094401.728:698292): pid=31396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447094401.729:698293): pid=31397 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22847 res=1
type=LOGIN msg=audit(1447094401.729:698294): pid=31396 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22848 res=1
type=USER_START msg=audit(1447094401.747:698295): pid=31396 uid=0 auid=0 ses=22848 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447094401.747:698296): pid=31396 uid=0 auid=0 ses=22848 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447094401.751:698297): pid=31397 uid=0 auid=0 ses=22847 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447094401.751:698298): pid=31397 uid=0 auid=0 ses=22847 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447094401.757:698299): pid=31397 uid=0 auid=0 ses=22847 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447094401.760:698300): pid=31397 uid=0 auid=0 ses=22847 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447094401.763:698301): pid=31396 uid=0 auid=0 ses=22848 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447094426.776:698302): pid=31396 uid=0 auid=0 ses=22848 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=USER_ACCT msg=audit(1447095001.788:698304): pid=866 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447095001.788:698303): pid=865 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447095001.788:698306): pid=866 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447095001.788:698305): pid=865 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447095001.788:698307): pid=865 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22849 res=1
type=LOGIN msg=audit(1447095001.788:698308): pid=866 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22850 res=1
type=USER_START msg=audit(1447095001.803:698309): pid=866 uid=0 auid=0 ses=22850 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447095001.804:698310): pid=866 uid=0 auid=0 ses=22850 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447095001.807:698311): pid=865 uid=0 auid=0 ses=22849 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447095001.807:698312): pid=865 uid=0 auid=0 ses=22849 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447095001.811:698313): pid=866 uid=0 auid=0 ses=22850 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447095001.813:698314): pid=866 uid=0 auid=0 ses=22850 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447095001.822:698315): pid=865 uid=0 auid=0 ses=22849 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447095001.824:698316): pid=865 uid=0 auid=0 ses=22849 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447095182.830:698317): pid=1441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=1441 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447095182.830:698318): pid=1441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=1441 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447095182.830:698319): pid=1441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=1441 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447095182.874:698320): pid=1440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=1441 suid=74 rport=35841 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447095182.874:698321): pid=1440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=1441 suid=74 rport=35841 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447095183.002:698322): pid=1440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=35841 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447095183.002:698323): pid=1440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=35841 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447095183.010:698324): pid=1440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447095183.012:698325): pid=1440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1441 suid=74 rport=35841 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447095183.016:698326): pid=1440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447095183.016:698327): pid=1440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447095183.017:698328): pid=1440 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22851 res=1
type=USER_ROLE_CHANGE msg=audit(1447095183.088:698329): pid=1440 uid=0 auid=0 ses=22851 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447095183.114:698330): pid=1440 uid=0 auid=0 ses=22851 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447095183.117:698331): pid=1440 uid=0 auid=0 ses=22851 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447095183.117:698332): pid=1440 uid=0 auid=0 ses=22851 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447095183.119:698333): pid=1455 uid=0 auid=0 ses=22851 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=1455 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447095183.119:698334): pid=1455 uid=0 auid=0 ses=22851 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=1455 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447095183.119:698335): pid=1455 uid=0 auid=0 ses=22851 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=1455 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447095183.120:698336): pid=1455 uid=0 auid=0 ses=22851 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447095183.138:698337): pid=1440 uid=0 auid=0 ses=22851 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447095183.138:698338): pid=1440 uid=0 auid=0 ses=22851 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447095183.141:698339): pid=1440 uid=0 auid=0 ses=22851 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447095183.141:698340): pid=1440 uid=0 auid=0 ses=22851 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447095183.142:698341): pid=1440 uid=0 auid=0 ses=22851 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1440 suid=0 rport=35841 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447095183.142:698342): pid=1440 uid=0 auid=0 ses=22851 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=1440 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447095183.142:698343): pid=1440 uid=0 auid=0 ses=22851 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=1440 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447095183.143:698344): pid=1440 uid=0 auid=0 ses=22851 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=1440 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447095183.164:698345): pid=1463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=1463 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447095183.164:698346): pid=1463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=1463 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447095183.164:698347): pid=1463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=1463 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447095183.208:698348): pid=1462 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=1463 suid=74 rport=35842 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447095183.208:698349): pid=1462 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=1463 suid=74 rport=35842 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447095183.336:698350): pid=1462 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=35842 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447095183.336:698351): pid=1462 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=35842 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447095183.345:698352): pid=1462 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447095183.347:698353): pid=1462 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1463 suid=74 rport=35842 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447095183.349:698354): pid=1462 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447095183.349:698355): pid=1462 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447095183.349:698356): pid=1462 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22852 res=1
type=USER_ROLE_CHANGE msg=audit(1447095183.414:698357): pid=1462 uid=0 auid=0 ses=22852 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447095183.437:698358): pid=1462 uid=0 auid=0 ses=22852 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447095183.440:698359): pid=1462 uid=0 auid=0 ses=22852 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447095183.440:698360): pid=1462 uid=0 auid=0 ses=22852 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447095183.441:698361): pid=1465 uid=0 auid=0 ses=22852 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=1465 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447095183.441:698362): pid=1465 uid=0 auid=0 ses=22852 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=1465 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447095183.441:698363): pid=1465 uid=0 auid=0 ses=22852 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=1465 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447095183.442:698364): pid=1465 uid=0 auid=0 ses=22852 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447095184.702:698365): pid=1462 uid=0 auid=0 ses=22852 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447095184.702:698366): pid=1462 uid=0 auid=0 ses=22852 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447095184.705:698367): pid=1462 uid=0 auid=0 ses=22852 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447095184.705:698368): pid=1462 uid=0 auid=0 ses=22852 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447095184.706:698369): pid=1462 uid=0 auid=0 ses=22852 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1462 suid=0 rport=35842 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447095184.706:698370): pid=1462 uid=0 auid=0 ses=22852 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=1462 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447095184.706:698371): pid=1462 uid=0 auid=0 ses=22852 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=1462 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447095184.706:698372): pid=1462 uid=0 auid=0 ses=22852 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=1462 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447095184.745:698373): pid=1526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=1526 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447095184.745:698374): pid=1526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=1526 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447095184.745:698375): pid=1526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=1526 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447095184.789:698376): pid=1525 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=1526 suid=74 rport=35844 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447095184.789:698377): pid=1525 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=1526 suid=74 rport=35844 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447095184.916:698378): pid=1525 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=35844 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447095184.916:698379): pid=1525 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=35844 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447095184.923:698380): pid=1525 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447095184.925:698381): pid=1525 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1526 suid=74 rport=35844 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447095184.927:698382): pid=1525 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447095184.927:698383): pid=1525 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447095184.927:698384): pid=1525 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22853 res=1
type=USER_ROLE_CHANGE msg=audit(1447095184.992:698385): pid=1525 uid=0 auid=0 ses=22853 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447095185.015:698386): pid=1525 uid=0 auid=0 ses=22853 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447095185.018:698387): pid=1525 uid=0 auid=0 ses=22853 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447095185.018:698388): pid=1525 uid=0 auid=0 ses=22853 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447095185.020:698389): pid=1528 uid=0 auid=0 ses=22853 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=1528 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447095185.020:698390): pid=1528 uid=0 auid=0 ses=22853 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=1528 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447095185.020:698391): pid=1528 uid=0 auid=0 ses=22853 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=1528 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447095185.021:698392): pid=1528 uid=0 auid=0 ses=22853 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447095185.041:698393): pid=1525 uid=0 auid=0 ses=22853 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447095185.041:698394): pid=1525 uid=0 auid=0 ses=22853 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447095185.045:698395): pid=1525 uid=0 auid=0 ses=22853 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447095185.045:698396): pid=1525 uid=0 auid=0 ses=22853 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447095185.046:698397): pid=1525 uid=0 auid=0 ses=22853 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1525 suid=0 rport=35844 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447095185.046:698398): pid=1525 uid=0 auid=0 ses=22853 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=1525 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447095185.046:698399): pid=1525 uid=0 auid=0 ses=22853 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=1525 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447095185.046:698400): pid=1525 uid=0 auid=0 ses=22853 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=1525 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=SYSCALL msg=audit(1447095361.747:698401): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447095601.843:698403): pid=2754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447095601.843:698402): pid=2753 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447095601.843:698404): pid=2754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447095601.843:698405): pid=2753 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447095601.845:698406): pid=2753 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22854 res=1
type=LOGIN msg=audit(1447095601.845:698407): pid=2754 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22855 res=1
type=USER_START msg=audit(1447095601.863:698408): pid=2753 uid=0 auid=0 ses=22854 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447095601.863:698409): pid=2754 uid=0 auid=0 ses=22855 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447095601.863:698410): pid=2754 uid=0 auid=0 ses=22855 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447095601.863:698411): pid=2753 uid=0 auid=0 ses=22854 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447095601.871:698412): pid=2754 uid=0 auid=0 ses=22855 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447095601.873:698413): pid=2754 uid=0 auid=0 ses=22855 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447095601.884:698414): pid=2753 uid=0 auid=0 ses=22854 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447095601.886:698415): pid=2753 uid=0 auid=0 ses=22854 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447095661.894:698416): pid=2989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447095661.894:698417): pid=2989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447095661.895:698418): pid=2989 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22856 res=1
type=USER_START msg=audit(1447095661.904:698419): pid=2989 uid=0 auid=0 ses=22856 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447095661.905:698420): pid=2989 uid=0 auid=0 ses=22856 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447095661.929:698421): pid=2989 uid=0 auid=0 ses=22856 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447095661.930:698422): pid=2989 uid=0 auid=0 ses=22856 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447096201.949:698423): pid=4657 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447096201.949:698424): pid=4656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447096201.949:698425): pid=4656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447096201.949:698426): pid=4657 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447096201.950:698427): pid=4657 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22857 res=1
type=LOGIN msg=audit(1447096201.950:698428): pid=4656 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22858 res=1
type=USER_START msg=audit(1447096201.964:698429): pid=4657 uid=0 auid=0 ses=22857 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447096201.965:698430): pid=4657 uid=0 auid=0 ses=22857 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447096201.966:698431): pid=4656 uid=0 auid=0 ses=22858 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447096201.966:698432): pid=4656 uid=0 auid=0 ses=22858 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447096201.972:698433): pid=4657 uid=0 auid=0 ses=22857 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447096201.978:698434): pid=4657 uid=0 auid=0 ses=22857 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447096201.978:698435): pid=4656 uid=0 auid=0 ses=22858 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447096227.008:698436): pid=4656 uid=0 auid=0 ses=22858 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=CRYPTO_KEY_USER msg=audit(1447096382.656:698437): pid=5230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=5230 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447096382.657:698438): pid=5230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=5230 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447096382.657:698439): pid=5230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=5230 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447096382.700:698440): pid=5229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=5230 suid=74 rport=37821 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447096382.700:698441): pid=5229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=5230 suid=74 rport=37821 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447096382.827:698442): pid=5229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=37821 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447096382.827:698443): pid=5229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=37821 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447096382.836:698444): pid=5229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447096382.838:698445): pid=5229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5230 suid=74 rport=37821 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447096382.841:698446): pid=5229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447096382.841:698447): pid=5229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447096382.841:698448): pid=5229 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22859 res=1
type=USER_ROLE_CHANGE msg=audit(1447096382.909:698449): pid=5229 uid=0 auid=0 ses=22859 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447096382.930:698450): pid=5229 uid=0 auid=0 ses=22859 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447096382.933:698451): pid=5229 uid=0 auid=0 ses=22859 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447096382.933:698452): pid=5229 uid=0 auid=0 ses=22859 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447096382.935:698453): pid=5232 uid=0 auid=0 ses=22859 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=5232 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447096382.935:698454): pid=5232 uid=0 auid=0 ses=22859 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=5232 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447096382.935:698455): pid=5232 uid=0 auid=0 ses=22859 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=5232 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447096382.936:698456): pid=5232 uid=0 auid=0 ses=22859 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447096382.954:698457): pid=5229 uid=0 auid=0 ses=22859 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447096382.954:698458): pid=5229 uid=0 auid=0 ses=22859 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447096382.958:698459): pid=5229 uid=0 auid=0 ses=22859 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447096382.958:698460): pid=5229 uid=0 auid=0 ses=22859 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447096382.959:698461): pid=5229 uid=0 auid=0 ses=22859 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5229 suid=0 rport=37821 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447096382.960:698462): pid=5229 uid=0 auid=0 ses=22859 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=5229 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447096382.960:698463): pid=5229 uid=0 auid=0 ses=22859 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=5229 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447096382.960:698464): pid=5229 uid=0 auid=0 ses=22859 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=5229 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447096382.981:698465): pid=5240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=5240 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447096382.981:698466): pid=5240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=5240 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447096382.981:698467): pid=5240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=5240 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447096383.025:698468): pid=5239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=5240 suid=74 rport=37822 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447096383.026:698469): pid=5239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=5240 suid=74 rport=37822 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447096383.156:698470): pid=5239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=37822 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447096383.156:698471): pid=5239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=37822 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447096383.165:698472): pid=5239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447096383.165:698473): pid=5239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5240 suid=74 rport=37822 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447096383.166:698474): pid=5239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447096383.166:698475): pid=5239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447096383.166:698476): pid=5239 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22860 res=1
type=USER_ROLE_CHANGE msg=audit(1447096383.229:698477): pid=5239 uid=0 auid=0 ses=22860 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447096383.251:698478): pid=5239 uid=0 auid=0 ses=22860 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447096383.254:698479): pid=5239 uid=0 auid=0 ses=22860 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447096383.254:698480): pid=5239 uid=0 auid=0 ses=22860 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447096383.255:698481): pid=5242 uid=0 auid=0 ses=22860 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=5242 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447096383.255:698482): pid=5242 uid=0 auid=0 ses=22860 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=5242 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447096383.255:698483): pid=5242 uid=0 auid=0 ses=22860 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=5242 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447096383.256:698484): pid=5242 uid=0 auid=0 ses=22860 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447096384.535:698485): pid=5239 uid=0 auid=0 ses=22860 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447096384.535:698486): pid=5239 uid=0 auid=0 ses=22860 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447096384.541:698487): pid=5239 uid=0 auid=0 ses=22860 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447096384.542:698488): pid=5239 uid=0 auid=0 ses=22860 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447096384.542:698489): pid=5239 uid=0 auid=0 ses=22860 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5239 suid=0 rport=37822 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447096384.542:698490): pid=5239 uid=0 auid=0 ses=22860 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=5239 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447096384.542:698491): pid=5239 uid=0 auid=0 ses=22860 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=5239 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447096384.542:698492): pid=5239 uid=0 auid=0 ses=22860 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=5239 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447096384.575:698493): pid=5292 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=5292 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447096384.575:698494): pid=5292 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=5292 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447096384.576:698495): pid=5292 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=5292 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447096384.620:698496): pid=5291 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=5292 suid=74 rport=37823 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447096384.620:698497): pid=5291 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=5292 suid=74 rport=37823 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447096384.749:698498): pid=5291 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=37823 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447096384.749:698499): pid=5291 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=37823 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447096384.759:698500): pid=5291 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447096384.760:698501): pid=5291 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5292 suid=74 rport=37823 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447096384.761:698502): pid=5291 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447096384.761:698503): pid=5291 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447096384.761:698504): pid=5291 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22861 res=1
type=USER_ROLE_CHANGE msg=audit(1447096384.829:698505): pid=5291 uid=0 auid=0 ses=22861 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447096384.851:698506): pid=5291 uid=0 auid=0 ses=22861 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447096384.853:698507): pid=5291 uid=0 auid=0 ses=22861 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447096384.853:698508): pid=5291 uid=0 auid=0 ses=22861 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447096384.855:698509): pid=5294 uid=0 auid=0 ses=22861 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=5294 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447096384.855:698510): pid=5294 uid=0 auid=0 ses=22861 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=5294 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447096384.855:698511): pid=5294 uid=0 auid=0 ses=22861 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=5294 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447096384.856:698512): pid=5294 uid=0 auid=0 ses=22861 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447096384.876:698513): pid=5291 uid=0 auid=0 ses=22861 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447096384.877:698514): pid=5291 uid=0 auid=0 ses=22861 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447096384.881:698515): pid=5291 uid=0 auid=0 ses=22861 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447096384.881:698516): pid=5291 uid=0 auid=0 ses=22861 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447096384.882:698517): pid=5291 uid=0 auid=0 ses=22861 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5291 suid=0 rport=37823 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447096384.882:698518): pid=5291 uid=0 auid=0 ses=22861 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=5291 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447096384.882:698519): pid=5291 uid=0 auid=0 ses=22861 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=5291 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447096384.882:698520): pid=5291 uid=0 auid=0 ses=22861 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=5291 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447096801.033:698521): pid=6580 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447096801.034:698522): pid=6579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447096801.034:698524): pid=6579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447096801.034:698523): pid=6580 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447096801.035:698525): pid=6580 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22862 res=1
type=LOGIN msg=audit(1447096801.035:698526): pid=6579 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22863 res=1
type=USER_START msg=audit(1447096801.055:698527): pid=6579 uid=0 auid=0 ses=22863 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447096801.055:698528): pid=6580 uid=0 auid=0 ses=22862 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447096801.056:698529): pid=6579 uid=0 auid=0 ses=22863 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447096801.056:698530): pid=6580 uid=0 auid=0 ses=22862 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447096801.066:698531): pid=6580 uid=0 auid=0 ses=22862 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447096801.071:698532): pid=6579 uid=0 auid=0 ses=22863 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447096801.071:698533): pid=6580 uid=0 auid=0 ses=22862 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447096801.077:698534): pid=6579 uid=0 auid=0 ses=22863 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447097401.092:698536): pid=8426 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447097401.092:698535): pid=8427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447097401.093:698537): pid=8426 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447097401.093:698538): pid=8427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447097401.093:698539): pid=8427 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22864 res=1
type=LOGIN msg=audit(1447097401.093:698540): pid=8426 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22865 res=1
type=USER_START msg=audit(1447097401.108:698541): pid=8427 uid=0 auid=0 ses=22864 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447097401.108:698542): pid=8426 uid=0 auid=0 ses=22865 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447097401.108:698543): pid=8427 uid=0 auid=0 ses=22864 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447097401.108:698544): pid=8426 uid=0 auid=0 ses=22865 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447097401.113:698545): pid=8427 uid=0 auid=0 ses=22864 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447097401.115:698546): pid=8427 uid=0 auid=0 ses=22864 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447097401.123:698547): pid=8426 uid=0 auid=0 ses=22865 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447097426.150:698548): pid=8426 uid=0 auid=0 ses=22865 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=SYSCALL msg=audit(1447097461.759:698549): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=CRYPTO_KEY_USER msg=audit(1447097583.169:698550): pid=8994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=8994 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447097583.170:698551): pid=8994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=8994 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447097583.170:698552): pid=8994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=8994 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447097583.214:698553): pid=8993 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=8994 suid=74 rport=39808 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447097583.215:698554): pid=8993 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=8994 suid=74 rport=39808 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447097583.338:698555): pid=8993 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=39808 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447097583.338:698556): pid=8993 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=39808 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447097583.343:698557): pid=8993 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447097583.344:698558): pid=8993 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8994 suid=74 rport=39808 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447097583.345:698559): pid=8993 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447097583.345:698560): pid=8993 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447097583.345:698561): pid=8993 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22866 res=1
type=USER_ROLE_CHANGE msg=audit(1447097583.414:698562): pid=8993 uid=0 auid=0 ses=22866 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447097583.435:698563): pid=8993 uid=0 auid=0 ses=22866 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447097583.438:698564): pid=8993 uid=0 auid=0 ses=22866 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447097583.438:698565): pid=8993 uid=0 auid=0 ses=22866 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447097583.439:698566): pid=8996 uid=0 auid=0 ses=22866 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=8996 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447097583.439:698567): pid=8996 uid=0 auid=0 ses=22866 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=8996 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447097583.439:698568): pid=8996 uid=0 auid=0 ses=22866 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=8996 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447097583.440:698569): pid=8996 uid=0 auid=0 ses=22866 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447097583.458:698570): pid=8993 uid=0 auid=0 ses=22866 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447097583.459:698571): pid=8993 uid=0 auid=0 ses=22866 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447097583.462:698572): pid=8993 uid=0 auid=0 ses=22866 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447097583.463:698573): pid=8993 uid=0 auid=0 ses=22866 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447097583.463:698574): pid=8993 uid=0 auid=0 ses=22866 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8993 suid=0 rport=39808 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447097583.463:698575): pid=8993 uid=0 auid=0 ses=22866 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=8993 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447097583.463:698576): pid=8993 uid=0 auid=0 ses=22866 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=8993 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447097583.463:698577): pid=8993 uid=0 auid=0 ses=22866 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=8993 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447097583.487:698578): pid=9004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=9004 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447097583.487:698579): pid=9004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=9004 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447097583.487:698580): pid=9004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=9004 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447097583.531:698581): pid=9003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=9004 suid=74 rport=39809 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447097583.531:698582): pid=9003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=9004 suid=74 rport=39809 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447097583.660:698583): pid=9003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=39809 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447097583.660:698584): pid=9003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=39809 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447097583.670:698585): pid=9003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447097583.671:698586): pid=9003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9004 suid=74 rport=39809 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447097583.673:698587): pid=9003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447097583.674:698588): pid=9003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447097583.674:698589): pid=9003 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22867 res=1
type=USER_ROLE_CHANGE msg=audit(1447097583.738:698590): pid=9003 uid=0 auid=0 ses=22867 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447097583.763:698591): pid=9003 uid=0 auid=0 ses=22867 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447097583.765:698592): pid=9003 uid=0 auid=0 ses=22867 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447097583.765:698593): pid=9003 uid=0 auid=0 ses=22867 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447097583.766:698594): pid=9006 uid=0 auid=0 ses=22867 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=9006 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447097583.766:698595): pid=9006 uid=0 auid=0 ses=22867 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=9006 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447097583.766:698596): pid=9006 uid=0 auid=0 ses=22867 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=9006 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447097583.768:698597): pid=9006 uid=0 auid=0 ses=22867 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447097585.050:698598): pid=9003 uid=0 auid=0 ses=22867 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447097585.050:698599): pid=9003 uid=0 auid=0 ses=22867 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447097585.054:698600): pid=9003 uid=0 auid=0 ses=22867 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447097585.054:698601): pid=9003 uid=0 auid=0 ses=22867 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447097585.054:698602): pid=9003 uid=0 auid=0 ses=22867 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9003 suid=0 rport=39809 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447097585.054:698603): pid=9003 uid=0 auid=0 ses=22867 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=9003 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447097585.054:698604): pid=9003 uid=0 auid=0 ses=22867 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=9003 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447097585.055:698605): pid=9003 uid=0 auid=0 ses=22867 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=9003 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447097585.088:698606): pid=9056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=9056 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447097585.088:698607): pid=9056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=9056 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447097585.088:698608): pid=9056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=9056 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447097585.132:698609): pid=9055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=9056 suid=74 rport=39810 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447097585.133:698610): pid=9055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=9056 suid=74 rport=39810 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447097585.257:698611): pid=9055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=39810 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447097585.258:698612): pid=9055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=39810 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447097585.266:698613): pid=9055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447097585.266:698614): pid=9055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9056 suid=74 rport=39810 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447097585.268:698615): pid=9055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447097585.268:698616): pid=9055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447097585.268:698617): pid=9055 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22868 res=1
type=USER_ROLE_CHANGE msg=audit(1447097585.332:698618): pid=9055 uid=0 auid=0 ses=22868 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447097585.350:698619): pid=9055 uid=0 auid=0 ses=22868 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447097585.353:698620): pid=9055 uid=0 auid=0 ses=22868 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447097585.353:698621): pid=9055 uid=0 auid=0 ses=22868 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447097585.355:698622): pid=9058 uid=0 auid=0 ses=22868 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=9058 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447097585.355:698623): pid=9058 uid=0 auid=0 ses=22868 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=9058 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447097585.355:698624): pid=9058 uid=0 auid=0 ses=22868 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=9058 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447097585.355:698625): pid=9058 uid=0 auid=0 ses=22868 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447097585.371:698626): pid=9055 uid=0 auid=0 ses=22868 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447097585.371:698627): pid=9055 uid=0 auid=0 ses=22868 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447097585.373:698628): pid=9055 uid=0 auid=0 ses=22868 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447097585.373:698629): pid=9055 uid=0 auid=0 ses=22868 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447097585.374:698630): pid=9055 uid=0 auid=0 ses=22868 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9055 suid=0 rport=39810 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447097585.374:698631): pid=9055 uid=0 auid=0 ses=22868 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=9055 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447097585.374:698632): pid=9055 uid=0 auid=0 ses=22868 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=9055 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447097585.374:698633): pid=9055 uid=0 auid=0 ses=22868 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=9055 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447098001.173:698634): pid=10304 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447098001.173:698635): pid=10304 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447098001.174:698636): pid=10303 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447098001.174:698637): pid=10304 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22869 res=1
type=CRED_ACQ msg=audit(1447098001.174:698638): pid=10303 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447098001.174:698639): pid=10303 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22870 res=1
type=USER_START msg=audit(1447098001.196:698640): pid=10303 uid=0 auid=0 ses=22870 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447098001.196:698641): pid=10304 uid=0 auid=0 ses=22869 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447098001.196:698642): pid=10303 uid=0 auid=0 ses=22870 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447098001.196:698643): pid=10304 uid=0 auid=0 ses=22869 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447098001.204:698644): pid=10304 uid=0 auid=0 ses=22869 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447098001.206:698645): pid=10304 uid=0 auid=0 ses=22869 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447098001.214:698646): pid=10303 uid=0 auid=0 ses=22870 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447098001.215:698647): pid=10303 uid=0 auid=0 ses=22870 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1447098498.759:698648): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447098601.234:698649): pid=12151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447098601.234:698650): pid=12150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447098601.234:698651): pid=12150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447098601.234:698652): pid=12151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447098601.234:698653): pid=12151 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22871 res=1
type=LOGIN msg=audit(1447098601.234:698654): pid=12150 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22872 res=1
type=USER_START msg=audit(1447098601.249:698655): pid=12150 uid=0 auid=0 ses=22872 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447098601.249:698656): pid=12150 uid=0 auid=0 ses=22872 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447098601.251:698657): pid=12151 uid=0 auid=0 ses=22871 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447098601.251:698658): pid=12151 uid=0 auid=0 ses=22871 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447098601.257:698659): pid=12151 uid=0 auid=0 ses=22871 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447098601.259:698660): pid=12151 uid=0 auid=0 ses=22871 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447098601.265:698661): pid=12150 uid=0 auid=0 ses=22872 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447098601.266:698662): pid=12150 uid=0 auid=0 ses=22872 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447098782.950:698663): pid=12756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12756 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447098782.950:698664): pid=12756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12756 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447098782.950:698665): pid=12756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12756 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447098782.995:698666): pid=12755 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=12756 suid=74 rport=41790 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447098782.996:698667): pid=12755 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=12756 suid=74 rport=41790 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447098783.120:698668): pid=12755 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=41790 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447098783.120:698669): pid=12755 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=41790 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447098783.126:698670): pid=12755 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447098783.128:698671): pid=12755 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12756 suid=74 rport=41790 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447098783.129:698672): pid=12755 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447098783.130:698673): pid=12755 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447098783.130:698674): pid=12755 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22873 res=1
type=USER_ROLE_CHANGE msg=audit(1447098783.198:698675): pid=12755 uid=0 auid=0 ses=22873 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447098783.220:698676): pid=12755 uid=0 auid=0 ses=22873 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447098783.223:698677): pid=12755 uid=0 auid=0 ses=22873 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447098783.223:698678): pid=12755 uid=0 auid=0 ses=22873 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447098783.225:698679): pid=12758 uid=0 auid=0 ses=22873 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12758 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447098783.225:698680): pid=12758 uid=0 auid=0 ses=22873 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12758 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447098783.225:698681): pid=12758 uid=0 auid=0 ses=22873 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12758 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447098783.225:698682): pid=12758 uid=0 auid=0 ses=22873 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447098783.244:698683): pid=12755 uid=0 auid=0 ses=22873 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447098783.244:698684): pid=12755 uid=0 auid=0 ses=22873 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447098783.248:698685): pid=12755 uid=0 auid=0 ses=22873 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447098783.248:698686): pid=12755 uid=0 auid=0 ses=22873 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447098783.249:698687): pid=12755 uid=0 auid=0 ses=22873 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12755 suid=0 rport=41790 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447098783.249:698688): pid=12755 uid=0 auid=0 ses=22873 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12755 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447098783.249:698689): pid=12755 uid=0 auid=0 ses=22873 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12755 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447098783.249:698690): pid=12755 uid=0 auid=0 ses=22873 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12755 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447098783.270:698691): pid=12766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12766 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447098783.271:698692): pid=12766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12766 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447098783.271:698693): pid=12766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12766 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447098783.315:698694): pid=12765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=12766 suid=74 rport=41791 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447098783.315:698695): pid=12765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=12766 suid=74 rport=41791 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447098783.440:698696): pid=12765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=41791 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447098783.440:698697): pid=12765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=41791 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447098783.448:698698): pid=12765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447098783.449:698699): pid=12765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12766 suid=74 rport=41791 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447098783.451:698700): pid=12765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447098783.451:698701): pid=12765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447098783.451:698702): pid=12765 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22874 res=1
type=USER_ROLE_CHANGE msg=audit(1447098783.516:698703): pid=12765 uid=0 auid=0 ses=22874 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447098783.541:698704): pid=12765 uid=0 auid=0 ses=22874 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447098783.544:698705): pid=12765 uid=0 auid=0 ses=22874 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447098783.545:698706): pid=12765 uid=0 auid=0 ses=22874 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447098783.546:698707): pid=12768 uid=0 auid=0 ses=22874 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12768 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447098783.546:698708): pid=12768 uid=0 auid=0 ses=22874 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12768 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447098783.546:698709): pid=12768 uid=0 auid=0 ses=22874 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12768 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447098783.547:698710): pid=12768 uid=0 auid=0 ses=22874 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447098784.822:698711): pid=12765 uid=0 auid=0 ses=22874 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447098784.822:698712): pid=12765 uid=0 auid=0 ses=22874 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447098784.827:698713): pid=12765 uid=0 auid=0 ses=22874 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447098784.828:698714): pid=12765 uid=0 auid=0 ses=22874 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447098784.828:698715): pid=12765 uid=0 auid=0 ses=22874 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12765 suid=0 rport=41791 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447098784.828:698716): pid=12765 uid=0 auid=0 ses=22874 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12765 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447098784.828:698717): pid=12765 uid=0 auid=0 ses=22874 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12765 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447098784.828:698718): pid=12765 uid=0 auid=0 ses=22874 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12765 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447098784.863:698719): pid=12818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12818 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447098784.863:698720): pid=12818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12818 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447098784.863:698721): pid=12818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12818 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447098784.907:698722): pid=12817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=12818 suid=74 rport=41792 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447098784.907:698723): pid=12817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=12818 suid=74 rport=41792 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447098785.034:698724): pid=12817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=41792 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447098785.034:698725): pid=12817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=41792 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447098785.038:698726): pid=12817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447098785.039:698727): pid=12817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12818 suid=74 rport=41792 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447098785.042:698728): pid=12817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447098785.042:698729): pid=12817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447098785.042:698730): pid=12817 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22875 res=1
type=USER_ROLE_CHANGE msg=audit(1447098785.109:698731): pid=12817 uid=0 auid=0 ses=22875 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447098785.127:698732): pid=12817 uid=0 auid=0 ses=22875 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447098785.130:698733): pid=12817 uid=0 auid=0 ses=22875 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447098785.130:698734): pid=12817 uid=0 auid=0 ses=22875 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447098785.131:698735): pid=12820 uid=0 auid=0 ses=22875 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12820 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447098785.131:698736): pid=12820 uid=0 auid=0 ses=22875 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12820 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447098785.131:698737): pid=12820 uid=0 auid=0 ses=22875 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12820 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447098785.132:698738): pid=12820 uid=0 auid=0 ses=22875 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447098785.148:698739): pid=12817 uid=0 auid=0 ses=22875 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447098785.148:698740): pid=12817 uid=0 auid=0 ses=22875 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447098785.151:698741): pid=12817 uid=0 auid=0 ses=22875 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447098785.151:698742): pid=12817 uid=0 auid=0 ses=22875 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447098785.151:698743): pid=12817 uid=0 auid=0 ses=22875 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12817 suid=0 rport=41792 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447098785.152:698744): pid=12817 uid=0 auid=0 ses=22875 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12817 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447098785.152:698745): pid=12817 uid=0 auid=0 ses=22875 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12817 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447098785.152:698746): pid=12817 uid=0 auid=0 ses=22875 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12817 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447099201.293:698747): pid=14068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447099201.293:698748): pid=14069 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447099201.294:698749): pid=14069 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447099201.294:698750): pid=14068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447099201.295:698751): pid=14069 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22876 res=1
type=LOGIN msg=audit(1447099201.295:698752): pid=14068 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22877 res=1
type=USER_START msg=audit(1447099201.314:698753): pid=14068 uid=0 auid=0 ses=22877 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447099201.314:698754): pid=14068 uid=0 auid=0 ses=22877 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447099201.315:698755): pid=14069 uid=0 auid=0 ses=22876 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447099201.315:698756): pid=14069 uid=0 auid=0 ses=22876 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447099201.325:698757): pid=14069 uid=0 auid=0 ses=22876 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447099201.326:698758): pid=14069 uid=0 auid=0 ses=22876 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447099201.328:698759): pid=14068 uid=0 auid=0 ses=22877 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447099226.355:698760): pid=14068 uid=0 auid=0 ses=22877 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=USER_ACCT msg=audit(1447099261.365:698761): pid=14272 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447099261.365:698762): pid=14272 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447099261.365:698763): pid=14272 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22878 res=1
type=USER_START msg=audit(1447099261.381:698764): pid=14272 uid=0 auid=0 ses=22878 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447099261.382:698765): pid=14272 uid=0 auid=0 ses=22878 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447099261.412:698766): pid=14272 uid=0 auid=0 ses=22878 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447099261.414:698767): pid=14272 uid=0 auid=0 ses=22878 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447099801.426:698769): pid=15973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447099801.426:698768): pid=15974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447099801.427:698771): pid=15973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447099801.427:698770): pid=15974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447099801.428:698772): pid=15973 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22880 res=1
type=LOGIN msg=audit(1447099801.428:698773): pid=15974 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22879 res=1
type=USER_START msg=audit(1447099801.443:698774): pid=15974 uid=0 auid=0 ses=22879 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447099801.443:698775): pid=15973 uid=0 auid=0 ses=22880 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447099801.443:698776): pid=15974 uid=0 auid=0 ses=22879 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447099801.443:698777): pid=15973 uid=0 auid=0 ses=22880 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447099801.450:698778): pid=15974 uid=0 auid=0 ses=22879 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447099801.451:698779): pid=15974 uid=0 auid=0 ses=22879 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447099801.458:698780): pid=15973 uid=0 auid=0 ses=22880 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447099801.459:698781): pid=15973 uid=0 auid=0 ses=22880 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447099983.151:698782): pid=16584 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16584 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447099983.151:698783): pid=16584 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16584 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447099983.151:698784): pid=16584 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16584 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447099983.195:698785): pid=16583 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=16584 suid=74 rport=43771 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447099983.195:698786): pid=16583 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=16584 suid=74 rport=43771 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447099983.325:698787): pid=16583 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=43771 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447099983.325:698788): pid=16583 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=43771 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447099983.334:698789): pid=16583 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447099983.335:698790): pid=16583 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16584 suid=74 rport=43771 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447099983.336:698791): pid=16583 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447099983.336:698792): pid=16583 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447099983.336:698793): pid=16583 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22881 res=1
type=USER_ROLE_CHANGE msg=audit(1447099983.410:698794): pid=16583 uid=0 auid=0 ses=22881 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447099983.437:698795): pid=16583 uid=0 auid=0 ses=22881 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447099983.440:698796): pid=16583 uid=0 auid=0 ses=22881 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447099983.440:698797): pid=16583 uid=0 auid=0 ses=22881 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447099983.441:698798): pid=16586 uid=0 auid=0 ses=22881 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16586 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447099983.441:698799): pid=16586 uid=0 auid=0 ses=22881 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16586 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447099983.441:698800): pid=16586 uid=0 auid=0 ses=22881 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16586 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447099983.442:698801): pid=16586 uid=0 auid=0 ses=22881 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447099983.464:698802): pid=16583 uid=0 auid=0 ses=22881 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447099983.464:698803): pid=16583 uid=0 auid=0 ses=22881 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447099983.468:698804): pid=16583 uid=0 auid=0 ses=22881 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447099983.469:698805): pid=16583 uid=0 auid=0 ses=22881 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447099983.469:698806): pid=16583 uid=0 auid=0 ses=22881 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16583 suid=0 rport=43771 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447099983.469:698807): pid=16583 uid=0 auid=0 ses=22881 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16583 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447099983.469:698808): pid=16583 uid=0 auid=0 ses=22881 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16583 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447099983.469:698809): pid=16583 uid=0 auid=0 ses=22881 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16583 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447099983.489:698810): pid=16594 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16594 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447099983.490:698811): pid=16594 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16594 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447099983.490:698812): pid=16594 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16594 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447099983.535:698813): pid=16593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=16594 suid=74 rport=43773 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447099983.535:698814): pid=16593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=16594 suid=74 rport=43773 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447099983.665:698815): pid=16593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=43773 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447099983.665:698816): pid=16593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=43773 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447099983.673:698817): pid=16593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447099983.675:698818): pid=16593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16594 suid=74 rport=43773 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447099983.677:698819): pid=16593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447099983.677:698820): pid=16593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447099983.677:698821): pid=16593 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22882 res=1
type=USER_ROLE_CHANGE msg=audit(1447099983.745:698822): pid=16593 uid=0 auid=0 ses=22882 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447099983.772:698823): pid=16593 uid=0 auid=0 ses=22882 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447099983.776:698824): pid=16593 uid=0 auid=0 ses=22882 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447099983.776:698825): pid=16593 uid=0 auid=0 ses=22882 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447099983.777:698826): pid=16596 uid=0 auid=0 ses=22882 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16596 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447099983.777:698827): pid=16596 uid=0 auid=0 ses=22882 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16596 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447099983.777:698828): pid=16596 uid=0 auid=0 ses=22882 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16596 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447099983.778:698829): pid=16596 uid=0 auid=0 ses=22882 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447099985.059:698830): pid=16593 uid=0 auid=0 ses=22882 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447099985.059:698831): pid=16593 uid=0 auid=0 ses=22882 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447099985.063:698832): pid=16593 uid=0 auid=0 ses=22882 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447099985.063:698833): pid=16593 uid=0 auid=0 ses=22882 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447099985.064:698834): pid=16593 uid=0 auid=0 ses=22882 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16593 suid=0 rport=43773 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447099985.064:698835): pid=16593 uid=0 auid=0 ses=22882 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16593 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447099985.064:698836): pid=16593 uid=0 auid=0 ses=22882 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16593 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447099985.064:698837): pid=16593 uid=0 auid=0 ses=22882 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16593 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447099985.094:698838): pid=16646 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16646 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447099985.094:698839): pid=16646 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16646 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447099985.094:698840): pid=16646 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16646 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447099985.138:698841): pid=16645 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=16646 suid=74 rport=43774 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447099985.138:698842): pid=16645 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=16646 suid=74 rport=43774 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447099985.261:698843): pid=16645 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=43774 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447099985.261:698844): pid=16645 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=43774 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447099985.268:698845): pid=16645 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447099985.268:698846): pid=16645 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16646 suid=74 rport=43774 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447099985.269:698847): pid=16645 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447099985.269:698848): pid=16645 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447099985.270:698849): pid=16645 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22883 res=1
type=USER_ROLE_CHANGE msg=audit(1447099985.333:698850): pid=16645 uid=0 auid=0 ses=22883 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447099985.357:698851): pid=16645 uid=0 auid=0 ses=22883 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447099985.360:698852): pid=16645 uid=0 auid=0 ses=22883 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447099985.360:698853): pid=16645 uid=0 auid=0 ses=22883 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447099985.361:698854): pid=16648 uid=0 auid=0 ses=22883 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16648 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447099985.362:698855): pid=16648 uid=0 auid=0 ses=22883 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16648 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447099985.362:698856): pid=16648 uid=0 auid=0 ses=22883 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16648 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447099985.362:698857): pid=16648 uid=0 auid=0 ses=22883 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447099985.380:698858): pid=16645 uid=0 auid=0 ses=22883 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447099985.380:698859): pid=16645 uid=0 auid=0 ses=22883 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447099985.382:698860): pid=16645 uid=0 auid=0 ses=22883 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447099985.382:698861): pid=16645 uid=0 auid=0 ses=22883 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447099985.383:698862): pid=16645 uid=0 auid=0 ses=22883 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16645 suid=0 rport=43774 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447099985.383:698863): pid=16645 uid=0 auid=0 ses=22883 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16645 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447099985.383:698864): pid=16645 uid=0 auid=0 ses=22883 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16645 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447099985.383:698865): pid=16645 uid=0 auid=0 ses=22883 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16645 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447100401.486:698866): pid=17898 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447100401.486:698867): pid=17897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447100401.486:698868): pid=17898 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447100401.486:698869): pid=17897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447100401.488:698870): pid=17898 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22884 res=1
type=LOGIN msg=audit(1447100401.488:698871): pid=17897 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22885 res=1
type=USER_START msg=audit(1447100401.505:698872): pid=17898 uid=0 auid=0 ses=22884 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447100401.505:698873): pid=17898 uid=0 auid=0 ses=22884 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447100401.506:698874): pid=17897 uid=0 auid=0 ses=22885 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447100401.506:698875): pid=17897 uid=0 auid=0 ses=22885 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447100401.512:698876): pid=17898 uid=0 auid=0 ses=22884 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447100401.514:698877): pid=17898 uid=0 auid=0 ses=22884 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447100401.522:698878): pid=17897 uid=0 auid=0 ses=22885 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447100401.524:698879): pid=17897 uid=0 auid=0 ses=22885 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1447100599.759:698880): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447101001.544:698881): pid=19741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447101001.544:698882): pid=19741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447101001.544:698883): pid=19742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447101001.544:698884): pid=19742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447101001.544:698885): pid=19741 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22886 res=1
type=LOGIN msg=audit(1447101001.545:698886): pid=19742 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22887 res=1
type=USER_START msg=audit(1447101001.559:698887): pid=19742 uid=0 auid=0 ses=22887 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447101001.559:698888): pid=19742 uid=0 auid=0 ses=22887 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447101001.560:698889): pid=19741 uid=0 auid=0 ses=22886 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447101001.560:698890): pid=19741 uid=0 auid=0 ses=22886 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447101001.567:698891): pid=19742 uid=0 auid=0 ses=22887 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447101001.568:698892): pid=19742 uid=0 auid=0 ses=22887 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447101001.572:698893): pid=19741 uid=0 auid=0 ses=22886 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447101001.576:698894): pid=19741 uid=0 auid=0 ses=22886 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447101182.935:698895): pid=20310 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=20310 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447101182.936:698896): pid=20310 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=20310 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447101182.936:698897): pid=20310 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=20310 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447101182.981:698898): pid=20309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=20310 suid=74 rport=45749 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447101182.981:698899): pid=20309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=20310 suid=74 rport=45749 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447101183.112:698900): pid=20309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=45749 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447101183.112:698901): pid=20309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=45749 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447101183.118:698902): pid=20309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447101183.120:698903): pid=20309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20310 suid=74 rport=45749 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447101183.125:698904): pid=20309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447101183.125:698905): pid=20309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447101183.125:698906): pid=20309 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22888 res=1
type=USER_ROLE_CHANGE msg=audit(1447101183.199:698907): pid=20309 uid=0 auid=0 ses=22888 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447101183.221:698908): pid=20309 uid=0 auid=0 ses=22888 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447101183.224:698909): pid=20309 uid=0 auid=0 ses=22888 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447101183.224:698910): pid=20309 uid=0 auid=0 ses=22888 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447101183.226:698911): pid=20312 uid=0 auid=0 ses=22888 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=20312 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447101183.226:698912): pid=20312 uid=0 auid=0 ses=22888 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=20312 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447101183.226:698913): pid=20312 uid=0 auid=0 ses=22888 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=20312 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447101183.227:698914): pid=20312 uid=0 auid=0 ses=22888 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447101183.246:698915): pid=20309 uid=0 auid=0 ses=22888 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447101183.247:698916): pid=20309 uid=0 auid=0 ses=22888 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447101183.251:698917): pid=20309 uid=0 auid=0 ses=22888 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447101183.251:698918): pid=20309 uid=0 auid=0 ses=22888 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447101183.252:698919): pid=20309 uid=0 auid=0 ses=22888 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20309 suid=0 rport=45749 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447101183.252:698920): pid=20309 uid=0 auid=0 ses=22888 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=20309 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447101183.252:698921): pid=20309 uid=0 auid=0 ses=22888 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=20309 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447101183.252:698922): pid=20309 uid=0 auid=0 ses=22888 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=20309 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447101183.272:698923): pid=20320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=20320 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447101183.272:698924): pid=20320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=20320 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447101183.273:698925): pid=20320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=20320 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447101183.316:698926): pid=20319 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=20320 suid=74 rport=45752 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447101183.316:698927): pid=20319 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=20320 suid=74 rport=45752 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447101183.446:698928): pid=20319 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=45752 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447101183.446:698929): pid=20319 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=45752 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447101183.454:698930): pid=20319 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447101183.455:698931): pid=20319 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20320 suid=74 rport=45752 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447101183.457:698932): pid=20319 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447101183.458:698933): pid=20319 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447101183.458:698934): pid=20319 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22889 res=1
type=USER_ROLE_CHANGE msg=audit(1447101183.522:698935): pid=20319 uid=0 auid=0 ses=22889 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447101183.545:698936): pid=20319 uid=0 auid=0 ses=22889 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447101183.549:698937): pid=20319 uid=0 auid=0 ses=22889 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447101183.549:698938): pid=20319 uid=0 auid=0 ses=22889 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447101183.550:698939): pid=20322 uid=0 auid=0 ses=22889 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=20322 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447101183.551:698940): pid=20322 uid=0 auid=0 ses=22889 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=20322 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447101183.551:698941): pid=20322 uid=0 auid=0 ses=22889 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=20322 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447101183.551:698942): pid=20322 uid=0 auid=0 ses=22889 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447101184.840:698943): pid=20319 uid=0 auid=0 ses=22889 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447101184.840:698944): pid=20319 uid=0 auid=0 ses=22889 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447101184.846:698945): pid=20319 uid=0 auid=0 ses=22889 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447101184.846:698946): pid=20319 uid=0 auid=0 ses=22889 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447101184.847:698947): pid=20319 uid=0 auid=0 ses=22889 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20319 suid=0 rport=45752 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447101184.847:698948): pid=20319 uid=0 auid=0 ses=22889 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=20319 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447101184.847:698949): pid=20319 uid=0 auid=0 ses=22889 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=20319 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447101184.848:698950): pid=20319 uid=0 auid=0 ses=22889 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=20319 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447101184.877:698951): pid=20409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=20409 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447101184.878:698952): pid=20409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=20409 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447101184.878:698953): pid=20409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=20409 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447101184.922:698954): pid=20408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=20409 suid=74 rport=45755 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447101184.923:698955): pid=20408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=20409 suid=74 rport=45755 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447101185.050:698956): pid=20408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=45755 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447101185.050:698957): pid=20408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=45755 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447101185.059:698958): pid=20408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447101185.059:698959): pid=20408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20409 suid=74 rport=45755 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447101185.061:698960): pid=20408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447101185.062:698961): pid=20408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447101185.062:698962): pid=20408 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22890 res=1
type=USER_ROLE_CHANGE msg=audit(1447101185.133:698963): pid=20408 uid=0 auid=0 ses=22890 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447101185.150:698964): pid=20408 uid=0 auid=0 ses=22890 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447101185.153:698965): pid=20408 uid=0 auid=0 ses=22890 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447101185.153:698966): pid=20408 uid=0 auid=0 ses=22890 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447101185.154:698967): pid=20411 uid=0 auid=0 ses=22890 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=20411 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447101185.154:698968): pid=20411 uid=0 auid=0 ses=22890 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=20411 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447101185.154:698969): pid=20411 uid=0 auid=0 ses=22890 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=20411 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447101185.155:698970): pid=20411 uid=0 auid=0 ses=22890 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447101185.176:698971): pid=20408 uid=0 auid=0 ses=22890 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447101185.176:698972): pid=20408 uid=0 auid=0 ses=22890 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447101185.183:698973): pid=20408 uid=0 auid=0 ses=22890 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447101185.183:698974): pid=20408 uid=0 auid=0 ses=22890 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447101185.184:698975): pid=20408 uid=0 auid=0 ses=22890 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20408 suid=0 rport=45755 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447101185.184:698976): pid=20408 uid=0 auid=0 ses=22890 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=20408 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447101185.184:698977): pid=20408 uid=0 auid=0 ses=22890 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=20408 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447101185.184:698978): pid=20408 uid=0 auid=0 ses=22890 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=20408 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447101601.603:698979): pid=21658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447101601.603:698980): pid=21659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447101601.603:698981): pid=21658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447101601.603:698982): pid=21659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447101601.605:698983): pid=21658 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22891 res=1
type=LOGIN msg=audit(1447101601.605:698984): pid=21659 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22892 res=1
type=USER_START msg=audit(1447101601.623:698985): pid=21659 uid=0 auid=0 ses=22892 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447101601.624:698986): pid=21658 uid=0 auid=0 ses=22891 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447101601.624:698987): pid=21659 uid=0 auid=0 ses=22892 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447101601.624:698988): pid=21658 uid=0 auid=0 ses=22891 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447101601.631:698989): pid=21659 uid=0 auid=0 ses=22892 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447101601.632:698990): pid=21659 uid=0 auid=0 ses=22892 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447101601.639:698991): pid=21658 uid=0 auid=0 ses=22891 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447101601.641:698992): pid=21658 uid=0 auid=0 ses=22891 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447102201.659:698994): pid=23484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447102201.659:698993): pid=23483 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447102201.659:698995): pid=23483 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447102201.659:698996): pid=23484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447102201.660:698997): pid=23484 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22893 res=1
type=LOGIN msg=audit(1447102201.660:698998): pid=23483 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22894 res=1
type=USER_START msg=audit(1447102201.674:698999): pid=23484 uid=0 auid=0 ses=22893 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447102201.674:699000): pid=23483 uid=0 auid=0 ses=22894 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447102201.674:699001): pid=23484 uid=0 auid=0 ses=22893 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447102201.674:699002): pid=23483 uid=0 auid=0 ses=22894 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447102201.680:699003): pid=23484 uid=0 auid=0 ses=22893 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447102201.682:699004): pid=23484 uid=0 auid=0 ses=22893 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447102201.686:699005): pid=23483 uid=0 auid=0 ses=22894 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447102201.688:699006): pid=23483 uid=0 auid=0 ses=22894 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447102383.195:699007): pid=24062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=24062 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447102383.195:699008): pid=24062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=24062 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447102383.195:699009): pid=24062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=24062 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447102383.239:699010): pid=24061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=24062 suid=74 rport=47732 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447102383.240:699011): pid=24061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=24062 suid=74 rport=47732 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447102383.369:699012): pid=24061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=47732 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447102383.369:699013): pid=24061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=47732 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447102383.378:699014): pid=24061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447102383.379:699015): pid=24061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24062 suid=74 rport=47732 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447102383.381:699016): pid=24061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447102383.381:699017): pid=24061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447102383.381:699018): pid=24061 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22895 res=1
type=USER_ROLE_CHANGE msg=audit(1447102383.451:699019): pid=24061 uid=0 auid=0 ses=22895 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447102383.475:699020): pid=24061 uid=0 auid=0 ses=22895 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447102383.478:699021): pid=24061 uid=0 auid=0 ses=22895 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447102383.478:699022): pid=24061 uid=0 auid=0 ses=22895 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447102383.479:699023): pid=24064 uid=0 auid=0 ses=22895 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=24064 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447102383.479:699024): pid=24064 uid=0 auid=0 ses=22895 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=24064 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447102383.479:699025): pid=24064 uid=0 auid=0 ses=22895 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=24064 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447102383.480:699026): pid=24064 uid=0 auid=0 ses=22895 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447102383.498:699027): pid=24061 uid=0 auid=0 ses=22895 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447102383.498:699028): pid=24061 uid=0 auid=0 ses=22895 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447102383.503:699029): pid=24061 uid=0 auid=0 ses=22895 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447102383.503:699030): pid=24061 uid=0 auid=0 ses=22895 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447102383.504:699031): pid=24061 uid=0 auid=0 ses=22895 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24061 suid=0 rport=47732 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447102383.504:699032): pid=24061 uid=0 auid=0 ses=22895 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=24061 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447102383.505:699033): pid=24061 uid=0 auid=0 ses=22895 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=24061 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447102383.505:699034): pid=24061 uid=0 auid=0 ses=22895 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=24061 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447102383.524:699035): pid=24072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=24072 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447102383.525:699036): pid=24072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=24072 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447102383.525:699037): pid=24072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=24072 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447102383.569:699038): pid=24071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=24072 suid=74 rport=47735 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447102383.570:699039): pid=24071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=24072 suid=74 rport=47735 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447102383.695:699040): pid=24071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=47735 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447102383.695:699041): pid=24071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=47735 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447102383.701:699042): pid=24071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447102383.702:699043): pid=24071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24072 suid=74 rport=47735 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447102383.703:699044): pid=24071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447102383.703:699045): pid=24071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447102383.703:699046): pid=24071 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22896 res=1
type=USER_ROLE_CHANGE msg=audit(1447102383.769:699047): pid=24071 uid=0 auid=0 ses=22896 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447102383.793:699048): pid=24071 uid=0 auid=0 ses=22896 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447102383.795:699049): pid=24071 uid=0 auid=0 ses=22896 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447102383.795:699050): pid=24071 uid=0 auid=0 ses=22896 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447102383.797:699051): pid=24076 uid=0 auid=0 ses=22896 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=24076 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447102383.797:699052): pid=24076 uid=0 auid=0 ses=22896 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=24076 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447102383.797:699053): pid=24076 uid=0 auid=0 ses=22896 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=24076 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447102383.798:699054): pid=24076 uid=0 auid=0 ses=22896 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447102385.085:699055): pid=24071 uid=0 auid=0 ses=22896 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447102385.085:699056): pid=24071 uid=0 auid=0 ses=22896 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447102385.091:699057): pid=24071 uid=0 auid=0 ses=22896 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447102385.091:699058): pid=24071 uid=0 auid=0 ses=22896 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447102385.092:699059): pid=24071 uid=0 auid=0 ses=22896 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24071 suid=0 rport=47735 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447102385.092:699060): pid=24071 uid=0 auid=0 ses=22896 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=24071 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447102385.092:699061): pid=24071 uid=0 auid=0 ses=22896 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=24071 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447102385.092:699062): pid=24071 uid=0 auid=0 ses=22896 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=24071 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447102385.122:699063): pid=24171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=24171 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447102385.123:699064): pid=24171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=24171 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447102385.123:699065): pid=24171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=24171 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447102385.168:699066): pid=24170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=24171 suid=74 rport=47738 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447102385.168:699067): pid=24170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=24171 suid=74 rport=47738 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447102385.299:699068): pid=24170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=47738 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447102385.299:699069): pid=24170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=47738 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447102385.307:699070): pid=24170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447102385.308:699071): pid=24170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24171 suid=74 rport=47738 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447102385.310:699072): pid=24170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447102385.310:699073): pid=24170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447102385.310:699074): pid=24170 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22897 res=1
type=USER_ROLE_CHANGE msg=audit(1447102385.376:699075): pid=24170 uid=0 auid=0 ses=22897 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447102385.401:699076): pid=24170 uid=0 auid=0 ses=22897 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447102385.403:699077): pid=24170 uid=0 auid=0 ses=22897 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447102385.403:699078): pid=24170 uid=0 auid=0 ses=22897 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447102385.405:699079): pid=24173 uid=0 auid=0 ses=22897 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=24173 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447102385.405:699080): pid=24173 uid=0 auid=0 ses=22897 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=24173 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447102385.405:699081): pid=24173 uid=0 auid=0 ses=22897 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=24173 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447102385.406:699082): pid=24173 uid=0 auid=0 ses=22897 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447102385.424:699083): pid=24170 uid=0 auid=0 ses=22897 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447102385.424:699084): pid=24170 uid=0 auid=0 ses=22897 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447102385.429:699085): pid=24170 uid=0 auid=0 ses=22897 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447102385.429:699086): pid=24170 uid=0 auid=0 ses=22897 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447102385.430:699087): pid=24170 uid=0 auid=0 ses=22897 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24170 suid=0 rport=47738 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447102385.430:699088): pid=24170 uid=0 auid=0 ses=22897 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=24170 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447102385.430:699089): pid=24170 uid=0 auid=0 ses=22897 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=24170 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447102385.430:699090): pid=24170 uid=0 auid=0 ses=22897 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=24170 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=SYSCALL msg=audit(1447102724.758:699091): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447102801.711:699092): pid=25360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447102801.711:699093): pid=25359 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447102801.711:699094): pid=25360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447102801.711:699095): pid=25359 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447102801.713:699096): pid=25360 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22898 res=1
type=LOGIN msg=audit(1447102801.713:699097): pid=25359 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22899 res=1
type=USER_START msg=audit(1447102801.734:699098): pid=25359 uid=0 auid=0 ses=22899 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447102801.735:699099): pid=25360 uid=0 auid=0 ses=22898 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447102801.735:699100): pid=25359 uid=0 auid=0 ses=22899 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447102801.736:699101): pid=25360 uid=0 auid=0 ses=22898 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447102801.745:699102): pid=25360 uid=0 auid=0 ses=22898 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447102801.748:699103): pid=25360 uid=0 auid=0 ses=22898 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447102801.752:699104): pid=25359 uid=0 auid=0 ses=22899 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447102801.756:699105): pid=25359 uid=0 auid=0 ses=22899 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447102861.767:699106): pid=25595 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447102861.767:699107): pid=25595 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447102861.768:699108): pid=25595 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22900 res=1
type=USER_START msg=audit(1447102861.778:699109): pid=25595 uid=0 auid=0 ses=22900 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447102861.779:699110): pid=25595 uid=0 auid=0 ses=22900 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447102861.803:699111): pid=25595 uid=0 auid=0 ses=22900 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447102861.805:699112): pid=25595 uid=0 auid=0 ses=22900 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447103401.821:699113): pid=27262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447103401.821:699114): pid=27263 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447103401.822:699115): pid=27262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447103401.822:699116): pid=27263 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447103401.822:699117): pid=27263 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22902 res=1
type=LOGIN msg=audit(1447103401.822:699118): pid=27262 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22901 res=1
type=USER_START msg=audit(1447103401.835:699119): pid=27262 uid=0 auid=0 ses=22901 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447103401.836:699120): pid=27262 uid=0 auid=0 ses=22901 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447103401.836:699121): pid=27263 uid=0 auid=0 ses=22902 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447103401.837:699122): pid=27263 uid=0 auid=0 ses=22902 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447103401.843:699123): pid=27263 uid=0 auid=0 ses=22902 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447103401.844:699124): pid=27263 uid=0 auid=0 ses=22902 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447103401.850:699125): pid=27262 uid=0 auid=0 ses=22901 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447103401.851:699126): pid=27262 uid=0 auid=0 ses=22901 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447103583.173:699127): pid=27826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=27826 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447103583.173:699128): pid=27826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=27826 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447103583.173:699129): pid=27826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27826 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447103583.218:699130): pid=27825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=27826 suid=74 rport=49714 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447103583.218:699131): pid=27825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=27826 suid=74 rport=49714 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447103583.341:699132): pid=27825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=49714 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447103583.341:699133): pid=27825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=49714 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447103583.345:699134): pid=27825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447103583.346:699135): pid=27825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27826 suid=74 rport=49714 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447103583.347:699136): pid=27825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447103583.347:699137): pid=27825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447103583.347:699138): pid=27825 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22903 res=1
type=USER_ROLE_CHANGE msg=audit(1447103583.416:699139): pid=27825 uid=0 auid=0 ses=22903 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447103583.434:699140): pid=27825 uid=0 auid=0 ses=22903 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447103583.437:699141): pid=27825 uid=0 auid=0 ses=22903 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447103583.437:699142): pid=27825 uid=0 auid=0 ses=22903 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447103583.439:699143): pid=27832 uid=0 auid=0 ses=22903 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=27832 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447103583.439:699144): pid=27832 uid=0 auid=0 ses=22903 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=27832 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447103583.439:699145): pid=27832 uid=0 auid=0 ses=22903 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27832 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447103583.440:699146): pid=27832 uid=0 auid=0 ses=22903 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447103583.461:699147): pid=27825 uid=0 auid=0 ses=22903 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447103583.461:699148): pid=27825 uid=0 auid=0 ses=22903 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447103583.465:699149): pid=27825 uid=0 auid=0 ses=22903 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447103583.465:699150): pid=27825 uid=0 auid=0 ses=22903 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447103583.466:699151): pid=27825 uid=0 auid=0 ses=22903 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27825 suid=0 rport=49714 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447103583.466:699152): pid=27825 uid=0 auid=0 ses=22903 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=27825 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447103583.466:699153): pid=27825 uid=0 auid=0 ses=22903 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=27825 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447103583.466:699154): pid=27825 uid=0 auid=0 ses=22903 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27825 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447103583.489:699155): pid=27846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=27846 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447103583.489:699156): pid=27846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=27846 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447103583.489:699157): pid=27846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27846 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447103583.534:699158): pid=27844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=27846 suid=74 rport=49715 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447103583.534:699159): pid=27844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=27846 suid=74 rport=49715 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447103583.664:699160): pid=27844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=49715 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447103583.664:699161): pid=27844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=49715 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447103583.669:699162): pid=27844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447103583.670:699163): pid=27844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27846 suid=74 rport=49715 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447103583.674:699164): pid=27844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447103583.674:699165): pid=27844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447103583.674:699166): pid=27844 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22904 res=1
type=USER_ROLE_CHANGE msg=audit(1447103583.739:699167): pid=27844 uid=0 auid=0 ses=22904 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447103583.761:699168): pid=27844 uid=0 auid=0 ses=22904 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447103583.763:699169): pid=27844 uid=0 auid=0 ses=22904 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447103583.764:699170): pid=27844 uid=0 auid=0 ses=22904 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447103583.765:699171): pid=27848 uid=0 auid=0 ses=22904 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=27848 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447103583.765:699172): pid=27848 uid=0 auid=0 ses=22904 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=27848 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447103583.765:699173): pid=27848 uid=0 auid=0 ses=22904 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27848 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447103583.766:699174): pid=27848 uid=0 auid=0 ses=22904 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447103585.055:699175): pid=27844 uid=0 auid=0 ses=22904 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447103585.056:699176): pid=27844 uid=0 auid=0 ses=22904 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447103585.061:699177): pid=27844 uid=0 auid=0 ses=22904 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447103585.061:699178): pid=27844 uid=0 auid=0 ses=22904 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447103585.062:699179): pid=27844 uid=0 auid=0 ses=22904 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27844 suid=0 rport=49715 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447103585.062:699180): pid=27844 uid=0 auid=0 ses=22904 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=27844 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447103585.062:699181): pid=27844 uid=0 auid=0 ses=22904 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=27844 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447103585.062:699182): pid=27844 uid=0 auid=0 ses=22904 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27844 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447103585.096:699183): pid=27898 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=27898 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447103585.097:699184): pid=27898 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=27898 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447103585.097:699185): pid=27898 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27898 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447103585.141:699186): pid=27897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=27898 suid=74 rport=49720 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447103585.141:699187): pid=27897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=27898 suid=74 rport=49720 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447103585.262:699188): pid=27897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=49720 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447103585.262:699189): pid=27897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=49720 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447103585.270:699190): pid=27897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447103585.270:699191): pid=27897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27898 suid=74 rport=49720 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447103585.271:699192): pid=27897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447103585.271:699193): pid=27897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447103585.272:699194): pid=27897 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22905 res=1
type=USER_ROLE_CHANGE msg=audit(1447103585.337:699195): pid=27897 uid=0 auid=0 ses=22905 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447103585.358:699196): pid=27897 uid=0 auid=0 ses=22905 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447103585.360:699197): pid=27897 uid=0 auid=0 ses=22905 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447103585.361:699198): pid=27897 uid=0 auid=0 ses=22905 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447103585.362:699199): pid=27900 uid=0 auid=0 ses=22905 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=27900 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447103585.362:699200): pid=27900 uid=0 auid=0 ses=22905 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=27900 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447103585.362:699201): pid=27900 uid=0 auid=0 ses=22905 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27900 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447103585.363:699202): pid=27900 uid=0 auid=0 ses=22905 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447103585.379:699203): pid=27897 uid=0 auid=0 ses=22905 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447103585.380:699204): pid=27897 uid=0 auid=0 ses=22905 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447103585.384:699205): pid=27897 uid=0 auid=0 ses=22905 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447103585.385:699206): pid=27897 uid=0 auid=0 ses=22905 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447103585.385:699207): pid=27897 uid=0 auid=0 ses=22905 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27897 suid=0 rport=49720 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447103585.385:699208): pid=27897 uid=0 auid=0 ses=22905 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=27897 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447103585.385:699209): pid=27897 uid=0 auid=0 ses=22905 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=27897 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447103585.385:699210): pid=27897 uid=0 auid=0 ses=22905 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27897 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=SYSCALL msg=audit(1447103748.759:699211): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447104001.876:699212): pid=29185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447104001.876:699213): pid=29186 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447104001.876:699214): pid=29185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447104001.876:699215): pid=29186 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447104001.878:699217): pid=29186 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22907 res=1
type=LOGIN msg=audit(1447104001.878:699216): pid=29185 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22906 res=1
type=USER_START msg=audit(1447104001.897:699218): pid=29186 uid=0 auid=0 ses=22907 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447104001.897:699219): pid=29186 uid=0 auid=0 ses=22907 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447104001.898:699220): pid=29185 uid=0 auid=0 ses=22906 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447104001.898:699221): pid=29185 uid=0 auid=0 ses=22906 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447104001.912:699222): pid=29186 uid=0 auid=0 ses=22907 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447104001.913:699223): pid=29186 uid=0 auid=0 ses=22907 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447104001.915:699224): pid=29185 uid=0 auid=0 ses=22906 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447104001.919:699225): pid=29185 uid=0 auid=0 ses=22906 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447104601.936:699226): pid=31147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447104601.936:699227): pid=31147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447104601.937:699228): pid=31147 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22908 res=1
type=USER_ACCT msg=audit(1447104601.937:699229): pid=31146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447104601.937:699230): pid=31146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447104601.937:699231): pid=31146 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22909 res=1
type=USER_START msg=audit(1447104601.952:699232): pid=31147 uid=0 auid=0 ses=22908 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447104601.952:699233): pid=31147 uid=0 auid=0 ses=22908 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447104601.953:699234): pid=31146 uid=0 auid=0 ses=22909 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447104601.953:699235): pid=31146 uid=0 auid=0 ses=22909 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447104601.960:699236): pid=31147 uid=0 auid=0 ses=22908 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447104601.962:699237): pid=31147 uid=0 auid=0 ses=22908 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447104601.968:699238): pid=31146 uid=0 auid=0 ses=22909 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447104601.969:699239): pid=31146 uid=0 auid=0 ses=22909 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447104783.299:699240): pid=31712 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=31712 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447104783.299:699241): pid=31712 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=31712 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447104783.299:699242): pid=31712 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=31712 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447104783.346:699243): pid=31711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=31712 suid=74 rport=51695 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447104783.346:699244): pid=31711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=31712 suid=74 rport=51695 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447104783.475:699245): pid=31711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=51695 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447104783.475:699246): pid=31711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=51695 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447104783.482:699247): pid=31711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447104783.483:699248): pid=31711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=31712 suid=74 rport=51695 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447104783.485:699249): pid=31711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447104783.485:699250): pid=31711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447104783.485:699251): pid=31711 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22910 res=1
type=USER_ROLE_CHANGE msg=audit(1447104783.556:699252): pid=31711 uid=0 auid=0 ses=22910 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447104783.575:699253): pid=31711 uid=0 auid=0 ses=22910 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447104783.579:699254): pid=31711 uid=0 auid=0 ses=22910 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447104783.579:699255): pid=31711 uid=0 auid=0 ses=22910 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447104783.581:699256): pid=31714 uid=0 auid=0 ses=22910 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=31714 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447104783.581:699257): pid=31714 uid=0 auid=0 ses=22910 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=31714 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447104783.581:699258): pid=31714 uid=0 auid=0 ses=22910 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=31714 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447104783.581:699259): pid=31714 uid=0 auid=0 ses=22910 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447104783.603:699260): pid=31711 uid=0 auid=0 ses=22910 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447104783.603:699261): pid=31711 uid=0 auid=0 ses=22910 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447104783.608:699262): pid=31711 uid=0 auid=0 ses=22910 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447104783.608:699263): pid=31711 uid=0 auid=0 ses=22910 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447104783.609:699264): pid=31711 uid=0 auid=0 ses=22910 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=31711 suid=0 rport=51695 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447104783.609:699265): pid=31711 uid=0 auid=0 ses=22910 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=31711 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447104783.609:699266): pid=31711 uid=0 auid=0 ses=22910 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=31711 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447104783.609:699267): pid=31711 uid=0 auid=0 ses=22910 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=31711 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447104783.630:699268): pid=31722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=31722 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447104783.630:699269): pid=31722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=31722 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447104783.630:699270): pid=31722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=31722 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447104783.676:699271): pid=31721 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=31722 suid=74 rport=51696 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447104783.676:699272): pid=31721 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=31722 suid=74 rport=51696 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447104783.805:699273): pid=31721 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=51696 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447104783.805:699274): pid=31721 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=51696 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447104783.814:699275): pid=31721 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447104783.815:699276): pid=31721 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=31722 suid=74 rport=51696 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447104783.816:699277): pid=31721 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447104783.816:699278): pid=31721 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447104783.816:699279): pid=31721 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22911 res=1
type=USER_ROLE_CHANGE msg=audit(1447104783.880:699280): pid=31721 uid=0 auid=0 ses=22911 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447104783.903:699281): pid=31721 uid=0 auid=0 ses=22911 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447104783.906:699282): pid=31721 uid=0 auid=0 ses=22911 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447104783.906:699283): pid=31721 uid=0 auid=0 ses=22911 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447104783.908:699284): pid=31724 uid=0 auid=0 ses=22911 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=31724 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447104783.908:699285): pid=31724 uid=0 auid=0 ses=22911 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=31724 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447104783.908:699286): pid=31724 uid=0 auid=0 ses=22911 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=31724 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447104783.908:699287): pid=31724 uid=0 auid=0 ses=22911 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447104785.161:699288): pid=31721 uid=0 auid=0 ses=22911 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447104785.161:699289): pid=31721 uid=0 auid=0 ses=22911 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447104785.166:699290): pid=31721 uid=0 auid=0 ses=22911 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447104785.166:699291): pid=31721 uid=0 auid=0 ses=22911 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447104785.166:699292): pid=31721 uid=0 auid=0 ses=22911 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=31721 suid=0 rport=51696 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447104785.167:699293): pid=31721 uid=0 auid=0 ses=22911 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=31721 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447104785.167:699294): pid=31721 uid=0 auid=0 ses=22911 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=31721 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447104785.167:699295): pid=31721 uid=0 auid=0 ses=22911 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=31721 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447104785.199:699296): pid=31778 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=31778 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447104785.199:699297): pid=31778 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=31778 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447104785.199:699298): pid=31778 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=31778 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447104785.245:699299): pid=31777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=31778 suid=74 rport=51699 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447104785.245:699300): pid=31777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=31778 suid=74 rport=51699 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447104785.376:699301): pid=31777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=51699 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447104785.376:699302): pid=31777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=51699 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447104785.384:699303): pid=31777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447104785.386:699304): pid=31777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=31778 suid=74 rport=51699 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447104785.388:699305): pid=31777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447104785.388:699306): pid=31777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447104785.389:699307): pid=31777 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22912 res=1
type=USER_ROLE_CHANGE msg=audit(1447104785.452:699308): pid=31777 uid=0 auid=0 ses=22912 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447104785.474:699309): pid=31777 uid=0 auid=0 ses=22912 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447104785.477:699310): pid=31777 uid=0 auid=0 ses=22912 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447104785.477:699311): pid=31777 uid=0 auid=0 ses=22912 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447104785.479:699312): pid=31780 uid=0 auid=0 ses=22912 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=31780 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447104785.479:699313): pid=31780 uid=0 auid=0 ses=22912 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=31780 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447104785.479:699314): pid=31780 uid=0 auid=0 ses=22912 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=31780 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447104785.479:699315): pid=31780 uid=0 auid=0 ses=22912 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447104785.500:699316): pid=31777 uid=0 auid=0 ses=22912 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447104785.500:699317): pid=31777 uid=0 auid=0 ses=22912 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447104785.505:699318): pid=31777 uid=0 auid=0 ses=22912 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447104785.505:699319): pid=31777 uid=0 auid=0 ses=22912 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447104785.505:699320): pid=31777 uid=0 auid=0 ses=22912 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=31777 suid=0 rport=51699 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447104785.506:699321): pid=31777 uid=0 auid=0 ses=22912 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=31777 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447104785.506:699322): pid=31777 uid=0 auid=0 ses=22912 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=31777 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447104785.506:699323): pid=31777 uid=0 auid=0 ses=22912 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=31777 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=SYSCALL msg=audit(1447104817.747:699324): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447105201.993:699325): pid=704 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447105201.993:699326): pid=703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447105201.993:699327): pid=704 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447105201.993:699328): pid=703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447105201.994:699329): pid=704 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22913 res=1
type=LOGIN msg=audit(1447105201.994:699330): pid=703 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22914 res=1
type=USER_START msg=audit(1447105202.015:699331): pid=704 uid=0 auid=0 ses=22913 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447105202.015:699332): pid=703 uid=0 auid=0 ses=22914 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447105202.015:699333): pid=704 uid=0 auid=0 ses=22913 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447105202.015:699334): pid=703 uid=0 auid=0 ses=22914 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447105202.023:699335): pid=704 uid=0 auid=0 ses=22913 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447105202.027:699336): pid=704 uid=0 auid=0 ses=22913 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447105202.031:699337): pid=703 uid=0 auid=0 ses=22914 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447105202.035:699338): pid=703 uid=0 auid=0 ses=22914 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447105801.056:699339): pid=2564 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447105801.056:699340): pid=2564 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447105801.057:699341): pid=2564 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22915 res=1
type=USER_ACCT msg=audit(1447105801.057:699342): pid=2565 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447105801.057:699343): pid=2565 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447105801.057:699344): pid=2565 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22916 res=1
type=USER_START msg=audit(1447105801.072:699345): pid=2564 uid=0 auid=0 ses=22915 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447105801.072:699346): pid=2564 uid=0 auid=0 ses=22915 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447105801.074:699347): pid=2565 uid=0 auid=0 ses=22916 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447105801.074:699348): pid=2565 uid=0 auid=0 ses=22916 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447105801.080:699349): pid=2565 uid=0 auid=0 ses=22916 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447105801.082:699350): pid=2565 uid=0 auid=0 ses=22916 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447105801.089:699351): pid=2564 uid=0 auid=0 ses=22915 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447105801.090:699352): pid=2564 uid=0 auid=0 ses=22915 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1447105903.727:699353): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=CRYPTO_KEY_USER msg=audit(1447105982.576:699354): pid=3128 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=3128 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447105982.576:699355): pid=3128 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=3128 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447105982.576:699356): pid=3128 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=3128 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447105982.620:699357): pid=3127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=3128 suid=74 rport=53676 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447105982.620:699358): pid=3127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=3128 suid=74 rport=53676 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447105982.751:699359): pid=3127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=53676 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447105982.751:699360): pid=3127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=53676 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447105982.757:699361): pid=3127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447105982.759:699362): pid=3127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3128 suid=74 rport=53676 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447105982.762:699363): pid=3127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447105982.763:699364): pid=3127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447105982.763:699365): pid=3127 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22917 res=1
type=USER_ROLE_CHANGE msg=audit(1447105982.831:699366): pid=3127 uid=0 auid=0 ses=22917 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447105982.856:699367): pid=3127 uid=0 auid=0 ses=22917 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447105982.858:699368): pid=3127 uid=0 auid=0 ses=22917 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447105982.858:699369): pid=3127 uid=0 auid=0 ses=22917 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447105982.859:699370): pid=3130 uid=0 auid=0 ses=22917 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=3130 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447105982.859:699371): pid=3130 uid=0 auid=0 ses=22917 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=3130 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447105982.859:699372): pid=3130 uid=0 auid=0 ses=22917 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=3130 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447105982.860:699373): pid=3130 uid=0 auid=0 ses=22917 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447105982.878:699374): pid=3127 uid=0 auid=0 ses=22917 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447105982.878:699375): pid=3127 uid=0 auid=0 ses=22917 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447105982.884:699376): pid=3127 uid=0 auid=0 ses=22917 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447105982.884:699377): pid=3127 uid=0 auid=0 ses=22917 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447105982.885:699378): pid=3127 uid=0 auid=0 ses=22917 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3127 suid=0 rport=53676 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447105982.885:699379): pid=3127 uid=0 auid=0 ses=22917 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=3127 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447105982.885:699380): pid=3127 uid=0 auid=0 ses=22917 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=3127 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447105982.885:699381): pid=3127 uid=0 auid=0 ses=22917 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=3127 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447105982.905:699382): pid=3138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=3138 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447105982.905:699383): pid=3138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=3138 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447105982.906:699384): pid=3138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=3138 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447105982.950:699385): pid=3137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=3138 suid=74 rport=53677 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447105982.951:699386): pid=3137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=3138 suid=74 rport=53677 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447105983.078:699387): pid=3137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=53677 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447105983.078:699388): pid=3137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=53677 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447105983.088:699389): pid=3137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447105983.088:699390): pid=3137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3138 suid=74 rport=53677 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447105983.090:699391): pid=3137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447105983.090:699392): pid=3137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447105983.091:699393): pid=3137 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22918 res=1
type=USER_ROLE_CHANGE msg=audit(1447105983.154:699394): pid=3137 uid=0 auid=0 ses=22918 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447105983.173:699395): pid=3137 uid=0 auid=0 ses=22918 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447105983.176:699396): pid=3137 uid=0 auid=0 ses=22918 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447105983.176:699397): pid=3137 uid=0 auid=0 ses=22918 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447105983.178:699398): pid=3140 uid=0 auid=0 ses=22918 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=3140 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447105983.178:699399): pid=3140 uid=0 auid=0 ses=22918 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=3140 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447105983.178:699400): pid=3140 uid=0 auid=0 ses=22918 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=3140 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447105983.179:699401): pid=3140 uid=0 auid=0 ses=22918 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447105984.438:699402): pid=3137 uid=0 auid=0 ses=22918 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447105984.438:699403): pid=3137 uid=0 auid=0 ses=22918 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447105984.445:699404): pid=3137 uid=0 auid=0 ses=22918 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447105984.445:699405): pid=3137 uid=0 auid=0 ses=22918 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447105984.445:699406): pid=3137 uid=0 auid=0 ses=22918 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3137 suid=0 rport=53677 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447105984.445:699407): pid=3137 uid=0 auid=0 ses=22918 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=3137 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447105984.445:699408): pid=3137 uid=0 auid=0 ses=22918 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=3137 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447105984.445:699409): pid=3137 uid=0 auid=0 ses=22918 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=3137 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447105984.477:699410): pid=3190 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=3190 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447105984.477:699411): pid=3190 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=3190 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447105984.477:699412): pid=3190 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=3190 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447105984.522:699413): pid=3189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=3190 suid=74 rport=53679 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447105984.522:699414): pid=3189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=3190 suid=74 rport=53679 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447105984.652:699415): pid=3189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=53679 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447105984.652:699416): pid=3189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=53679 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447105984.661:699417): pid=3189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447105984.663:699418): pid=3189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3190 suid=74 rport=53679 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447105984.665:699419): pid=3189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447105984.665:699420): pid=3189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447105984.665:699421): pid=3189 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22919 res=1
type=USER_ROLE_CHANGE msg=audit(1447105984.733:699422): pid=3189 uid=0 auid=0 ses=22919 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447105984.757:699423): pid=3189 uid=0 auid=0 ses=22919 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447105984.760:699424): pid=3189 uid=0 auid=0 ses=22919 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447105984.760:699425): pid=3189 uid=0 auid=0 ses=22919 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447105984.762:699426): pid=3196 uid=0 auid=0 ses=22919 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=3196 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447105984.762:699427): pid=3196 uid=0 auid=0 ses=22919 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=3196 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447105984.762:699428): pid=3196 uid=0 auid=0 ses=22919 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=3196 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447105984.762:699429): pid=3196 uid=0 auid=0 ses=22919 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447105984.781:699430): pid=3189 uid=0 auid=0 ses=22919 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447105984.782:699431): pid=3189 uid=0 auid=0 ses=22919 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447105984.787:699432): pid=3189 uid=0 auid=0 ses=22919 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447105984.787:699433): pid=3189 uid=0 auid=0 ses=22919 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447105984.788:699434): pid=3189 uid=0 auid=0 ses=22919 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3189 suid=0 rport=53679 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447105984.788:699435): pid=3189 uid=0 auid=0 ses=22919 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=3189 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447105984.788:699436): pid=3189 uid=0 auid=0 ses=22919 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=3189 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447105984.788:699437): pid=3189 uid=0 auid=0 ses=22919 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=3189 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447106401.116:699438): pid=4480 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447106401.117:699439): pid=4480 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447106401.118:699440): pid=4480 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22920 res=1
type=USER_ACCT msg=audit(1447106401.118:699441): pid=4481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447106401.118:699442): pid=4481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447106401.118:699443): pid=4481 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22921 res=1
type=USER_START msg=audit(1447106401.136:699444): pid=4481 uid=0 auid=0 ses=22921 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447106401.137:699445): pid=4481 uid=0 auid=0 ses=22921 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447106401.138:699446): pid=4480 uid=0 auid=0 ses=22920 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447106401.139:699447): pid=4480 uid=0 auid=0 ses=22920 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447106401.149:699448): pid=4481 uid=0 auid=0 ses=22921 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447106401.151:699449): pid=4481 uid=0 auid=0 ses=22921 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447106401.155:699450): pid=4480 uid=0 auid=0 ses=22920 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447106426.183:699451): pid=4480 uid=0 auid=0 ses=22920 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=USER_ACCT msg=audit(1447106461.198:699452): pid=4684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447106461.199:699453): pid=4684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447106461.199:699454): pid=4684 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22922 res=1
type=USER_START msg=audit(1447106461.211:699455): pid=4684 uid=0 auid=0 ses=22922 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447106461.212:699456): pid=4684 uid=0 auid=0 ses=22922 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447106461.237:699457): pid=4684 uid=0 auid=0 ses=22922 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447106461.238:699458): pid=4684 uid=0 auid=0 ses=22922 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1447106981.716:699459): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447107001.256:699460): pid=6384 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447107001.256:699461): pid=6384 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447107001.257:699462): pid=6384 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22923 res=1
type=USER_ACCT msg=audit(1447107001.257:699463): pid=6385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447107001.257:699464): pid=6385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447107001.257:699465): pid=6385 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22924 res=1
type=USER_START msg=audit(1447107001.270:699466): pid=6384 uid=0 auid=0 ses=22923 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447107001.270:699467): pid=6385 uid=0 auid=0 ses=22924 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447107001.270:699468): pid=6384 uid=0 auid=0 ses=22923 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447107001.270:699469): pid=6385 uid=0 auid=0 ses=22924 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447107001.277:699470): pid=6385 uid=0 auid=0 ses=22924 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447107001.279:699471): pid=6385 uid=0 auid=0 ses=22924 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447107001.281:699472): pid=6384 uid=0 auid=0 ses=22923 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447107001.285:699473): pid=6384 uid=0 auid=0 ses=22923 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447107183.128:699474): pid=6948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=6948 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447107183.128:699475): pid=6948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=6948 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447107183.128:699476): pid=6948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=6948 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447107183.173:699477): pid=6947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=6948 suid=74 rport=55659 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447107183.173:699478): pid=6947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=6948 suid=74 rport=55659 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447107183.297:699479): pid=6947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=55659 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447107183.298:699480): pid=6947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=55659 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447107183.305:699481): pid=6947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447107183.306:699482): pid=6947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6948 suid=74 rport=55659 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447107183.308:699483): pid=6947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447107183.309:699484): pid=6947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447107183.309:699485): pid=6947 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22925 res=1
type=USER_ROLE_CHANGE msg=audit(1447107183.376:699486): pid=6947 uid=0 auid=0 ses=22925 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447107183.395:699487): pid=6947 uid=0 auid=0 ses=22925 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447107183.398:699488): pid=6947 uid=0 auid=0 ses=22925 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447107183.398:699489): pid=6947 uid=0 auid=0 ses=22925 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447107183.400:699490): pid=6950 uid=0 auid=0 ses=22925 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=6950 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447107183.400:699491): pid=6950 uid=0 auid=0 ses=22925 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=6950 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447107183.400:699492): pid=6950 uid=0 auid=0 ses=22925 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=6950 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447107183.401:699493): pid=6950 uid=0 auid=0 ses=22925 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447107183.419:699494): pid=6947 uid=0 auid=0 ses=22925 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447107183.419:699495): pid=6947 uid=0 auid=0 ses=22925 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447107183.422:699496): pid=6947 uid=0 auid=0 ses=22925 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447107183.422:699497): pid=6947 uid=0 auid=0 ses=22925 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447107183.423:699498): pid=6947 uid=0 auid=0 ses=22925 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6947 suid=0 rport=55659 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447107183.423:699499): pid=6947 uid=0 auid=0 ses=22925 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=6947 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447107183.424:699500): pid=6947 uid=0 auid=0 ses=22925 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=6947 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447107183.424:699501): pid=6947 uid=0 auid=0 ses=22925 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=6947 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447107183.446:699502): pid=6958 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=6958 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447107183.446:699503): pid=6958 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=6958 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447107183.446:699504): pid=6958 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=6958 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447107183.491:699505): pid=6957 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=6958 suid=74 rport=55660 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447107183.491:699506): pid=6957 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=6958 suid=74 rport=55660 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447107183.620:699507): pid=6957 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=55660 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447107183.620:699508): pid=6957 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=55660 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447107183.626:699509): pid=6957 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447107183.627:699510): pid=6957 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6958 suid=74 rport=55660 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447107183.628:699511): pid=6957 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447107183.628:699512): pid=6957 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447107183.628:699513): pid=6957 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22926 res=1
type=USER_ROLE_CHANGE msg=audit(1447107183.694:699514): pid=6957 uid=0 auid=0 ses=22926 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447107183.711:699515): pid=6957 uid=0 auid=0 ses=22926 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447107183.714:699516): pid=6957 uid=0 auid=0 ses=22926 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447107183.714:699517): pid=6957 uid=0 auid=0 ses=22926 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447107183.715:699518): pid=6960 uid=0 auid=0 ses=22926 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=6960 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447107183.716:699519): pid=6960 uid=0 auid=0 ses=22926 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=6960 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447107183.716:699520): pid=6960 uid=0 auid=0 ses=22926 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=6960 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447107183.716:699521): pid=6960 uid=0 auid=0 ses=22926 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447107185.041:699522): pid=6957 uid=0 auid=0 ses=22926 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447107185.041:699523): pid=6957 uid=0 auid=0 ses=22926 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447107185.045:699524): pid=6957 uid=0 auid=0 ses=22926 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447107185.045:699525): pid=6957 uid=0 auid=0 ses=22926 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447107185.046:699526): pid=6957 uid=0 auid=0 ses=22926 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6957 suid=0 rport=55660 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447107185.046:699527): pid=6957 uid=0 auid=0 ses=22926 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=6957 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447107185.046:699528): pid=6957 uid=0 auid=0 ses=22926 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=6957 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447107185.046:699529): pid=6957 uid=0 auid=0 ses=22926 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=6957 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447107185.075:699530): pid=7020 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=7020 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447107185.075:699531): pid=7020 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=7020 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447107185.075:699532): pid=7020 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=7020 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447107185.121:699533): pid=7019 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=7020 suid=74 rport=55662 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447107185.121:699534): pid=7019 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=7020 suid=74 rport=55662 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447107185.244:699535): pid=7019 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=55662 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447107185.244:699536): pid=7019 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=55662 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447107185.251:699537): pid=7019 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447107185.252:699538): pid=7019 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7020 suid=74 rport=55662 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447107185.253:699539): pid=7019 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447107185.254:699540): pid=7019 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447107185.254:699541): pid=7019 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22927 res=1
type=USER_ROLE_CHANGE msg=audit(1447107185.319:699542): pid=7019 uid=0 auid=0 ses=22927 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447107185.338:699543): pid=7019 uid=0 auid=0 ses=22927 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447107185.340:699544): pid=7019 uid=0 auid=0 ses=22927 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447107185.340:699545): pid=7019 uid=0 auid=0 ses=22927 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447107185.341:699546): pid=7022 uid=0 auid=0 ses=22927 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=7022 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447107185.342:699547): pid=7022 uid=0 auid=0 ses=22927 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=7022 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447107185.342:699548): pid=7022 uid=0 auid=0 ses=22927 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=7022 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447107185.343:699549): pid=7022 uid=0 auid=0 ses=22927 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447107185.361:699550): pid=7019 uid=0 auid=0 ses=22927 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447107185.361:699551): pid=7019 uid=0 auid=0 ses=22927 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447107185.364:699552): pid=7019 uid=0 auid=0 ses=22927 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447107185.364:699553): pid=7019 uid=0 auid=0 ses=22927 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447107185.364:699554): pid=7019 uid=0 auid=0 ses=22927 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7019 suid=0 rport=55662 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447107185.364:699555): pid=7019 uid=0 auid=0 ses=22927 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=7019 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447107185.364:699556): pid=7019 uid=0 auid=0 ses=22927 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=7019 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447107185.364:699557): pid=7019 uid=0 auid=0 ses=22927 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=7019 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447107601.303:699558): pid=8310 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447107601.303:699559): pid=8309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447107601.303:699560): pid=8310 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447107601.303:699561): pid=8309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447107601.304:699562): pid=8310 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22928 res=1
type=LOGIN msg=audit(1447107601.304:699563): pid=8309 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22929 res=1
type=USER_START msg=audit(1447107601.326:699564): pid=8310 uid=0 auid=0 ses=22928 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447107601.327:699565): pid=8310 uid=0 auid=0 ses=22928 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447107601.327:699566): pid=8309 uid=0 auid=0 ses=22929 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447107601.327:699567): pid=8309 uid=0 auid=0 ses=22929 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447107601.335:699568): pid=8310 uid=0 auid=0 ses=22928 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447107601.339:699569): pid=8310 uid=0 auid=0 ses=22928 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447107601.348:699570): pid=8309 uid=0 auid=0 ses=22929 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447107601.350:699571): pid=8309 uid=0 auid=0 ses=22929 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447108201.365:699573): pid=10154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447108201.365:699572): pid=10153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447108201.365:699574): pid=10154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447108201.365:699575): pid=10153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447108201.365:699576): pid=10154 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22930 res=1
type=LOGIN msg=audit(1447108201.365:699577): pid=10153 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22931 res=1
type=USER_START msg=audit(1447108201.378:699578): pid=10153 uid=0 auid=0 ses=22931 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447108201.379:699579): pid=10153 uid=0 auid=0 ses=22931 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447108201.379:699580): pid=10154 uid=0 auid=0 ses=22930 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447108201.379:699581): pid=10154 uid=0 auid=0 ses=22930 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447108201.388:699582): pid=10154 uid=0 auid=0 ses=22930 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447108201.392:699583): pid=10153 uid=0 auid=0 ses=22931 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447108201.392:699584): pid=10154 uid=0 auid=0 ses=22930 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447108201.395:699585): pid=10153 uid=0 auid=0 ses=22931 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447108383.285:699586): pid=10719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=10719 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447108383.286:699587): pid=10719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=10719 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447108383.286:699588): pid=10719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=10719 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447108383.331:699589): pid=10718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=10719 suid=74 rport=57639 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447108383.331:699590): pid=10718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=10719 suid=74 rport=57639 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447108383.461:699591): pid=10718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=57639 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447108383.461:699592): pid=10718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=57639 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447108383.468:699593): pid=10718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447108383.470:699594): pid=10718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10719 suid=74 rport=57639 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447108383.474:699595): pid=10718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447108383.475:699596): pid=10718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447108383.475:699597): pid=10718 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22932 res=1
type=USER_ROLE_CHANGE msg=audit(1447108383.543:699598): pid=10718 uid=0 auid=0 ses=22932 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447108383.568:699599): pid=10718 uid=0 auid=0 ses=22932 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447108383.571:699600): pid=10718 uid=0 auid=0 ses=22932 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447108383.571:699601): pid=10718 uid=0 auid=0 ses=22932 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447108383.572:699602): pid=10721 uid=0 auid=0 ses=22932 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=10721 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447108383.573:699603): pid=10721 uid=0 auid=0 ses=22932 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=10721 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447108383.573:699604): pid=10721 uid=0 auid=0 ses=22932 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=10721 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447108383.574:699605): pid=10721 uid=0 auid=0 ses=22932 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447108383.596:699606): pid=10718 uid=0 auid=0 ses=22932 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447108383.596:699607): pid=10718 uid=0 auid=0 ses=22932 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447108383.601:699608): pid=10718 uid=0 auid=0 ses=22932 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447108383.602:699609): pid=10718 uid=0 auid=0 ses=22932 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447108383.602:699610): pid=10718 uid=0 auid=0 ses=22932 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10718 suid=0 rport=57639 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447108383.602:699611): pid=10718 uid=0 auid=0 ses=22932 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=10718 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447108383.602:699612): pid=10718 uid=0 auid=0 ses=22932 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=10718 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447108383.602:699613): pid=10718 uid=0 auid=0 ses=22932 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=10718 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447108383.624:699614): pid=10729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=10729 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447108383.624:699615): pid=10729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=10729 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447108383.625:699616): pid=10729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=10729 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447108383.669:699617): pid=10728 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=10729 suid=74 rport=57640 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447108383.669:699618): pid=10728 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=10729 suid=74 rport=57640 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447108383.799:699619): pid=10728 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=57640 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447108383.799:699620): pid=10728 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=57640 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447108383.809:699621): pid=10728 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447108383.809:699622): pid=10728 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10729 suid=74 rport=57640 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447108383.811:699623): pid=10728 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447108383.811:699624): pid=10728 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447108383.811:699625): pid=10728 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22933 res=1
type=USER_ROLE_CHANGE msg=audit(1447108383.878:699626): pid=10728 uid=0 auid=0 ses=22933 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447108383.898:699627): pid=10728 uid=0 auid=0 ses=22933 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447108383.901:699628): pid=10728 uid=0 auid=0 ses=22933 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447108383.901:699629): pid=10728 uid=0 auid=0 ses=22933 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447108383.902:699630): pid=10731 uid=0 auid=0 ses=22933 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=10731 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447108383.903:699631): pid=10731 uid=0 auid=0 ses=22933 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=10731 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447108383.903:699632): pid=10731 uid=0 auid=0 ses=22933 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=10731 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447108383.903:699633): pid=10731 uid=0 auid=0 ses=22933 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447108385.163:699634): pid=10728 uid=0 auid=0 ses=22933 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447108385.163:699635): pid=10728 uid=0 auid=0 ses=22933 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447108385.169:699636): pid=10728 uid=0 auid=0 ses=22933 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447108385.170:699637): pid=10728 uid=0 auid=0 ses=22933 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447108385.170:699638): pid=10728 uid=0 auid=0 ses=22933 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10728 suid=0 rport=57640 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447108385.170:699639): pid=10728 uid=0 auid=0 ses=22933 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=10728 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447108385.170:699640): pid=10728 uid=0 auid=0 ses=22933 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=10728 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447108385.170:699641): pid=10728 uid=0 auid=0 ses=22933 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=10728 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447108385.206:699642): pid=10781 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=10781 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447108385.206:699643): pid=10781 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=10781 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447108385.206:699644): pid=10781 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=10781 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447108385.250:699645): pid=10780 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=10781 suid=74 rport=57642 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447108385.251:699646): pid=10780 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=10781 suid=74 rport=57642 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447108385.376:699647): pid=10780 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=57642 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447108385.376:699648): pid=10780 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=57642 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447108385.384:699649): pid=10780 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447108385.385:699650): pid=10780 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10781 suid=74 rport=57642 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447108385.387:699651): pid=10780 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447108385.387:699652): pid=10780 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447108385.387:699653): pid=10780 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22934 res=1
type=USER_ROLE_CHANGE msg=audit(1447108385.454:699654): pid=10780 uid=0 auid=0 ses=22934 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447108385.478:699655): pid=10780 uid=0 auid=0 ses=22934 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447108385.482:699656): pid=10780 uid=0 auid=0 ses=22934 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447108385.482:699657): pid=10780 uid=0 auid=0 ses=22934 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447108385.483:699658): pid=10783 uid=0 auid=0 ses=22934 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=10783 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447108385.484:699659): pid=10783 uid=0 auid=0 ses=22934 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=10783 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447108385.484:699660): pid=10783 uid=0 auid=0 ses=22934 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=10783 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447108385.484:699661): pid=10783 uid=0 auid=0 ses=22934 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447108385.503:699662): pid=10780 uid=0 auid=0 ses=22934 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447108385.503:699663): pid=10780 uid=0 auid=0 ses=22934 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447108385.506:699664): pid=10780 uid=0 auid=0 ses=22934 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447108385.506:699665): pid=10780 uid=0 auid=0 ses=22934 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447108385.506:699666): pid=10780 uid=0 auid=0 ses=22934 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10780 suid=0 rport=57642 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447108385.506:699667): pid=10780 uid=0 auid=0 ses=22934 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=10780 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447108385.506:699668): pid=10780 uid=0 auid=0 ses=22934 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=10780 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447108385.506:699669): pid=10780 uid=0 auid=0 ses=22934 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=10780 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447108801.417:699670): pid=12072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447108801.417:699671): pid=12071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447108801.418:699672): pid=12072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447108801.418:699673): pid=12071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447108801.419:699674): pid=12072 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22935 res=1
type=LOGIN msg=audit(1447108801.419:699675): pid=12071 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22936 res=1
type=USER_START msg=audit(1447108801.437:699676): pid=12072 uid=0 auid=0 ses=22935 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447108801.437:699677): pid=12071 uid=0 auid=0 ses=22936 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447108801.438:699678): pid=12071 uid=0 auid=0 ses=22936 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447108801.438:699679): pid=12072 uid=0 auid=0 ses=22935 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447108801.448:699680): pid=12072 uid=0 auid=0 ses=22935 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447108801.452:699681): pid=12071 uid=0 auid=0 ses=22936 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447108801.454:699682): pid=12071 uid=0 auid=0 ses=22936 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447108801.454:699683): pid=12072 uid=0 auid=0 ses=22935 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1447109136.759:699684): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447109401.467:699685): pid=13895 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447109401.467:699686): pid=13896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447109401.467:699687): pid=13896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447109401.467:699688): pid=13895 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447109401.468:699689): pid=13896 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22937 res=1
type=LOGIN msg=audit(1447109401.468:699690): pid=13895 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22938 res=1
type=USER_START msg=audit(1447109401.488:699691): pid=13895 uid=0 auid=0 ses=22938 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447109401.488:699692): pid=13896 uid=0 auid=0 ses=22937 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447109401.488:699693): pid=13895 uid=0 auid=0 ses=22938 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447109401.488:699694): pid=13896 uid=0 auid=0 ses=22937 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447109401.494:699695): pid=13896 uid=0 auid=0 ses=22937 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447109401.495:699696): pid=13896 uid=0 auid=0 ses=22937 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447109401.500:699697): pid=13895 uid=0 auid=0 ses=22938 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447109426.522:699698): pid=13895 uid=0 auid=0 ses=22938 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=CRYPTO_KEY_USER msg=audit(1447109582.952:699699): pid=14470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=14470 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447109582.952:699700): pid=14470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=14470 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447109582.952:699701): pid=14470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=14470 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447109582.997:699702): pid=14467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=14470 suid=74 rport=59619 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447109582.997:699703): pid=14467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=14470 suid=74 rport=59619 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447109583.125:699704): pid=14467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59619 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447109583.125:699705): pid=14467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=59619 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447109583.134:699706): pid=14467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447109583.135:699707): pid=14467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14470 suid=74 rport=59619 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447109583.135:699708): pid=14467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447109583.136:699709): pid=14467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447109583.136:699710): pid=14467 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22939 res=1
type=USER_ROLE_CHANGE msg=audit(1447109583.207:699711): pid=14467 uid=0 auid=0 ses=22939 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447109583.230:699712): pid=14467 uid=0 auid=0 ses=22939 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447109583.234:699713): pid=14467 uid=0 auid=0 ses=22939 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447109583.234:699714): pid=14467 uid=0 auid=0 ses=22939 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447109583.236:699715): pid=14472 uid=0 auid=0 ses=22939 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=14472 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447109583.236:699716): pid=14472 uid=0 auid=0 ses=22939 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=14472 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447109583.236:699717): pid=14472 uid=0 auid=0 ses=22939 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=14472 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447109583.237:699718): pid=14472 uid=0 auid=0 ses=22939 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447109583.258:699719): pid=14467 uid=0 auid=0 ses=22939 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447109583.258:699720): pid=14467 uid=0 auid=0 ses=22939 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447109583.261:699721): pid=14467 uid=0 auid=0 ses=22939 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447109583.262:699722): pid=14467 uid=0 auid=0 ses=22939 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447109583.263:699723): pid=14467 uid=0 auid=0 ses=22939 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14467 suid=0 rport=59619 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447109583.263:699724): pid=14467 uid=0 auid=0 ses=22939 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=14467 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447109583.263:699725): pid=14467 uid=0 auid=0 ses=22939 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=14467 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447109583.263:699726): pid=14467 uid=0 auid=0 ses=22939 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=14467 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447109583.283:699727): pid=14480 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=14480 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447109583.284:699728): pid=14480 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=14480 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447109583.284:699729): pid=14480 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=14480 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447109583.329:699730): pid=14479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=14480 suid=74 rport=59621 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447109583.329:699731): pid=14479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=14480 suid=74 rport=59621 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447109583.459:699732): pid=14479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59621 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447109583.459:699733): pid=14479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=59621 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447109583.468:699734): pid=14479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447109583.469:699735): pid=14479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14480 suid=74 rport=59621 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447109583.470:699736): pid=14479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447109583.470:699737): pid=14479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447109583.470:699738): pid=14479 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22940 res=1
type=USER_ROLE_CHANGE msg=audit(1447109583.535:699739): pid=14479 uid=0 auid=0 ses=22940 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447109583.560:699740): pid=14479 uid=0 auid=0 ses=22940 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447109583.563:699741): pid=14479 uid=0 auid=0 ses=22940 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447109583.563:699742): pid=14479 uid=0 auid=0 ses=22940 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447109583.565:699743): pid=14482 uid=0 auid=0 ses=22940 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=14482 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447109583.565:699744): pid=14482 uid=0 auid=0 ses=22940 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=14482 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447109583.565:699745): pid=14482 uid=0 auid=0 ses=22940 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=14482 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447109583.565:699746): pid=14482 uid=0 auid=0 ses=22940 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447109584.831:699747): pid=14479 uid=0 auid=0 ses=22940 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447109584.832:699748): pid=14479 uid=0 auid=0 ses=22940 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447109584.836:699749): pid=14479 uid=0 auid=0 ses=22940 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447109584.837:699750): pid=14479 uid=0 auid=0 ses=22940 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447109584.837:699751): pid=14479 uid=0 auid=0 ses=22940 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14479 suid=0 rport=59621 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447109584.837:699752): pid=14479 uid=0 auid=0 ses=22940 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=14479 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447109584.837:699753): pid=14479 uid=0 auid=0 ses=22940 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=14479 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447109584.837:699754): pid=14479 uid=0 auid=0 ses=22940 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=14479 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447109584.876:699755): pid=14542 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=14542 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447109584.876:699756): pid=14542 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=14542 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447109584.876:699757): pid=14542 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=14542 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447109584.920:699758): pid=14541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=14542 suid=74 rport=59622 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447109584.921:699759): pid=14541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=14542 suid=74 rport=59622 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447109585.049:699760): pid=14541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59622 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447109585.049:699761): pid=14541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=59622 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447109585.059:699762): pid=14541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447109585.059:699763): pid=14541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14542 suid=74 rport=59622 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447109585.061:699764): pid=14541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447109585.062:699765): pid=14541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447109585.062:699766): pid=14541 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22941 res=1
type=USER_ROLE_CHANGE msg=audit(1447109585.127:699767): pid=14541 uid=0 auid=0 ses=22941 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447109585.146:699768): pid=14541 uid=0 auid=0 ses=22941 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447109585.149:699769): pid=14541 uid=0 auid=0 ses=22941 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447109585.149:699770): pid=14541 uid=0 auid=0 ses=22941 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447109585.150:699771): pid=14544 uid=0 auid=0 ses=22941 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=14544 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447109585.150:699772): pid=14544 uid=0 auid=0 ses=22941 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=14544 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447109585.151:699773): pid=14544 uid=0 auid=0 ses=22941 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=14544 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447109585.151:699774): pid=14544 uid=0 auid=0 ses=22941 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447109585.170:699775): pid=14541 uid=0 auid=0 ses=22941 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447109585.170:699776): pid=14541 uid=0 auid=0 ses=22941 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447109585.176:699777): pid=14541 uid=0 auid=0 ses=22941 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447109585.177:699778): pid=14541 uid=0 auid=0 ses=22941 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447109585.177:699779): pid=14541 uid=0 auid=0 ses=22941 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14541 suid=0 rport=59622 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447109585.177:699780): pid=14541 uid=0 auid=0 ses=22941 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=14541 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447109585.178:699781): pid=14541 uid=0 auid=0 ses=22941 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=14541 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447109585.178:699782): pid=14541 uid=0 auid=0 ses=22941 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=14541 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447110001.544:699783): pid=15773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447110001.544:699784): pid=15772 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447110001.544:699785): pid=15773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447110001.544:699786): pid=15772 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447110001.545:699787): pid=15773 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22942 res=1
type=LOGIN msg=audit(1447110001.545:699788): pid=15772 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22943 res=1
type=USER_START msg=audit(1447110001.562:699789): pid=15773 uid=0 auid=0 ses=22942 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447110001.562:699790): pid=15772 uid=0 auid=0 ses=22943 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447110001.563:699791): pid=15773 uid=0 auid=0 ses=22942 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447110001.563:699792): pid=15772 uid=0 auid=0 ses=22943 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447110001.574:699793): pid=15773 uid=0 auid=0 ses=22942 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447110001.575:699794): pid=15773 uid=0 auid=0 ses=22942 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447110001.577:699795): pid=15772 uid=0 auid=0 ses=22943 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447110026.605:699796): pid=15772 uid=0 auid=0 ses=22943 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=USER_ACCT msg=audit(1447110061.623:699797): pid=16008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447110061.624:699798): pid=16008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447110061.624:699799): pid=16008 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22944 res=1
type=USER_START msg=audit(1447110061.640:699800): pid=16008 uid=0 auid=0 ses=22944 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447110061.640:699801): pid=16008 uid=0 auid=0 ses=22944 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447110061.672:699802): pid=16008 uid=0 auid=0 ses=22944 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447110061.673:699803): pid=16008 uid=0 auid=0 ses=22944 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447110601.686:699804): pid=17677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447110601.686:699805): pid=17677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447110601.687:699806): pid=17677 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22945 res=1
type=USER_ACCT msg=audit(1447110601.688:699807): pid=17676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447110601.689:699808): pid=17676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447110601.689:699809): pid=17676 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22946 res=1
type=USER_START msg=audit(1447110601.702:699810): pid=17677 uid=0 auid=0 ses=22945 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447110601.703:699811): pid=17677 uid=0 auid=0 ses=22945 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447110601.703:699812): pid=17676 uid=0 auid=0 ses=22946 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447110601.703:699813): pid=17676 uid=0 auid=0 ses=22946 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447110601.709:699814): pid=17677 uid=0 auid=0 ses=22945 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447110601.715:699815): pid=17677 uid=0 auid=0 ses=22945 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447110601.715:699816): pid=17676 uid=0 auid=0 ses=22946 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447110626.742:699817): pid=17676 uid=0 auid=0 ses=22946 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=CRYPTO_KEY_USER msg=audit(1447110782.751:699818): pid=18240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=18240 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447110782.751:699819): pid=18240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=18240 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447110782.751:699820): pid=18240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=18240 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447110782.796:699821): pid=18239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=18240 suid=74 rport=61599 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447110782.796:699822): pid=18239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=18240 suid=74 rport=61599 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447110782.926:699823): pid=18239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=61599 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447110782.926:699824): pid=18239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=61599 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447110782.931:699825): pid=18239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447110782.932:699826): pid=18239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18240 suid=74 rport=61599 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447110782.933:699827): pid=18239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447110782.933:699828): pid=18239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447110782.934:699829): pid=18239 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22947 res=1
type=USER_ROLE_CHANGE msg=audit(1447110783.004:699830): pid=18239 uid=0 auid=0 ses=22947 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447110783.028:699831): pid=18239 uid=0 auid=0 ses=22947 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447110783.032:699832): pid=18239 uid=0 auid=0 ses=22947 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447110783.032:699833): pid=18239 uid=0 auid=0 ses=22947 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447110783.034:699834): pid=18242 uid=0 auid=0 ses=22947 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=18242 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447110783.034:699835): pid=18242 uid=0 auid=0 ses=22947 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=18242 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447110783.034:699836): pid=18242 uid=0 auid=0 ses=22947 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=18242 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447110783.035:699837): pid=18242 uid=0 auid=0 ses=22947 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447110783.053:699838): pid=18239 uid=0 auid=0 ses=22947 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447110783.053:699839): pid=18239 uid=0 auid=0 ses=22947 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447110783.056:699840): pid=18239 uid=0 auid=0 ses=22947 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447110783.057:699841): pid=18239 uid=0 auid=0 ses=22947 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447110783.058:699842): pid=18239 uid=0 auid=0 ses=22947 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18239 suid=0 rport=61599 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447110783.058:699843): pid=18239 uid=0 auid=0 ses=22947 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=18239 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447110783.058:699844): pid=18239 uid=0 auid=0 ses=22947 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=18239 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447110783.058:699845): pid=18239 uid=0 auid=0 ses=22947 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=18239 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447110783.083:699846): pid=18250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=18250 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447110783.083:699847): pid=18250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=18250 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447110783.084:699848): pid=18250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=18250 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447110783.128:699849): pid=18249 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=18250 suid=74 rport=61600 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447110783.129:699850): pid=18249 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=18250 suid=74 rport=61600 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447110783.255:699851): pid=18249 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=61600 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447110783.255:699852): pid=18249 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=61600 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447110783.264:699853): pid=18249 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447110783.265:699854): pid=18249 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18250 suid=74 rport=61600 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447110783.267:699855): pid=18249 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447110783.267:699856): pid=18249 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447110783.267:699857): pid=18249 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22948 res=1
type=USER_ROLE_CHANGE msg=audit(1447110783.334:699858): pid=18249 uid=0 auid=0 ses=22948 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447110783.357:699859): pid=18249 uid=0 auid=0 ses=22948 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447110783.359:699860): pid=18249 uid=0 auid=0 ses=22948 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447110783.360:699861): pid=18249 uid=0 auid=0 ses=22948 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447110783.361:699862): pid=18252 uid=0 auid=0 ses=22948 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=18252 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447110783.361:699863): pid=18252 uid=0 auid=0 ses=22948 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=18252 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447110783.361:699864): pid=18252 uid=0 auid=0 ses=22948 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=18252 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447110783.362:699865): pid=18252 uid=0 auid=0 ses=22948 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447110784.650:699866): pid=18249 uid=0 auid=0 ses=22948 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447110784.651:699867): pid=18249 uid=0 auid=0 ses=22948 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447110784.654:699868): pid=18249 uid=0 auid=0 ses=22948 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447110784.655:699869): pid=18249 uid=0 auid=0 ses=22948 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447110784.655:699870): pid=18249 uid=0 auid=0 ses=22948 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18249 suid=0 rport=61600 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447110784.655:699871): pid=18249 uid=0 auid=0 ses=22948 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=18249 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447110784.655:699872): pid=18249 uid=0 auid=0 ses=22948 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=18249 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447110784.655:699873): pid=18249 uid=0 auid=0 ses=22948 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=18249 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447110784.691:699874): pid=18302 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=18302 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447110784.691:699875): pid=18302 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=18302 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447110784.691:699876): pid=18302 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=18302 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447110784.736:699877): pid=18301 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=18302 suid=74 rport=61603 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447110784.736:699878): pid=18301 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=18302 suid=74 rport=61603 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447110784.864:699879): pid=18301 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=61603 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447110784.864:699880): pid=18301 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=61603 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447110784.873:699881): pid=18301 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447110784.874:699882): pid=18301 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18302 suid=74 rport=61603 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447110784.876:699883): pid=18301 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447110784.877:699884): pid=18301 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447110784.877:699885): pid=18301 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22949 res=1
type=USER_ROLE_CHANGE msg=audit(1447110784.947:699886): pid=18301 uid=0 auid=0 ses=22949 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447110784.970:699887): pid=18301 uid=0 auid=0 ses=22949 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447110784.973:699888): pid=18301 uid=0 auid=0 ses=22949 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447110784.973:699889): pid=18301 uid=0 auid=0 ses=22949 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447110784.974:699890): pid=18304 uid=0 auid=0 ses=22949 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=18304 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447110784.974:699891): pid=18304 uid=0 auid=0 ses=22949 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=18304 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447110784.974:699892): pid=18304 uid=0 auid=0 ses=22949 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=18304 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447110784.975:699893): pid=18304 uid=0 auid=0 ses=22949 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447110784.990:699894): pid=18301 uid=0 auid=0 ses=22949 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447110784.990:699895): pid=18301 uid=0 auid=0 ses=22949 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447110784.994:699896): pid=18301 uid=0 auid=0 ses=22949 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447110784.994:699897): pid=18301 uid=0 auid=0 ses=22949 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447110784.995:699898): pid=18301 uid=0 auid=0 ses=22949 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18301 suid=0 rport=61603 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447110784.995:699899): pid=18301 uid=0 auid=0 ses=22949 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=18301 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447110784.995:699900): pid=18301 uid=0 auid=0 ses=22949 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=18301 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447110784.995:699901): pid=18301 uid=0 auid=0 ses=22949 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=18301 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447111201.765:699902): pid=19600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447111201.765:699903): pid=19599 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447111201.765:699904): pid=19600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447111201.765:699905): pid=19599 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447111201.766:699906): pid=19599 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22950 res=1
type=LOGIN msg=audit(1447111201.766:699907): pid=19600 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22951 res=1
type=USER_START msg=audit(1447111201.784:699908): pid=19600 uid=0 auid=0 ses=22951 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447111201.785:699909): pid=19600 uid=0 auid=0 ses=22951 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447111201.786:699910): pid=19599 uid=0 auid=0 ses=22950 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447111201.786:699911): pid=19599 uid=0 auid=0 ses=22950 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447111201.793:699912): pid=19600 uid=0 auid=0 ses=22951 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447111201.795:699913): pid=19600 uid=0 auid=0 ses=22951 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447111201.802:699914): pid=19599 uid=0 auid=0 ses=22950 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447111226.823:699915): pid=19599 uid=0 auid=0 ses=22950 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=SYSCALL msg=audit(1447111270.758:699916): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447111801.844:699917): pid=21442 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447111801.845:699918): pid=21442 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447111801.845:699919): pid=21443 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447111801.845:699920): pid=21442 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22952 res=1
type=CRED_ACQ msg=audit(1447111801.845:699921): pid=21443 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447111801.845:699922): pid=21443 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22953 res=1
type=USER_START msg=audit(1447111801.861:699923): pid=21443 uid=0 auid=0 ses=22953 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447111801.861:699924): pid=21443 uid=0 auid=0 ses=22953 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447111801.861:699925): pid=21442 uid=0 auid=0 ses=22952 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447111801.862:699926): pid=21442 uid=0 auid=0 ses=22952 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447111801.870:699927): pid=21443 uid=0 auid=0 ses=22953 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447111801.871:699928): pid=21443 uid=0 auid=0 ses=22953 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447111801.876:699929): pid=21442 uid=0 auid=0 ses=22952 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447111801.879:699930): pid=21442 uid=0 auid=0 ses=22952 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447111982.630:699931): pid=22008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=22008 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447111982.630:699932): pid=22008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=22008 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447111982.630:699933): pid=22008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=22008 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447111982.675:699934): pid=22007 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=22008 suid=74 rport=63580 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447111982.675:699935): pid=22007 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=22008 suid=74 rport=63580 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447111982.805:699936): pid=22007 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=63580 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447111982.805:699937): pid=22007 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=63580 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447111982.814:699938): pid=22007 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447111982.816:699939): pid=22007 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22008 suid=74 rport=63580 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447111982.816:699940): pid=22007 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447111982.817:699941): pid=22007 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447111982.817:699942): pid=22007 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22954 res=1
type=USER_ROLE_CHANGE msg=audit(1447111982.887:699943): pid=22007 uid=0 auid=0 ses=22954 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447111982.907:699944): pid=22007 uid=0 auid=0 ses=22954 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447111982.911:699945): pid=22007 uid=0 auid=0 ses=22954 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447111982.912:699946): pid=22007 uid=0 auid=0 ses=22954 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447111982.913:699947): pid=22010 uid=0 auid=0 ses=22954 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=22010 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447111982.914:699948): pid=22010 uid=0 auid=0 ses=22954 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=22010 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447111982.914:699949): pid=22010 uid=0 auid=0 ses=22954 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=22010 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447111982.916:699950): pid=22010 uid=0 auid=0 ses=22954 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447111982.942:699951): pid=22007 uid=0 auid=0 ses=22954 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447111982.942:699952): pid=22007 uid=0 auid=0 ses=22954 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447111982.946:699953): pid=22007 uid=0 auid=0 ses=22954 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447111982.946:699954): pid=22007 uid=0 auid=0 ses=22954 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447111982.946:699955): pid=22007 uid=0 auid=0 ses=22954 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22007 suid=0 rport=63580 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447111982.946:699956): pid=22007 uid=0 auid=0 ses=22954 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=22007 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447111982.947:699957): pid=22007 uid=0 auid=0 ses=22954 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=22007 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447111982.947:699958): pid=22007 uid=0 auid=0 ses=22954 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=22007 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447111982.970:699959): pid=22018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=22018 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447111982.971:699960): pid=22018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=22018 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447111982.971:699961): pid=22018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=22018 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447111983.015:699962): pid=22017 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=22018 suid=74 rport=63581 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447111983.015:699963): pid=22017 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=22018 suid=74 rport=63581 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447111983.144:699964): pid=22017 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=63581 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447111983.144:699965): pid=22017 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=63581 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447111983.149:699966): pid=22017 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447111983.151:699967): pid=22017 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22018 suid=74 rport=63581 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447111983.154:699968): pid=22017 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447111983.154:699969): pid=22017 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447111983.155:699970): pid=22017 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22955 res=1
type=USER_ROLE_CHANGE msg=audit(1447111983.218:699971): pid=22017 uid=0 auid=0 ses=22955 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447111983.244:699972): pid=22017 uid=0 auid=0 ses=22955 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447111983.246:699973): pid=22017 uid=0 auid=0 ses=22955 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447111983.246:699974): pid=22017 uid=0 auid=0 ses=22955 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447111983.248:699975): pid=22020 uid=0 auid=0 ses=22955 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=22020 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447111983.248:699976): pid=22020 uid=0 auid=0 ses=22955 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=22020 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447111983.248:699977): pid=22020 uid=0 auid=0 ses=22955 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=22020 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447111983.248:699978): pid=22020 uid=0 auid=0 ses=22955 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447111984.528:699979): pid=22017 uid=0 auid=0 ses=22955 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447111984.528:699980): pid=22017 uid=0 auid=0 ses=22955 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447111984.533:699981): pid=22017 uid=0 auid=0 ses=22955 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447111984.533:699982): pid=22017 uid=0 auid=0 ses=22955 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447111984.533:699983): pid=22017 uid=0 auid=0 ses=22955 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22017 suid=0 rport=63581 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447111984.533:699984): pid=22017 uid=0 auid=0 ses=22955 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=22017 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447111984.533:699985): pid=22017 uid=0 auid=0 ses=22955 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=22017 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447111984.533:699986): pid=22017 uid=0 auid=0 ses=22955 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=22017 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447111984.564:699987): pid=22070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=22070 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447111984.564:699988): pid=22070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=22070 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447111984.564:699989): pid=22070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=22070 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447111984.610:699990): pid=22069 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=22070 suid=74 rport=63584 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447111984.610:699991): pid=22069 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=22070 suid=74 rport=63584 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447111984.732:699992): pid=22069 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=63584 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447111984.732:699993): pid=22069 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=63584 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447111984.738:699994): pid=22069 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447111984.740:699995): pid=22069 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22070 suid=74 rport=63584 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447111984.741:699996): pid=22069 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447111984.741:699997): pid=22069 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447111984.741:699998): pid=22069 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22956 res=1
type=USER_ROLE_CHANGE msg=audit(1447111984.809:699999): pid=22069 uid=0 auid=0 ses=22956 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447111984.829:700000): pid=22069 uid=0 auid=0 ses=22956 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447111984.831:700001): pid=22069 uid=0 auid=0 ses=22956 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447111984.831:700002): pid=22069 uid=0 auid=0 ses=22956 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447111984.833:700003): pid=22072 uid=0 auid=0 ses=22956 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=22072 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447111984.833:700004): pid=22072 uid=0 auid=0 ses=22956 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=22072 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447111984.833:700005): pid=22072 uid=0 auid=0 ses=22956 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=22072 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447111984.834:700006): pid=22072 uid=0 auid=0 ses=22956 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447111984.849:700007): pid=22069 uid=0 auid=0 ses=22956 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447111984.849:700008): pid=22069 uid=0 auid=0 ses=22956 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447111984.852:700009): pid=22069 uid=0 auid=0 ses=22956 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447111984.853:700010): pid=22069 uid=0 auid=0 ses=22956 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447111984.853:700011): pid=22069 uid=0 auid=0 ses=22956 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22069 suid=0 rport=63584 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447111984.853:700012): pid=22069 uid=0 auid=0 ses=22956 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=22069 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447111984.854:700013): pid=22069 uid=0 auid=0 ses=22956 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=22069 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447111984.854:700014): pid=22069 uid=0 auid=0 ses=22956 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=22069 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447112401.901:700015): pid=23359 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447112401.901:700016): pid=23359 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447112401.902:700017): pid=23360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447112401.902:700018): pid=23360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447112401.903:700019): pid=23360 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22957 res=1
type=LOGIN msg=audit(1447112401.903:700020): pid=23359 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22958 res=1
type=USER_START msg=audit(1447112401.923:700021): pid=23359 uid=0 auid=0 ses=22958 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447112401.923:700022): pid=23360 uid=0 auid=0 ses=22957 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447112401.924:700023): pid=23360 uid=0 auid=0 ses=22957 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447112401.924:700024): pid=23359 uid=0 auid=0 ses=22958 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447112401.935:700025): pid=23360 uid=0 auid=0 ses=22957 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447112401.937:700026): pid=23360 uid=0 auid=0 ses=22957 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447112401.939:700027): pid=23359 uid=0 auid=0 ses=22958 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447112401.943:700028): pid=23359 uid=0 auid=0 ses=22958 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447113001.955:700029): pid=25204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447113001.955:700030): pid=25205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447113001.955:700031): pid=25204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447113001.955:700032): pid=25205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447113001.955:700033): pid=25205 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22959 res=1
type=LOGIN msg=audit(1447113001.955:700034): pid=25204 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22960 res=1
type=USER_START msg=audit(1447113001.971:700035): pid=25205 uid=0 auid=0 ses=22959 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447113001.971:700036): pid=25205 uid=0 auid=0 ses=22959 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447113001.971:700037): pid=25204 uid=0 auid=0 ses=22960 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447113001.972:700038): pid=25204 uid=0 auid=0 ses=22960 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447113001.978:700039): pid=25205 uid=0 auid=0 ses=22959 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447113001.979:700040): pid=25205 uid=0 auid=0 ses=22959 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447113001.986:700041): pid=25204 uid=0 auid=0 ses=22960 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447113001.987:700042): pid=25204 uid=0 auid=0 ses=22960 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447113182.002:700043): pid=25764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447113182.002:700044): pid=25764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447113182.004:700045): pid=25764 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22961 res=1
type=USER_START msg=audit(1447113182.015:700046): pid=25764 uid=0 auid=0 ses=22961 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447113182.015:700047): pid=25764 uid=0 auid=0 ses=22961 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447113182.083:700048): pid=25764 uid=0 auid=0 ses=22961 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447113182.085:700049): pid=25764 uid=0 auid=0 ses=22961 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447113183.085:700050): pid=25781 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=25781 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447113183.086:700051): pid=25781 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=25781 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447113183.086:700052): pid=25781 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=25781 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447113183.130:700053): pid=25780 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=25781 suid=74 rport=32793 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447113183.130:700054): pid=25780 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=25781 suid=74 rport=32793 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447113183.259:700055): pid=25780 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=32793 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447113183.259:700056): pid=25780 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=32793 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447113183.265:700057): pid=25780 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447113183.267:700058): pid=25780 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25781 suid=74 rport=32793 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447113183.269:700059): pid=25780 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447113183.269:700060): pid=25780 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447113183.269:700061): pid=25780 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22962 res=1
type=USER_ROLE_CHANGE msg=audit(1447113183.338:700062): pid=25780 uid=0 auid=0 ses=22962 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447113183.360:700063): pid=25780 uid=0 auid=0 ses=22962 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447113183.362:700064): pid=25780 uid=0 auid=0 ses=22962 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447113183.362:700065): pid=25780 uid=0 auid=0 ses=22962 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447113183.364:700066): pid=25783 uid=0 auid=0 ses=22962 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=25783 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447113183.364:700067): pid=25783 uid=0 auid=0 ses=22962 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=25783 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447113183.364:700068): pid=25783 uid=0 auid=0 ses=22962 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=25783 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447113183.366:700069): pid=25783 uid=0 auid=0 ses=22962 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447113183.392:700070): pid=25780 uid=0 auid=0 ses=22962 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447113183.392:700071): pid=25780 uid=0 auid=0 ses=22962 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447113183.395:700072): pid=25780 uid=0 auid=0 ses=22962 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447113183.395:700073): pid=25780 uid=0 auid=0 ses=22962 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447113183.396:700074): pid=25780 uid=0 auid=0 ses=22962 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25780 suid=0 rport=32793 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447113183.397:700075): pid=25780 uid=0 auid=0 ses=22962 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=25780 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447113183.397:700076): pid=25780 uid=0 auid=0 ses=22962 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=25780 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447113183.397:700077): pid=25780 uid=0 auid=0 ses=22962 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=25780 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447113183.417:700078): pid=25791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=25791 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447113183.417:700079): pid=25791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=25791 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447113183.417:700080): pid=25791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=25791 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447113183.462:700081): pid=25790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=25791 suid=74 rport=32796 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447113183.462:700082): pid=25790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=25791 suid=74 rport=32796 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447113183.591:700083): pid=25790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=32796 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447113183.591:700084): pid=25790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=32796 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447113183.600:700085): pid=25790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447113183.601:700086): pid=25790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25791 suid=74 rport=32796 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447113183.603:700087): pid=25790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447113183.603:700088): pid=25790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447113183.603:700089): pid=25790 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22963 res=1
type=USER_ROLE_CHANGE msg=audit(1447113183.670:700090): pid=25790 uid=0 auid=0 ses=22963 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447113183.689:700091): pid=25790 uid=0 auid=0 ses=22963 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447113183.692:700092): pid=25790 uid=0 auid=0 ses=22963 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447113183.692:700093): pid=25790 uid=0 auid=0 ses=22963 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447113183.694:700094): pid=25793 uid=0 auid=0 ses=22963 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=25793 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447113183.694:700095): pid=25793 uid=0 auid=0 ses=22963 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=25793 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447113183.694:700096): pid=25793 uid=0 auid=0 ses=22963 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=25793 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447113183.695:700097): pid=25793 uid=0 auid=0 ses=22963 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447113184.965:700098): pid=25790 uid=0 auid=0 ses=22963 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447113184.965:700099): pid=25790 uid=0 auid=0 ses=22963 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447113184.970:700100): pid=25790 uid=0 auid=0 ses=22963 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447113184.970:700101): pid=25790 uid=0 auid=0 ses=22963 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447113184.971:700102): pid=25790 uid=0 auid=0 ses=22963 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25790 suid=0 rport=32796 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447113184.971:700103): pid=25790 uid=0 auid=0 ses=22963 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=25790 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447113184.971:700104): pid=25790 uid=0 auid=0 ses=22963 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=25790 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447113184.971:700105): pid=25790 uid=0 auid=0 ses=22963 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=25790 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447113185.003:700106): pid=25843 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=25843 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447113185.003:700107): pid=25843 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=25843 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447113185.003:700108): pid=25843 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=25843 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447113185.048:700109): pid=25842 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=25843 suid=74 rport=32799 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447113185.049:700110): pid=25842 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=25843 suid=74 rport=32799 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447113185.173:700111): pid=25842 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=32799 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447113185.173:700112): pid=25842 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=32799 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447113185.182:700113): pid=25842 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447113185.183:700114): pid=25842 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25843 suid=74 rport=32799 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447113185.186:700115): pid=25842 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447113185.186:700116): pid=25842 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447113185.187:700117): pid=25842 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22964 res=1
type=USER_ROLE_CHANGE msg=audit(1447113185.257:700118): pid=25842 uid=0 auid=0 ses=22964 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447113185.276:700119): pid=25842 uid=0 auid=0 ses=22964 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447113185.279:700120): pid=25842 uid=0 auid=0 ses=22964 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447113185.279:700121): pid=25842 uid=0 auid=0 ses=22964 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447113185.280:700122): pid=25845 uid=0 auid=0 ses=22964 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=25845 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447113185.281:700123): pid=25845 uid=0 auid=0 ses=22964 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=25845 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447113185.281:700124): pid=25845 uid=0 auid=0 ses=22964 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=25845 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447113185.281:700125): pid=25845 uid=0 auid=0 ses=22964 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447113185.299:700126): pid=25842 uid=0 auid=0 ses=22964 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447113185.299:700127): pid=25842 uid=0 auid=0 ses=22964 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447113185.302:700128): pid=25842 uid=0 auid=0 ses=22964 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447113185.302:700129): pid=25842 uid=0 auid=0 ses=22964 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447113185.302:700130): pid=25842 uid=0 auid=0 ses=22964 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25842 suid=0 rport=32799 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447113185.302:700131): pid=25842 uid=0 auid=0 ses=22964 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=25842 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447113185.302:700132): pid=25842 uid=0 auid=0 ses=22964 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=25842 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447113185.302:700133): pid=25842 uid=0 auid=0 ses=22964 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=25842 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=SYSCALL msg=audit(1447113381.759:700134): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447113601.106:700135): pid=27141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447113601.106:700136): pid=27141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447113601.108:700137): pid=27141 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22965 res=1
type=USER_ACCT msg=audit(1447113601.108:700138): pid=27142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447113601.108:700139): pid=27142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447113601.108:700140): pid=27142 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22966 res=1
type=USER_START msg=audit(1447113601.134:700141): pid=27142 uid=0 auid=0 ses=22966 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447113601.134:700142): pid=27141 uid=0 auid=0 ses=22965 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447113601.134:700143): pid=27142 uid=0 auid=0 ses=22966 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447113601.134:700144): pid=27141 uid=0 auid=0 ses=22965 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447113601.147:700145): pid=27142 uid=0 auid=0 ses=22966 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447113601.150:700146): pid=27142 uid=0 auid=0 ses=22966 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447113601.153:700147): pid=27141 uid=0 auid=0 ses=22965 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447113601.158:700148): pid=27141 uid=0 auid=0 ses=22965 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447113661.172:700149): pid=27346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447113661.172:700150): pid=27346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447113661.172:700151): pid=27346 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22967 res=1
type=USER_START msg=audit(1447113661.182:700152): pid=27346 uid=0 auid=0 ses=22967 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447113661.182:700153): pid=27346 uid=0 auid=0 ses=22967 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447113661.212:700154): pid=27346 uid=0 auid=0 ses=22967 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447113661.214:700155): pid=27346 uid=0 auid=0 ses=22967 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447114201.225:700157): pid=29048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447114201.225:700156): pid=29049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447114201.226:700158): pid=29048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447114201.226:700159): pid=29049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447114201.226:700160): pid=29049 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22968 res=1
type=LOGIN msg=audit(1447114201.226:700161): pid=29048 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22969 res=1
type=USER_START msg=audit(1447114201.241:700162): pid=29049 uid=0 auid=0 ses=22968 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447114201.241:700163): pid=29048 uid=0 auid=0 ses=22969 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447114201.241:700164): pid=29048 uid=0 auid=0 ses=22969 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447114201.241:700165): pid=29049 uid=0 auid=0 ses=22968 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447114201.248:700166): pid=29049 uid=0 auid=0 ses=22968 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447114201.251:700167): pid=29049 uid=0 auid=0 ses=22968 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447114201.252:700168): pid=29048 uid=0 auid=0 ses=22969 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447114226.267:700169): pid=29048 uid=0 auid=0 ses=22969 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=CRYPTO_KEY_USER msg=audit(1447114383.094:700170): pid=29655 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=29655 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447114383.094:700171): pid=29655 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=29655 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447114383.094:700172): pid=29655 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=29655 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447114383.139:700173): pid=29654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=29655 suid=74 rport=34774 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447114383.139:700174): pid=29654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=29655 suid=74 rport=34774 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447114383.270:700175): pid=29654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34774 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447114383.270:700176): pid=29654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=34774 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447114383.279:700177): pid=29654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447114383.280:700178): pid=29654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29655 suid=74 rport=34774 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447114383.282:700179): pid=29654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447114383.283:700180): pid=29654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447114383.283:700181): pid=29654 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22970 res=1
type=USER_ROLE_CHANGE msg=audit(1447114383.352:700182): pid=29654 uid=0 auid=0 ses=22970 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447114383.379:700183): pid=29654 uid=0 auid=0 ses=22970 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447114383.381:700184): pid=29654 uid=0 auid=0 ses=22970 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447114383.382:700185): pid=29654 uid=0 auid=0 ses=22970 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447114383.383:700186): pid=29657 uid=0 auid=0 ses=22970 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=29657 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447114383.384:700187): pid=29657 uid=0 auid=0 ses=22970 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=29657 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447114383.384:700188): pid=29657 uid=0 auid=0 ses=22970 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=29657 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447114383.385:700189): pid=29657 uid=0 auid=0 ses=22970 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447114383.405:700190): pid=29654 uid=0 auid=0 ses=22970 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447114383.405:700191): pid=29654 uid=0 auid=0 ses=22970 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447114383.409:700192): pid=29654 uid=0 auid=0 ses=22970 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447114383.409:700193): pid=29654 uid=0 auid=0 ses=22970 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447114383.410:700194): pid=29654 uid=0 auid=0 ses=22970 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29654 suid=0 rport=34774 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447114383.410:700195): pid=29654 uid=0 auid=0 ses=22970 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=29654 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447114383.410:700196): pid=29654 uid=0 auid=0 ses=22970 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=29654 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447114383.410:700197): pid=29654 uid=0 auid=0 ses=22970 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=29654 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447114383.432:700198): pid=29667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=29667 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447114383.432:700199): pid=29667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=29667 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447114383.433:700200): pid=29667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=29667 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447114383.477:700201): pid=29665 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=29667 suid=74 rport=34775 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447114383.477:700202): pid=29665 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=29667 suid=74 rport=34775 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447114383.604:700203): pid=29665 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34775 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447114383.604:700204): pid=29665 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=34775 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447114383.608:700205): pid=29665 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447114383.609:700206): pid=29665 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29667 suid=74 rport=34775 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447114383.610:700207): pid=29665 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447114383.611:700208): pid=29665 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447114383.611:700209): pid=29665 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22971 res=1
type=USER_ROLE_CHANGE msg=audit(1447114383.674:700210): pid=29665 uid=0 auid=0 ses=22971 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447114383.694:700211): pid=29665 uid=0 auid=0 ses=22971 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447114383.697:700212): pid=29665 uid=0 auid=0 ses=22971 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447114383.697:700213): pid=29665 uid=0 auid=0 ses=22971 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447114383.699:700214): pid=29671 uid=0 auid=0 ses=22971 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=29671 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447114383.699:700215): pid=29671 uid=0 auid=0 ses=22971 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=29671 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447114383.699:700216): pid=29671 uid=0 auid=0 ses=22971 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=29671 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447114383.700:700217): pid=29671 uid=0 auid=0 ses=22971 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447114384.977:700218): pid=29665 uid=0 auid=0 ses=22971 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447114384.977:700219): pid=29665 uid=0 auid=0 ses=22971 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447114384.983:700220): pid=29665 uid=0 auid=0 ses=22971 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447114384.983:700221): pid=29665 uid=0 auid=0 ses=22971 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447114384.983:700222): pid=29665 uid=0 auid=0 ses=22971 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29665 suid=0 rport=34775 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447114384.983:700223): pid=29665 uid=0 auid=0 ses=22971 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=29665 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447114384.983:700224): pid=29665 uid=0 auid=0 ses=22971 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=29665 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447114384.984:700225): pid=29665 uid=0 auid=0 ses=22971 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=29665 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447114385.015:700226): pid=29725 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=29725 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447114385.015:700227): pid=29725 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=29725 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447114385.015:700228): pid=29725 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=29725 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447114385.059:700229): pid=29724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=29725 suid=74 rport=34779 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447114385.060:700230): pid=29724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=29725 suid=74 rport=34779 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447114385.189:700231): pid=29724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34779 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447114385.189:700232): pid=29724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=34779 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447114385.199:700233): pid=29724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447114385.201:700234): pid=29724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29725 suid=74 rport=34779 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447114385.202:700235): pid=29724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447114385.203:700236): pid=29724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447114385.203:700237): pid=29724 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22972 res=1
type=USER_ROLE_CHANGE msg=audit(1447114385.272:700238): pid=29724 uid=0 auid=0 ses=22972 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447114385.293:700239): pid=29724 uid=0 auid=0 ses=22972 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447114385.296:700240): pid=29724 uid=0 auid=0 ses=22972 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447114385.296:700241): pid=29724 uid=0 auid=0 ses=22972 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447114385.297:700242): pid=29727 uid=0 auid=0 ses=22972 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=29727 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447114385.297:700243): pid=29727 uid=0 auid=0 ses=22972 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=29727 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447114385.298:700244): pid=29727 uid=0 auid=0 ses=22972 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=29727 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447114385.298:700245): pid=29727 uid=0 auid=0 ses=22972 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447114385.315:700246): pid=29724 uid=0 auid=0 ses=22972 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447114385.315:700247): pid=29724 uid=0 auid=0 ses=22972 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447114385.319:700248): pid=29724 uid=0 auid=0 ses=22972 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447114385.319:700249): pid=29724 uid=0 auid=0 ses=22972 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447114385.319:700250): pid=29724 uid=0 auid=0 ses=22972 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29724 suid=0 rport=34779 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447114385.319:700251): pid=29724 uid=0 auid=0 ses=22972 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=29724 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447114385.319:700252): pid=29724 uid=0 auid=0 ses=22972 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=29724 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447114385.319:700253): pid=29724 uid=0 auid=0 ses=22972 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=29724 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=SYSCALL msg=audit(1447114459.693:700254): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447114801.287:700255): pid=31089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447114801.287:700256): pid=31090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447114801.287:700257): pid=31089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447114801.287:700258): pid=31090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447114801.288:700259): pid=31089 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22973 res=1
type=LOGIN msg=audit(1447114801.288:700260): pid=31090 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22974 res=1
type=USER_START msg=audit(1447114801.308:700261): pid=31089 uid=0 auid=0 ses=22973 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447114801.308:700262): pid=31090 uid=0 auid=0 ses=22974 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447114801.308:700263): pid=31089 uid=0 auid=0 ses=22973 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447114801.308:700264): pid=31090 uid=0 auid=0 ses=22974 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447114801.321:700265): pid=31090 uid=0 auid=0 ses=22974 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447114801.323:700266): pid=31090 uid=0 auid=0 ses=22974 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447114801.326:700267): pid=31089 uid=0 auid=0 ses=22973 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447114801.330:700268): pid=31089 uid=0 auid=0 ses=22973 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447115401.343:700269): pid=489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447115401.343:700270): pid=489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447115401.343:700271): pid=489 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22975 res=1
type=USER_ACCT msg=audit(1447115401.345:700272): pid=490 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447115401.345:700273): pid=490 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447115401.345:700274): pid=490 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22976 res=1
type=USER_START msg=audit(1447115401.362:700275): pid=489 uid=0 auid=0 ses=22975 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447115401.362:700276): pid=490 uid=0 auid=0 ses=22976 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447115401.362:700277): pid=489 uid=0 auid=0 ses=22975 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447115401.363:700278): pid=490 uid=0 auid=0 ses=22976 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447115401.370:700279): pid=490 uid=0 auid=0 ses=22976 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447115401.371:700280): pid=490 uid=0 auid=0 ses=22976 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447115401.377:700281): pid=489 uid=0 auid=0 ses=22975 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447115401.378:700282): pid=489 uid=0 auid=0 ses=22975 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1447115516.760:700283): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=CRYPTO_KEY_USER msg=audit(1447115582.921:700284): pid=1152 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=1152 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447115582.921:700285): pid=1152 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=1152 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447115582.921:700286): pid=1152 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=1152 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447115582.964:700287): pid=1151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=1152 suid=74 rport=36754 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447115582.965:700288): pid=1151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=1152 suid=74 rport=36754 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447115583.094:700289): pid=1151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=36754 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447115583.094:700290): pid=1151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=36754 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447115583.101:700291): pid=1151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447115583.102:700292): pid=1151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1152 suid=74 rport=36754 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447115583.103:700293): pid=1151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447115583.104:700294): pid=1151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447115583.104:700295): pid=1151 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22977 res=1
type=USER_ROLE_CHANGE msg=audit(1447115583.171:700296): pid=1151 uid=0 auid=0 ses=22977 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447115583.194:700297): pid=1151 uid=0 auid=0 ses=22977 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447115583.196:700298): pid=1151 uid=0 auid=0 ses=22977 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447115583.196:700299): pid=1151 uid=0 auid=0 ses=22977 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447115583.198:700300): pid=1154 uid=0 auid=0 ses=22977 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=1154 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447115583.198:700301): pid=1154 uid=0 auid=0 ses=22977 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=1154 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447115583.198:700302): pid=1154 uid=0 auid=0 ses=22977 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=1154 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447115583.199:700303): pid=1154 uid=0 auid=0 ses=22977 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447115583.220:700304): pid=1151 uid=0 auid=0 ses=22977 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447115583.220:700305): pid=1151 uid=0 auid=0 ses=22977 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447115583.226:700306): pid=1151 uid=0 auid=0 ses=22977 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447115583.226:700307): pid=1151 uid=0 auid=0 ses=22977 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447115583.227:700308): pid=1151 uid=0 auid=0 ses=22977 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1151 suid=0 rport=36754 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447115583.227:700309): pid=1151 uid=0 auid=0 ses=22977 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=1151 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447115583.227:700310): pid=1151 uid=0 auid=0 ses=22977 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=1151 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447115583.227:700311): pid=1151 uid=0 auid=0 ses=22977 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=1151 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447115583.245:700312): pid=1162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=1162 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447115583.245:700313): pid=1162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=1162 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447115583.245:700314): pid=1162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=1162 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447115583.289:700315): pid=1161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=1162 suid=74 rport=36755 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447115583.290:700316): pid=1161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=1162 suid=74 rport=36755 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447115583.418:700317): pid=1161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=36755 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447115583.418:700318): pid=1161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=36755 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447115583.425:700319): pid=1161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447115583.426:700320): pid=1161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1162 suid=74 rport=36755 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447115583.427:700321): pid=1161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447115583.427:700322): pid=1161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447115583.427:700323): pid=1161 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22978 res=1
type=USER_ROLE_CHANGE msg=audit(1447115583.490:700324): pid=1161 uid=0 auid=0 ses=22978 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447115583.512:700325): pid=1161 uid=0 auid=0 ses=22978 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447115583.515:700326): pid=1161 uid=0 auid=0 ses=22978 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447115583.515:700327): pid=1161 uid=0 auid=0 ses=22978 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447115583.516:700328): pid=1164 uid=0 auid=0 ses=22978 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=1164 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447115583.517:700329): pid=1164 uid=0 auid=0 ses=22978 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=1164 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447115583.517:700330): pid=1164 uid=0 auid=0 ses=22978 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=1164 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447115583.517:700331): pid=1164 uid=0 auid=0 ses=22978 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447115584.790:700332): pid=1161 uid=0 auid=0 ses=22978 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447115584.790:700333): pid=1161 uid=0 auid=0 ses=22978 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447115584.794:700334): pid=1161 uid=0 auid=0 ses=22978 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447115584.794:700335): pid=1161 uid=0 auid=0 ses=22978 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447115584.794:700336): pid=1161 uid=0 auid=0 ses=22978 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1161 suid=0 rport=36755 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447115584.794:700337): pid=1161 uid=0 auid=0 ses=22978 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=1161 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447115584.794:700338): pid=1161 uid=0 auid=0 ses=22978 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=1161 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447115584.794:700339): pid=1161 uid=0 auid=0 ses=22978 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=1161 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447115584.823:700340): pid=1214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=1214 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447115584.823:700341): pid=1214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=1214 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447115584.823:700342): pid=1214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=1214 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447115584.868:700343): pid=1213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=1214 suid=74 rport=36756 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447115584.868:700344): pid=1213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=1214 suid=74 rport=36756 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447115584.998:700345): pid=1213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=36756 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447115584.999:700346): pid=1213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=36756 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447115585.009:700347): pid=1213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447115585.009:700348): pid=1213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1214 suid=74 rport=36756 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447115585.010:700349): pid=1213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447115585.010:700350): pid=1213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447115585.010:700351): pid=1213 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22979 res=1
type=USER_ROLE_CHANGE msg=audit(1447115585.081:700352): pid=1213 uid=0 auid=0 ses=22979 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447115585.109:700353): pid=1213 uid=0 auid=0 ses=22979 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447115585.111:700354): pid=1213 uid=0 auid=0 ses=22979 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447115585.111:700355): pid=1213 uid=0 auid=0 ses=22979 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447115585.113:700356): pid=1216 uid=0 auid=0 ses=22979 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=1216 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447115585.113:700357): pid=1216 uid=0 auid=0 ses=22979 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=1216 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447115585.113:700358): pid=1216 uid=0 auid=0 ses=22979 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=1216 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447115585.113:700359): pid=1216 uid=0 auid=0 ses=22979 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447115585.130:700360): pid=1213 uid=0 auid=0 ses=22979 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447115585.130:700361): pid=1213 uid=0 auid=0 ses=22979 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447115585.133:700362): pid=1213 uid=0 auid=0 ses=22979 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447115585.133:700363): pid=1213 uid=0 auid=0 ses=22979 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447115585.134:700364): pid=1213 uid=0 auid=0 ses=22979 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1213 suid=0 rport=36756 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447115585.134:700365): pid=1213 uid=0 auid=0 ses=22979 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=1213 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447115585.134:700366): pid=1213 uid=0 auid=0 ses=22979 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=1213 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447115585.134:700367): pid=1213 uid=0 auid=0 ses=22979 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=1213 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447116001.398:700368): pid=2504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447116001.398:700369): pid=2504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447116001.399:700370): pid=2504 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22980 res=1
type=USER_ACCT msg=audit(1447116001.401:700371): pid=2503 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447116001.401:700372): pid=2503 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447116001.401:700373): pid=2503 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22981 res=1
type=USER_START msg=audit(1447116001.417:700374): pid=2503 uid=0 auid=0 ses=22981 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447116001.418:700375): pid=2504 uid=0 auid=0 ses=22980 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447116001.418:700376): pid=2503 uid=0 auid=0 ses=22981 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447116001.418:700377): pid=2504 uid=0 auid=0 ses=22980 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447116001.425:700378): pid=2504 uid=0 auid=0 ses=22980 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447116001.429:700379): pid=2504 uid=0 auid=0 ses=22980 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447116001.436:700380): pid=2503 uid=0 auid=0 ses=22981 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447116001.437:700381): pid=2503 uid=0 auid=0 ses=22981 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447116601.463:700382): pid=4313 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447116601.463:700383): pid=4313 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447116601.463:700384): pid=4313 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22982 res=1
type=USER_ACCT msg=audit(1447116601.475:700385): pid=4314 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447116601.475:700386): pid=4314 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447116601.475:700387): pid=4314 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22983 res=1
type=USER_START msg=audit(1447116601.496:700388): pid=4313 uid=0 auid=0 ses=22982 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447116601.497:700389): pid=4313 uid=0 auid=0 ses=22982 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447116601.497:700390): pid=4314 uid=0 auid=0 ses=22983 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447116601.498:700391): pid=4314 uid=0 auid=0 ses=22983 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447116601.509:700392): pid=4314 uid=0 auid=0 ses=22983 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447116601.510:700393): pid=4314 uid=0 auid=0 ses=22983 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447116601.510:700394): pid=4313 uid=0 auid=0 ses=22982 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447116601.517:700395): pid=4313 uid=0 auid=0 ses=22982 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447116783.081:700396): pid=4891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=4891 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447116783.082:700397): pid=4891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=4891 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447116783.082:700398): pid=4891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=4891 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447116783.125:700399): pid=4890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=4891 suid=74 rport=38735 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447116783.125:700400): pid=4890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=4891 suid=74 rport=38735 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447116783.252:700401): pid=4890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38735 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447116783.253:700402): pid=4890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=38735 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447116783.257:700403): pid=4890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447116783.258:700404): pid=4890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4891 suid=74 rport=38735 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447116783.262:700405): pid=4890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447116783.262:700406): pid=4890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447116783.262:700407): pid=4890 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22984 res=1
type=USER_ROLE_CHANGE msg=audit(1447116783.331:700408): pid=4890 uid=0 auid=0 ses=22984 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447116783.352:700409): pid=4890 uid=0 auid=0 ses=22984 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447116783.355:700410): pid=4890 uid=0 auid=0 ses=22984 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447116783.355:700411): pid=4890 uid=0 auid=0 ses=22984 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447116783.357:700412): pid=4893 uid=0 auid=0 ses=22984 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=4893 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447116783.357:700413): pid=4893 uid=0 auid=0 ses=22984 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=4893 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447116783.357:700414): pid=4893 uid=0 auid=0 ses=22984 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=4893 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447116783.358:700415): pid=4893 uid=0 auid=0 ses=22984 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447116783.377:700416): pid=4890 uid=0 auid=0 ses=22984 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447116783.377:700417): pid=4890 uid=0 auid=0 ses=22984 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447116783.380:700418): pid=4890 uid=0 auid=0 ses=22984 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447116783.380:700419): pid=4890 uid=0 auid=0 ses=22984 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447116783.381:700420): pid=4890 uid=0 auid=0 ses=22984 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4890 suid=0 rport=38735 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447116783.381:700421): pid=4890 uid=0 auid=0 ses=22984 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=4890 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447116783.381:700422): pid=4890 uid=0 auid=0 ses=22984 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=4890 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447116783.381:700423): pid=4890 uid=0 auid=0 ses=22984 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=4890 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447116783.402:700424): pid=4913 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=4913 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447116783.402:700425): pid=4913 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=4913 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447116783.402:700426): pid=4913 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=4913 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447116783.447:700427): pid=4912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=4913 suid=74 rport=38736 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447116783.447:700428): pid=4912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=4913 suid=74 rport=38736 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447116783.574:700429): pid=4912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38736 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447116783.574:700430): pid=4912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=38736 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447116783.578:700431): pid=4912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447116783.579:700432): pid=4912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4913 suid=74 rport=38736 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447116783.580:700433): pid=4912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447116783.580:700434): pid=4912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447116783.580:700435): pid=4912 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22985 res=1
type=USER_ROLE_CHANGE msg=audit(1447116783.653:700436): pid=4912 uid=0 auid=0 ses=22985 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447116783.674:700437): pid=4912 uid=0 auid=0 ses=22985 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447116783.678:700438): pid=4912 uid=0 auid=0 ses=22985 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447116783.678:700439): pid=4912 uid=0 auid=0 ses=22985 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447116783.679:700440): pid=4915 uid=0 auid=0 ses=22985 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=4915 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447116783.679:700441): pid=4915 uid=0 auid=0 ses=22985 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=4915 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447116783.679:700442): pid=4915 uid=0 auid=0 ses=22985 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=4915 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447116783.680:700443): pid=4915 uid=0 auid=0 ses=22985 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447116784.949:700444): pid=4912 uid=0 auid=0 ses=22985 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447116784.950:700445): pid=4912 uid=0 auid=0 ses=22985 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447116784.956:700446): pid=4912 uid=0 auid=0 ses=22985 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447116784.956:700447): pid=4912 uid=0 auid=0 ses=22985 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447116784.957:700448): pid=4912 uid=0 auid=0 ses=22985 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4912 suid=0 rport=38736 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447116784.957:700449): pid=4912 uid=0 auid=0 ses=22985 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=4912 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447116784.957:700450): pid=4912 uid=0 auid=0 ses=22985 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=4912 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447116784.957:700451): pid=4912 uid=0 auid=0 ses=22985 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=4912 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447116784.989:700452): pid=4975 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=4975 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447116784.990:700453): pid=4975 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=4975 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447116784.990:700454): pid=4975 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=4975 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447116785.034:700455): pid=4974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=4975 suid=74 rport=38737 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447116785.034:700456): pid=4974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=4975 suid=74 rport=38737 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447116785.164:700457): pid=4974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38737 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447116785.164:700458): pid=4974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=38737 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447116785.173:700459): pid=4974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447116785.174:700460): pid=4974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4975 suid=74 rport=38737 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447116785.175:700461): pid=4974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447116785.176:700462): pid=4974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447116785.176:700463): pid=4974 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22986 res=1
type=USER_ROLE_CHANGE msg=audit(1447116785.243:700464): pid=4974 uid=0 auid=0 ses=22986 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447116785.267:700465): pid=4974 uid=0 auid=0 ses=22986 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447116785.269:700466): pid=4974 uid=0 auid=0 ses=22986 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447116785.269:700467): pid=4974 uid=0 auid=0 ses=22986 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447116785.270:700468): pid=4977 uid=0 auid=0 ses=22986 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=4977 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447116785.270:700469): pid=4977 uid=0 auid=0 ses=22986 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=4977 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447116785.271:700470): pid=4977 uid=0 auid=0 ses=22986 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=4977 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447116785.271:700471): pid=4977 uid=0 auid=0 ses=22986 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447116785.289:700472): pid=4974 uid=0 auid=0 ses=22986 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447116785.289:700473): pid=4974 uid=0 auid=0 ses=22986 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447116785.294:700474): pid=4974 uid=0 auid=0 ses=22986 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447116785.294:700475): pid=4974 uid=0 auid=0 ses=22986 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447116785.295:700476): pid=4974 uid=0 auid=0 ses=22986 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4974 suid=0 rport=38737 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447116785.295:700477): pid=4974 uid=0 auid=0 ses=22986 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=4974 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447116785.295:700478): pid=4974 uid=0 auid=0 ses=22986 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=4974 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447116785.295:700479): pid=4974 uid=0 auid=0 ses=22986 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=4974 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447117201.538:700480): pid=6204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447117201.538:700481): pid=6205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447117201.539:700482): pid=6205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447117201.539:700483): pid=6204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447117201.540:700484): pid=6205 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22987 res=1
type=LOGIN msg=audit(1447117201.540:700485): pid=6204 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22988 res=1
type=USER_START msg=audit(1447117201.558:700486): pid=6205 uid=0 auid=0 ses=22987 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447117201.558:700487): pid=6204 uid=0 auid=0 ses=22988 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447117201.559:700488): pid=6204 uid=0 auid=0 ses=22988 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447117201.559:700489): pid=6205 uid=0 auid=0 ses=22987 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447117201.567:700490): pid=6205 uid=0 auid=0 ses=22987 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447117201.569:700491): pid=6205 uid=0 auid=0 ses=22987 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447117201.578:700492): pid=6204 uid=0 auid=0 ses=22988 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447117201.580:700493): pid=6204 uid=0 auid=0 ses=22988 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447117261.590:700494): pid=6440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447117261.590:700495): pid=6440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447117261.590:700496): pid=6440 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22989 res=1
type=USER_START msg=audit(1447117261.600:700497): pid=6440 uid=0 auid=0 ses=22989 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447117261.601:700498): pid=6440 uid=0 auid=0 ses=22989 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447117261.631:700499): pid=6440 uid=0 auid=0 ses=22989 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447117261.632:700500): pid=6440 uid=0 auid=0 ses=22989 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1447117608.758:700501): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447117801.643:700502): pid=8111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447117801.643:700503): pid=8112 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447117801.643:700504): pid=8111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447117801.643:700505): pid=8112 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447117801.643:700506): pid=8112 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22990 res=1
type=LOGIN msg=audit(1447117801.643:700507): pid=8111 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22991 res=1
type=USER_START msg=audit(1447117801.660:700508): pid=8112 uid=0 auid=0 ses=22990 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447117801.660:700509): pid=8112 uid=0 auid=0 ses=22990 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447117801.661:700510): pid=8111 uid=0 auid=0 ses=22991 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447117801.661:700511): pid=8111 uid=0 auid=0 ses=22991 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447117801.667:700512): pid=8112 uid=0 auid=0 ses=22990 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447117801.668:700513): pid=8112 uid=0 auid=0 ses=22990 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447117801.677:700514): pid=8111 uid=0 auid=0 ses=22991 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447117801.678:700515): pid=8111 uid=0 auid=0 ses=22991 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447117983.199:700516): pid=8676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=8676 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447117983.199:700517): pid=8676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=8676 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447117983.199:700518): pid=8676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=8676 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447117983.243:700519): pid=8675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=8676 suid=74 rport=40716 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447117983.243:700520): pid=8675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=8676 suid=74 rport=40716 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447117983.373:700521): pid=8675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=40716 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447117983.373:700522): pid=8675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=40716 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447117983.381:700523): pid=8675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447117983.383:700524): pid=8675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8676 suid=74 rport=40716 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447117983.384:700525): pid=8675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447117983.384:700526): pid=8675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447117983.384:700527): pid=8675 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22992 res=1
type=USER_ROLE_CHANGE msg=audit(1447117983.454:700528): pid=8675 uid=0 auid=0 ses=22992 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447117983.475:700529): pid=8675 uid=0 auid=0 ses=22992 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447117983.478:700530): pid=8675 uid=0 auid=0 ses=22992 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447117983.478:700531): pid=8675 uid=0 auid=0 ses=22992 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447117983.480:700532): pid=8678 uid=0 auid=0 ses=22992 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=8678 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447117983.480:700533): pid=8678 uid=0 auid=0 ses=22992 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=8678 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447117983.480:700534): pid=8678 uid=0 auid=0 ses=22992 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=8678 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447117983.481:700535): pid=8678 uid=0 auid=0 ses=22992 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447117983.499:700536): pid=8675 uid=0 auid=0 ses=22992 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447117983.499:700537): pid=8675 uid=0 auid=0 ses=22992 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447117983.503:700538): pid=8675 uid=0 auid=0 ses=22992 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447117983.503:700539): pid=8675 uid=0 auid=0 ses=22992 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447117983.503:700540): pid=8675 uid=0 auid=0 ses=22992 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8675 suid=0 rport=40716 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447117983.503:700541): pid=8675 uid=0 auid=0 ses=22992 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=8675 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447117983.503:700542): pid=8675 uid=0 auid=0 ses=22992 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=8675 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447117983.503:700543): pid=8675 uid=0 auid=0 ses=22992 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=8675 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447117983.525:700544): pid=8686 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=8686 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447117983.525:700545): pid=8686 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=8686 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447117983.525:700546): pid=8686 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=8686 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447117983.570:700547): pid=8685 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=8686 suid=74 rport=40717 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447117983.570:700548): pid=8685 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=8686 suid=74 rport=40717 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447117983.699:700549): pid=8685 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=40717 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447117983.699:700550): pid=8685 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=40717 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447117983.706:700551): pid=8685 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447117983.707:700552): pid=8685 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8686 suid=74 rport=40717 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447117983.709:700553): pid=8685 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447117983.709:700554): pid=8685 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447117983.710:700555): pid=8685 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22993 res=1
type=USER_ROLE_CHANGE msg=audit(1447117983.775:700556): pid=8685 uid=0 auid=0 ses=22993 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447117983.792:700557): pid=8685 uid=0 auid=0 ses=22993 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447117983.795:700558): pid=8685 uid=0 auid=0 ses=22993 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447117983.795:700559): pid=8685 uid=0 auid=0 ses=22993 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447117983.796:700560): pid=8688 uid=0 auid=0 ses=22993 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=8688 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447117983.796:700561): pid=8688 uid=0 auid=0 ses=22993 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=8688 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447117983.796:700562): pid=8688 uid=0 auid=0 ses=22993 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=8688 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447117983.797:700563): pid=8688 uid=0 auid=0 ses=22993 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447117985.077:700564): pid=8685 uid=0 auid=0 ses=22993 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447117985.078:700565): pid=8685 uid=0 auid=0 ses=22993 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447117985.081:700566): pid=8685 uid=0 auid=0 ses=22993 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447117985.081:700567): pid=8685 uid=0 auid=0 ses=22993 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447117985.082:700568): pid=8685 uid=0 auid=0 ses=22993 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8685 suid=0 rport=40717 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447117985.082:700569): pid=8685 uid=0 auid=0 ses=22993 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=8685 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447117985.082:700570): pid=8685 uid=0 auid=0 ses=22993 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=8685 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447117985.082:700571): pid=8685 uid=0 auid=0 ses=22993 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=8685 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447117985.115:700572): pid=8738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=8738 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447117985.115:700573): pid=8738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=8738 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447117985.115:700574): pid=8738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=8738 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447117985.159:700575): pid=8737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=8738 suid=74 rport=40718 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447117985.160:700576): pid=8737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=8738 suid=74 rport=40718 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447117985.288:700577): pid=8737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=40718 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447117985.288:700578): pid=8737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=40718 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447117985.297:700579): pid=8737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447117985.298:700580): pid=8737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8738 suid=74 rport=40718 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447117985.299:700581): pid=8737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447117985.300:700582): pid=8737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447117985.300:700583): pid=8737 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22994 res=1
type=USER_ROLE_CHANGE msg=audit(1447117985.363:700584): pid=8737 uid=0 auid=0 ses=22994 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447117985.386:700585): pid=8737 uid=0 auid=0 ses=22994 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447117985.389:700586): pid=8737 uid=0 auid=0 ses=22994 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447117985.389:700587): pid=8737 uid=0 auid=0 ses=22994 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447117985.391:700588): pid=8740 uid=0 auid=0 ses=22994 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=8740 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447117985.391:700589): pid=8740 uid=0 auid=0 ses=22994 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=8740 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447117985.391:700590): pid=8740 uid=0 auid=0 ses=22994 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=8740 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447117985.392:700591): pid=8740 uid=0 auid=0 ses=22994 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447117985.409:700592): pid=8737 uid=0 auid=0 ses=22994 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447117985.409:700593): pid=8737 uid=0 auid=0 ses=22994 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447117985.412:700594): pid=8737 uid=0 auid=0 ses=22994 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447117985.413:700595): pid=8737 uid=0 auid=0 ses=22994 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447117985.413:700596): pid=8737 uid=0 auid=0 ses=22994 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8737 suid=0 rport=40718 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447117985.413:700597): pid=8737 uid=0 auid=0 ses=22994 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=8737 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447117985.414:700598): pid=8737 uid=0 auid=0 ses=22994 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=8737 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447117985.414:700599): pid=8737 uid=0 auid=0 ses=22994 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=8737 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447118401.698:700601): pid=10034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447118401.698:700600): pid=10033 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447118401.699:700602): pid=10033 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447118401.699:700603): pid=10034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447118401.700:700604): pid=10034 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22995 res=1
type=LOGIN msg=audit(1447118401.700:700605): pid=10033 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22996 res=1
type=USER_START msg=audit(1447118401.719:700606): pid=10034 uid=0 auid=0 ses=22995 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447118401.719:700607): pid=10033 uid=0 auid=0 ses=22996 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447118401.720:700608): pid=10033 uid=0 auid=0 ses=22996 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447118401.720:700609): pid=10034 uid=0 auid=0 ses=22995 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447118401.728:700610): pid=10034 uid=0 auid=0 ses=22995 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447118401.729:700611): pid=10034 uid=0 auid=0 ses=22995 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447118401.741:700612): pid=10033 uid=0 auid=0 ses=22996 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447118401.743:700613): pid=10033 uid=0 auid=0 ses=22996 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1447118664.698:700614): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447119001.760:700615): pid=11881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447119001.760:700616): pid=11880 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447119001.760:700617): pid=11881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447119001.760:700618): pid=11880 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447119001.761:700619): pid=11881 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22997 res=1
type=LOGIN msg=audit(1447119001.761:700620): pid=11880 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22998 res=1
type=USER_START msg=audit(1447119001.778:700621): pid=11880 uid=0 auid=0 ses=22998 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447119001.778:700622): pid=11881 uid=0 auid=0 ses=22997 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447119001.778:700623): pid=11880 uid=0 auid=0 ses=22998 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447119001.778:700624): pid=11881 uid=0 auid=0 ses=22997 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447119001.786:700625): pid=11881 uid=0 auid=0 ses=22997 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447119001.787:700626): pid=11881 uid=0 auid=0 ses=22997 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447119001.792:700627): pid=11880 uid=0 auid=0 ses=22998 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447119001.795:700628): pid=11880 uid=0 auid=0 ses=22998 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447119182.532:700629): pid=12441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12441 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447119182.533:700630): pid=12441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12441 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447119182.533:700631): pid=12441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12441 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447119182.578:700632): pid=12440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=12441 suid=74 rport=42697 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447119182.578:700633): pid=12440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=12441 suid=74 rport=42697 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447119182.705:700634): pid=12440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42697 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447119182.705:700635): pid=12440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=42697 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447119182.714:700636): pid=12440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447119182.715:700637): pid=12440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12441 suid=74 rport=42697 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447119182.716:700638): pid=12440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447119182.716:700639): pid=12440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447119182.716:700640): pid=12440 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22999 res=1
type=USER_ROLE_CHANGE msg=audit(1447119182.783:700641): pid=12440 uid=0 auid=0 ses=22999 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447119182.808:700642): pid=12440 uid=0 auid=0 ses=22999 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447119182.811:700643): pid=12440 uid=0 auid=0 ses=22999 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447119182.811:700644): pid=12440 uid=0 auid=0 ses=22999 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447119182.812:700645): pid=12446 uid=0 auid=0 ses=22999 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12446 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447119182.812:700646): pid=12446 uid=0 auid=0 ses=22999 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12446 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447119182.812:700647): pid=12446 uid=0 auid=0 ses=22999 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12446 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447119182.813:700648): pid=12446 uid=0 auid=0 ses=22999 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447119182.830:700649): pid=12440 uid=0 auid=0 ses=22999 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447119182.830:700650): pid=12440 uid=0 auid=0 ses=22999 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447119182.834:700651): pid=12440 uid=0 auid=0 ses=22999 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447119182.834:700652): pid=12440 uid=0 auid=0 ses=22999 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447119182.834:700653): pid=12440 uid=0 auid=0 ses=22999 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12440 suid=0 rport=42697 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447119182.835:700654): pid=12440 uid=0 auid=0 ses=22999 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12440 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447119182.835:700655): pid=12440 uid=0 auid=0 ses=22999 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12440 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447119182.835:700656): pid=12440 uid=0 auid=0 ses=22999 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12440 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447119182.859:700657): pid=12454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12454 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447119182.859:700658): pid=12454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12454 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447119182.859:700659): pid=12454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12454 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447119182.903:700660): pid=12453 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=12454 suid=74 rport=42698 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447119182.903:700661): pid=12453 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=12454 suid=74 rport=42698 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447119183.033:700662): pid=12453 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42698 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447119183.033:700663): pid=12453 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=42698 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447119183.040:700664): pid=12453 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447119183.040:700665): pid=12453 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12454 suid=74 rport=42698 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447119183.042:700666): pid=12453 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447119183.042:700667): pid=12453 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447119183.042:700668): pid=12453 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23000 res=1
type=USER_ROLE_CHANGE msg=audit(1447119183.106:700669): pid=12453 uid=0 auid=0 ses=23000 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447119183.133:700670): pid=12453 uid=0 auid=0 ses=23000 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447119183.135:700671): pid=12453 uid=0 auid=0 ses=23000 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447119183.135:700672): pid=12453 uid=0 auid=0 ses=23000 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447119183.137:700673): pid=12456 uid=0 auid=0 ses=23000 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12456 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447119183.137:700674): pid=12456 uid=0 auid=0 ses=23000 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12456 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447119183.137:700675): pid=12456 uid=0 auid=0 ses=23000 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12456 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447119183.137:700676): pid=12456 uid=0 auid=0 ses=23000 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447119184.406:700677): pid=12453 uid=0 auid=0 ses=23000 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447119184.406:700678): pid=12453 uid=0 auid=0 ses=23000 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447119184.410:700679): pid=12453 uid=0 auid=0 ses=23000 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447119184.410:700680): pid=12453 uid=0 auid=0 ses=23000 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447119184.410:700681): pid=12453 uid=0 auid=0 ses=23000 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12453 suid=0 rport=42698 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447119184.410:700682): pid=12453 uid=0 auid=0 ses=23000 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12453 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447119184.411:700683): pid=12453 uid=0 auid=0 ses=23000 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12453 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447119184.411:700684): pid=12453 uid=0 auid=0 ses=23000 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12453 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447119184.447:700685): pid=12506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12506 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447119184.447:700686): pid=12506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12506 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447119184.447:700687): pid=12506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12506 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447119184.491:700688): pid=12505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=12506 suid=74 rport=42699 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447119184.491:700689): pid=12505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=12506 suid=74 rport=42699 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447119184.620:700690): pid=12505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42699 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447119184.621:700691): pid=12505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=42699 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447119184.629:700692): pid=12505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447119184.631:700693): pid=12505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12506 suid=74 rport=42699 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447119184.632:700694): pid=12505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447119184.633:700695): pid=12505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447119184.633:700696): pid=12505 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23001 res=1
type=USER_ROLE_CHANGE msg=audit(1447119184.699:700697): pid=12505 uid=0 auid=0 ses=23001 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447119184.723:700698): pid=12505 uid=0 auid=0 ses=23001 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447119184.726:700699): pid=12505 uid=0 auid=0 ses=23001 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447119184.726:700700): pid=12505 uid=0 auid=0 ses=23001 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447119184.728:700701): pid=12508 uid=0 auid=0 ses=23001 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12508 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447119184.728:700702): pid=12508 uid=0 auid=0 ses=23001 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12508 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447119184.728:700703): pid=12508 uid=0 auid=0 ses=23001 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12508 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447119184.729:700704): pid=12508 uid=0 auid=0 ses=23001 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447119184.747:700705): pid=12505 uid=0 auid=0 ses=23001 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447119184.747:700706): pid=12505 uid=0 auid=0 ses=23001 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447119184.752:700707): pid=12505 uid=0 auid=0 ses=23001 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447119184.752:700708): pid=12505 uid=0 auid=0 ses=23001 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447119184.752:700709): pid=12505 uid=0 auid=0 ses=23001 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12505 suid=0 rport=42699 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447119184.752:700710): pid=12505 uid=0 auid=0 ses=23001 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12505 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447119184.752:700711): pid=12505 uid=0 auid=0 ses=23001 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12505 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447119184.752:700712): pid=12505 uid=0 auid=0 ses=23001 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12505 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447119601.813:700713): pid=13798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447119601.813:700714): pid=13798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447119601.813:700715): pid=13799 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447119601.813:700716): pid=13799 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447119601.814:700717): pid=13799 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23002 res=1
type=LOGIN msg=audit(1447119601.814:700718): pid=13798 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23003 res=1
type=USER_START msg=audit(1447119601.837:700719): pid=13799 uid=0 auid=0 ses=23002 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447119601.837:700720): pid=13798 uid=0 auid=0 ses=23003 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447119601.838:700721): pid=13799 uid=0 auid=0 ses=23002 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447119601.838:700722): pid=13798 uid=0 auid=0 ses=23003 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447119601.849:700723): pid=13799 uid=0 auid=0 ses=23002 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447119601.856:700724): pid=13799 uid=0 auid=0 ses=23002 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447119601.856:700725): pid=13798 uid=0 auid=0 ses=23003 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447119601.860:700726): pid=13798 uid=0 auid=0 ses=23003 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1447119746.759:700727): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447120201.878:700728): pid=15645 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447120201.878:700729): pid=15646 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447120201.878:700730): pid=15646 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447120201.878:700731): pid=15645 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447120201.879:700732): pid=15646 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23004 res=1
type=LOGIN msg=audit(1447120201.879:700733): pid=15645 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23005 res=1
type=USER_START msg=audit(1447120201.895:700734): pid=15646 uid=0 auid=0 ses=23004 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447120201.895:700735): pid=15645 uid=0 auid=0 ses=23005 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447120201.895:700736): pid=15646 uid=0 auid=0 ses=23004 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447120201.895:700737): pid=15645 uid=0 auid=0 ses=23005 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447120201.903:700738): pid=15646 uid=0 auid=0 ses=23004 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447120201.908:700739): pid=15646 uid=0 auid=0 ses=23004 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447120201.908:700740): pid=15645 uid=0 auid=0 ses=23005 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447120226.937:700741): pid=15645 uid=0 auid=0 ses=23005 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=CRYPTO_KEY_USER msg=audit(1447120383.377:700742): pid=16208 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16208 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447120383.377:700743): pid=16208 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16208 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447120383.377:700744): pid=16208 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16208 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447120383.421:700745): pid=16207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=16208 suid=74 rport=44678 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447120383.422:700746): pid=16207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=16208 suid=74 rport=44678 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447120383.552:700747): pid=16207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=44678 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447120383.552:700748): pid=16207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=44678 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447120383.561:700749): pid=16207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447120383.562:700750): pid=16207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16208 suid=74 rport=44678 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447120383.563:700751): pid=16207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447120383.564:700752): pid=16207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447120383.564:700753): pid=16207 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23006 res=1
type=USER_ROLE_CHANGE msg=audit(1447120383.633:700754): pid=16207 uid=0 auid=0 ses=23006 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447120383.653:700755): pid=16207 uid=0 auid=0 ses=23006 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447120383.656:700756): pid=16207 uid=0 auid=0 ses=23006 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447120383.656:700757): pid=16207 uid=0 auid=0 ses=23006 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447120383.657:700758): pid=16210 uid=0 auid=0 ses=23006 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16210 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447120383.657:700759): pid=16210 uid=0 auid=0 ses=23006 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16210 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447120383.657:700760): pid=16210 uid=0 auid=0 ses=23006 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16210 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447120383.658:700761): pid=16210 uid=0 auid=0 ses=23006 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447120383.680:700762): pid=16207 uid=0 auid=0 ses=23006 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447120383.680:700763): pid=16207 uid=0 auid=0 ses=23006 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447120383.684:700764): pid=16207 uid=0 auid=0 ses=23006 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447120383.684:700765): pid=16207 uid=0 auid=0 ses=23006 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447120383.685:700766): pid=16207 uid=0 auid=0 ses=23006 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16207 suid=0 rport=44678 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447120383.685:700767): pid=16207 uid=0 auid=0 ses=23006 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16207 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447120383.685:700768): pid=16207 uid=0 auid=0 ses=23006 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16207 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447120383.685:700769): pid=16207 uid=0 auid=0 ses=23006 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16207 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447120383.713:700770): pid=16218 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16218 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447120383.713:700771): pid=16218 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16218 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447120383.713:700772): pid=16218 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16218 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447120383.757:700773): pid=16217 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=16218 suid=74 rport=44679 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447120383.757:700774): pid=16217 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=16218 suid=74 rport=44679 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447120383.887:700775): pid=16217 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=44679 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447120383.887:700776): pid=16217 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=44679 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447120383.892:700777): pid=16217 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447120383.893:700778): pid=16217 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16218 suid=74 rport=44679 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447120383.895:700779): pid=16217 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447120383.896:700780): pid=16217 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447120383.896:700781): pid=16217 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23007 res=1
type=USER_ROLE_CHANGE msg=audit(1447120383.959:700782): pid=16217 uid=0 auid=0 ses=23007 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447120383.982:700783): pid=16217 uid=0 auid=0 ses=23007 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447120383.985:700784): pid=16217 uid=0 auid=0 ses=23007 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447120383.985:700785): pid=16217 uid=0 auid=0 ses=23007 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447120383.987:700786): pid=16220 uid=0 auid=0 ses=23007 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16220 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447120383.987:700787): pid=16220 uid=0 auid=0 ses=23007 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16220 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447120383.987:700788): pid=16220 uid=0 auid=0 ses=23007 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16220 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447120383.987:700789): pid=16220 uid=0 auid=0 ses=23007 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447120385.267:700790): pid=16217 uid=0 auid=0 ses=23007 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447120385.267:700791): pid=16217 uid=0 auid=0 ses=23007 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447120385.272:700792): pid=16217 uid=0 auid=0 ses=23007 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447120385.273:700793): pid=16217 uid=0 auid=0 ses=23007 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447120385.273:700794): pid=16217 uid=0 auid=0 ses=23007 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16217 suid=0 rport=44679 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447120385.274:700795): pid=16217 uid=0 auid=0 ses=23007 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16217 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447120385.274:700796): pid=16217 uid=0 auid=0 ses=23007 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16217 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447120385.274:700797): pid=16217 uid=0 auid=0 ses=23007 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16217 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447120385.301:700798): pid=16271 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16271 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447120385.302:700799): pid=16271 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16271 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447120385.302:700800): pid=16271 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16271 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447120385.346:700801): pid=16270 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=16271 suid=74 rport=44680 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447120385.346:700802): pid=16270 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=16271 suid=74 rport=44680 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447120385.470:700803): pid=16270 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=44680 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447120385.470:700804): pid=16270 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=44680 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447120385.475:700805): pid=16270 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447120385.476:700806): pid=16270 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16271 suid=74 rport=44680 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447120385.477:700807): pid=16270 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447120385.478:700808): pid=16270 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447120385.478:700809): pid=16270 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23008 res=1
type=USER_ROLE_CHANGE msg=audit(1447120385.544:700810): pid=16270 uid=0 auid=0 ses=23008 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447120385.569:700811): pid=16270 uid=0 auid=0 ses=23008 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447120385.572:700812): pid=16270 uid=0 auid=0 ses=23008 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447120385.572:700813): pid=16270 uid=0 auid=0 ses=23008 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447120385.573:700814): pid=16273 uid=0 auid=0 ses=23008 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16273 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447120385.573:700815): pid=16273 uid=0 auid=0 ses=23008 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16273 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447120385.573:700816): pid=16273 uid=0 auid=0 ses=23008 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16273 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447120385.575:700817): pid=16273 uid=0 auid=0 ses=23008 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447120385.593:700818): pid=16270 uid=0 auid=0 ses=23008 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447120385.593:700819): pid=16270 uid=0 auid=0 ses=23008 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447120385.596:700820): pid=16270 uid=0 auid=0 ses=23008 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447120385.597:700821): pid=16270 uid=0 auid=0 ses=23008 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447120385.597:700822): pid=16270 uid=0 auid=0 ses=23008 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16270 suid=0 rport=44680 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447120385.597:700823): pid=16270 uid=0 auid=0 ses=23008 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16270 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447120385.597:700824): pid=16270 uid=0 auid=0 ses=23008 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16270 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447120385.597:700825): pid=16270 uid=0 auid=0 ses=23008 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16270 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=SYSCALL msg=audit(1447120782.713:700826): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447120801.960:700827): pid=17565 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447120801.960:700828): pid=17565 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447120801.960:700829): pid=17564 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447120801.960:700830): pid=17564 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447120801.961:700831): pid=17565 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23009 res=1
type=LOGIN msg=audit(1447120801.961:700832): pid=17564 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23010 res=1
type=USER_START msg=audit(1447120801.978:700833): pid=17565 uid=0 auid=0 ses=23009 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447120801.978:700834): pid=17564 uid=0 auid=0 ses=23010 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447120801.979:700835): pid=17565 uid=0 auid=0 ses=23009 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447120801.979:700836): pid=17564 uid=0 auid=0 ses=23010 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447120801.986:700837): pid=17565 uid=0 auid=0 ses=23009 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447120801.988:700838): pid=17565 uid=0 auid=0 ses=23009 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447120801.999:700839): pid=17564 uid=0 auid=0 ses=23010 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447120802.001:700840): pid=17564 uid=0 auid=0 ses=23010 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447120861.014:700841): pid=17767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447120861.014:700842): pid=17767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447120861.015:700843): pid=17767 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23011 res=1
type=USER_START msg=audit(1447120861.024:700844): pid=17767 uid=0 auid=0 ses=23011 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447120861.024:700845): pid=17767 uid=0 auid=0 ses=23011 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447120861.055:700846): pid=17767 uid=0 auid=0 ses=23011 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447120861.057:700847): pid=17767 uid=0 auid=0 ses=23011 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447121401.072:700848): pid=19469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447121401.072:700849): pid=19469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447121401.072:700850): pid=19469 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23012 res=1
type=USER_ACCT msg=audit(1447121401.072:700851): pid=19470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447121401.072:700852): pid=19470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447121401.073:700853): pid=19470 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23013 res=1
type=USER_START msg=audit(1447121401.090:700854): pid=19470 uid=0 auid=0 ses=23013 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447121401.090:700855): pid=19470 uid=0 auid=0 ses=23013 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447121401.090:700856): pid=19469 uid=0 auid=0 ses=23012 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447121401.091:700857): pid=19469 uid=0 auid=0 ses=23012 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447121401.098:700858): pid=19470 uid=0 auid=0 ses=23013 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447121401.100:700859): pid=19470 uid=0 auid=0 ses=23013 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447121401.104:700860): pid=19469 uid=0 auid=0 ses=23012 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447121401.108:700861): pid=19469 uid=0 auid=0 ses=23012 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447121582.748:700862): pid=20033 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=20033 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447121582.748:700863): pid=20033 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=20033 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447121582.748:700864): pid=20033 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=20033 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447121582.794:700865): pid=20032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=20033 suid=74 rport=46657 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447121582.795:700866): pid=20032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=20033 suid=74 rport=46657 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447121582.924:700867): pid=20032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=46657 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447121582.924:700868): pid=20032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=46657 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447121582.932:700869): pid=20032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447121582.934:700870): pid=20032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20033 suid=74 rport=46657 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447121582.936:700871): pid=20032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447121582.936:700872): pid=20032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447121582.936:700873): pid=20032 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23014 res=1
type=USER_ROLE_CHANGE msg=audit(1447121583.004:700874): pid=20032 uid=0 auid=0 ses=23014 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447121583.030:700875): pid=20032 uid=0 auid=0 ses=23014 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447121583.035:700876): pid=20032 uid=0 auid=0 ses=23014 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447121583.035:700877): pid=20032 uid=0 auid=0 ses=23014 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447121583.037:700878): pid=20035 uid=0 auid=0 ses=23014 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=20035 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447121583.037:700879): pid=20035 uid=0 auid=0 ses=23014 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=20035 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447121583.037:700880): pid=20035 uid=0 auid=0 ses=23014 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=20035 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447121583.038:700881): pid=20035 uid=0 auid=0 ses=23014 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447121583.058:700882): pid=20032 uid=0 auid=0 ses=23014 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447121583.058:700883): pid=20032 uid=0 auid=0 ses=23014 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447121583.061:700884): pid=20032 uid=0 auid=0 ses=23014 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447121583.061:700885): pid=20032 uid=0 auid=0 ses=23014 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447121583.062:700886): pid=20032 uid=0 auid=0 ses=23014 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20032 suid=0 rport=46657 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447121583.062:700887): pid=20032 uid=0 auid=0 ses=23014 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=20032 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447121583.062:700888): pid=20032 uid=0 auid=0 ses=23014 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=20032 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447121583.062:700889): pid=20032 uid=0 auid=0 ses=23014 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=20032 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447121583.086:700890): pid=20043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=20043 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447121583.086:700891): pid=20043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=20043 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447121583.086:700892): pid=20043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=20043 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447121583.130:700893): pid=20042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=20043 suid=74 rport=46659 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447121583.130:700894): pid=20042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=20043 suid=74 rport=46659 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447121583.258:700895): pid=20042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=46659 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447121583.259:700896): pid=20042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=46659 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447121583.267:700897): pid=20042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447121583.269:700898): pid=20042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20043 suid=74 rport=46659 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447121583.270:700899): pid=20042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447121583.271:700900): pid=20042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447121583.271:700901): pid=20042 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23015 res=1
type=USER_ROLE_CHANGE msg=audit(1447121583.340:700902): pid=20042 uid=0 auid=0 ses=23015 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447121583.359:700903): pid=20042 uid=0 auid=0 ses=23015 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447121583.361:700904): pid=20042 uid=0 auid=0 ses=23015 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447121583.361:700905): pid=20042 uid=0 auid=0 ses=23015 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447121583.363:700906): pid=20045 uid=0 auid=0 ses=23015 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=20045 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447121583.363:700907): pid=20045 uid=0 auid=0 ses=23015 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=20045 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447121583.363:700908): pid=20045 uid=0 auid=0 ses=23015 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=20045 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447121583.363:700909): pid=20045 uid=0 auid=0 ses=23015 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447121584.641:700910): pid=20042 uid=0 auid=0 ses=23015 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447121584.641:700911): pid=20042 uid=0 auid=0 ses=23015 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447121584.646:700912): pid=20042 uid=0 auid=0 ses=23015 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447121584.646:700913): pid=20042 uid=0 auid=0 ses=23015 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447121584.647:700914): pid=20042 uid=0 auid=0 ses=23015 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20042 suid=0 rport=46659 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447121584.647:700915): pid=20042 uid=0 auid=0 ses=23015 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=20042 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447121584.647:700916): pid=20042 uid=0 auid=0 ses=23015 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=20042 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447121584.647:700917): pid=20042 uid=0 auid=0 ses=23015 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=20042 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447121584.680:700918): pid=20095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=20095 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447121584.680:700919): pid=20095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=20095 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447121584.681:700920): pid=20095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=20095 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447121584.725:700921): pid=20094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=20095 suid=74 rport=46660 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447121584.725:700922): pid=20094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=20095 suid=74 rport=46660 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447121584.854:700923): pid=20094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=46660 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447121584.854:700924): pid=20094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=46660 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447121584.864:700925): pid=20094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447121584.865:700926): pid=20094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20095 suid=74 rport=46660 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447121584.866:700927): pid=20094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447121584.866:700928): pid=20094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447121584.866:700929): pid=20094 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23016 res=1
type=USER_ROLE_CHANGE msg=audit(1447121584.934:700930): pid=20094 uid=0 auid=0 ses=23016 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447121584.957:700931): pid=20094 uid=0 auid=0 ses=23016 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447121584.959:700932): pid=20094 uid=0 auid=0 ses=23016 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447121584.959:700933): pid=20094 uid=0 auid=0 ses=23016 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447121584.961:700934): pid=20097 uid=0 auid=0 ses=23016 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=20097 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447121584.961:700935): pid=20097 uid=0 auid=0 ses=23016 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=20097 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447121584.961:700936): pid=20097 uid=0 auid=0 ses=23016 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=20097 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447121584.962:700937): pid=20097 uid=0 auid=0 ses=23016 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447121584.979:700938): pid=20094 uid=0 auid=0 ses=23016 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447121584.979:700939): pid=20094 uid=0 auid=0 ses=23016 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447121584.985:700940): pid=20094 uid=0 auid=0 ses=23016 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447121584.985:700941): pid=20094 uid=0 auid=0 ses=23016 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447121584.985:700942): pid=20094 uid=0 auid=0 ses=23016 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20094 suid=0 rport=46660 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447121584.985:700943): pid=20094 uid=0 auid=0 ses=23016 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=20094 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447121584.985:700944): pid=20094 uid=0 auid=0 ses=23016 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=20094 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447121584.985:700945): pid=20094 uid=0 auid=0 ses=23016 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=20094 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447122001.127:700946): pid=21426 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447122001.127:700947): pid=21426 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447122001.127:700948): pid=21425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447122001.127:700949): pid=21425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447122001.128:700950): pid=21426 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23017 res=1
type=LOGIN msg=audit(1447122001.128:700951): pid=21425 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23018 res=1
type=USER_START msg=audit(1447122001.149:700952): pid=21426 uid=0 auid=0 ses=23017 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447122001.150:700953): pid=21426 uid=0 auid=0 ses=23017 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447122001.151:700954): pid=21425 uid=0 auid=0 ses=23018 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447122001.151:700955): pid=21425 uid=0 auid=0 ses=23018 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447122001.159:700956): pid=21426 uid=0 auid=0 ses=23017 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447122001.160:700957): pid=21426 uid=0 auid=0 ses=23017 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447122001.173:700958): pid=21425 uid=0 auid=0 ses=23018 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447122001.174:700959): pid=21425 uid=0 auid=0 ses=23018 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447122601.187:700960): pid=23269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447122601.187:700961): pid=23269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447122601.187:700962): pid=23270 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447122601.187:700963): pid=23270 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447122601.188:700964): pid=23269 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23019 res=1
type=LOGIN msg=audit(1447122601.188:700965): pid=23270 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23020 res=1
type=USER_START msg=audit(1447122601.205:700966): pid=23269 uid=0 auid=0 ses=23019 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447122601.205:700967): pid=23269 uid=0 auid=0 ses=23019 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447122601.206:700968): pid=23270 uid=0 auid=0 ses=23020 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447122601.206:700969): pid=23270 uid=0 auid=0 ses=23020 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447122601.213:700970): pid=23270 uid=0 auid=0 ses=23020 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447122601.214:700971): pid=23270 uid=0 auid=0 ses=23020 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447122601.217:700972): pid=23269 uid=0 auid=0 ses=23019 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447122626.240:700973): pid=23269 uid=0 auid=0 ses=23019 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=CRYPTO_KEY_USER msg=audit(1447122783.367:700974): pid=23835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=23835 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447122783.367:700975): pid=23835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=23835 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447122783.368:700976): pid=23835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=23835 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447122783.413:700977): pid=23834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=23835 suid=74 rport=48640 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447122783.413:700978): pid=23834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=23835 suid=74 rport=48640 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447122783.543:700979): pid=23834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=48640 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447122783.543:700980): pid=23834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=48640 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447122783.552:700981): pid=23834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447122783.554:700982): pid=23834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23835 suid=74 rport=48640 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447122783.556:700983): pid=23834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447122783.556:700984): pid=23834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447122783.557:700985): pid=23834 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23021 res=1
type=USER_ROLE_CHANGE msg=audit(1447122783.625:700986): pid=23834 uid=0 auid=0 ses=23021 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447122783.644:700987): pid=23834 uid=0 auid=0 ses=23021 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447122783.647:700988): pid=23834 uid=0 auid=0 ses=23021 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447122783.647:700989): pid=23834 uid=0 auid=0 ses=23021 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447122783.648:700990): pid=23837 uid=0 auid=0 ses=23021 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=23837 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447122783.648:700991): pid=23837 uid=0 auid=0 ses=23021 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=23837 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447122783.648:700992): pid=23837 uid=0 auid=0 ses=23021 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=23837 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447122783.649:700993): pid=23837 uid=0 auid=0 ses=23021 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447122783.668:700994): pid=23834 uid=0 auid=0 ses=23021 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447122783.669:700995): pid=23834 uid=0 auid=0 ses=23021 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447122783.672:700996): pid=23834 uid=0 auid=0 ses=23021 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447122783.672:700997): pid=23834 uid=0 auid=0 ses=23021 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447122783.672:700998): pid=23834 uid=0 auid=0 ses=23021 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23834 suid=0 rport=48640 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447122783.672:700999): pid=23834 uid=0 auid=0 ses=23021 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=23834 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447122783.672:701000): pid=23834 uid=0 auid=0 ses=23021 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=23834 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447122783.672:701001): pid=23834 uid=0 auid=0 ses=23021 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=23834 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447122783.698:701002): pid=23845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=23845 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447122783.699:701003): pid=23845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=23845 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447122783.699:701004): pid=23845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=23845 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447122783.743:701005): pid=23844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=23845 suid=74 rport=48643 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447122783.743:701006): pid=23844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=23845 suid=74 rport=48643 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447122783.871:701007): pid=23844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=48643 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447122783.871:701008): pid=23844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=48643 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447122783.877:701009): pid=23844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447122783.877:701010): pid=23844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23845 suid=74 rport=48643 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447122783.879:701011): pid=23844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447122783.879:701012): pid=23844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447122783.879:701013): pid=23844 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23022 res=1
type=USER_ROLE_CHANGE msg=audit(1447122783.945:701014): pid=23844 uid=0 auid=0 ses=23022 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447122783.966:701015): pid=23844 uid=0 auid=0 ses=23022 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447122783.969:701016): pid=23844 uid=0 auid=0 ses=23022 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447122783.969:701017): pid=23844 uid=0 auid=0 ses=23022 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447122783.971:701018): pid=23847 uid=0 auid=0 ses=23022 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=23847 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447122783.971:701019): pid=23847 uid=0 auid=0 ses=23022 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=23847 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447122783.971:701020): pid=23847 uid=0 auid=0 ses=23022 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=23847 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447122783.972:701021): pid=23847 uid=0 auid=0 ses=23022 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447122785.251:701022): pid=23844 uid=0 auid=0 ses=23022 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447122785.251:701023): pid=23844 uid=0 auid=0 ses=23022 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447122785.255:701024): pid=23844 uid=0 auid=0 ses=23022 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447122785.255:701025): pid=23844 uid=0 auid=0 ses=23022 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447122785.256:701026): pid=23844 uid=0 auid=0 ses=23022 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23844 suid=0 rport=48643 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447122785.256:701027): pid=23844 uid=0 auid=0 ses=23022 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=23844 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447122785.256:701028): pid=23844 uid=0 auid=0 ses=23022 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=23844 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447122785.256:701029): pid=23844 uid=0 auid=0 ses=23022 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=23844 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447122785.291:701030): pid=23897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=23897 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447122785.291:701031): pid=23897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=23897 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447122785.291:701032): pid=23897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=23897 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447122785.336:701033): pid=23896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=23897 suid=74 rport=48646 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447122785.336:701034): pid=23896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=23897 suid=74 rport=48646 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447122785.465:701035): pid=23896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=48646 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447122785.465:701036): pid=23896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=48646 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447122785.475:701037): pid=23896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447122785.476:701038): pid=23896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23897 suid=74 rport=48646 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447122785.479:701039): pid=23896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447122785.479:701040): pid=23896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447122785.479:701041): pid=23896 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23023 res=1
type=USER_ROLE_CHANGE msg=audit(1447122785.546:701042): pid=23896 uid=0 auid=0 ses=23023 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447122785.566:701043): pid=23896 uid=0 auid=0 ses=23023 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447122785.570:701044): pid=23896 uid=0 auid=0 ses=23023 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447122785.570:701045): pid=23896 uid=0 auid=0 ses=23023 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447122785.572:701046): pid=23899 uid=0 auid=0 ses=23023 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=23899 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447122785.572:701047): pid=23899 uid=0 auid=0 ses=23023 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=23899 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447122785.572:701048): pid=23899 uid=0 auid=0 ses=23023 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=23899 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447122785.573:701049): pid=23899 uid=0 auid=0 ses=23023 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447122785.596:701050): pid=23896 uid=0 auid=0 ses=23023 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447122785.596:701051): pid=23896 uid=0 auid=0 ses=23023 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447122785.600:701052): pid=23896 uid=0 auid=0 ses=23023 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447122785.600:701053): pid=23896 uid=0 auid=0 ses=23023 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447122785.601:701054): pid=23896 uid=0 auid=0 ses=23023 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23896 suid=0 rport=48646 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447122785.601:701055): pid=23896 uid=0 auid=0 ses=23023 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=23896 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447122785.601:701056): pid=23896 uid=0 auid=0 ses=23023 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=23896 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447122785.601:701057): pid=23896 uid=0 auid=0 ses=23023 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=23896 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=SYSCALL msg=audit(1447122902.737:701058): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=CRYPTO_KEY_USER msg=audit(1447122935.943:701059): pid=24386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=24386 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447122935.943:701060): pid=24386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=24386 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447122935.943:701061): pid=24386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=24386 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447122935.988:701062): pid=24385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=24386 suid=74 rport=49187 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447122935.989:701063): pid=24385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=24386 suid=74 rport=49187 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447122936.118:701064): pid=24385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=49187 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447122936.118:701065): pid=24385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=49187 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447122936.124:701066): pid=24385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447122936.125:701067): pid=24385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24386 suid=74 rport=49187 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447122936.126:701068): pid=24385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447122936.126:701069): pid=24385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447122936.126:701070): pid=24385 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23024 res=1
type=USER_ROLE_CHANGE msg=audit(1447122936.191:701071): pid=24385 uid=0 auid=0 ses=23024 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447122936.209:701072): pid=24385 uid=0 auid=0 ses=23024 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447122936.212:701073): pid=24385 uid=0 auid=0 ses=23024 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447122936.213:701074): pid=24385 uid=0 auid=0 ses=23024 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447122936.214:701075): pid=24388 uid=0 auid=0 ses=23024 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=24388 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447122936.214:701076): pid=24388 uid=0 auid=0 ses=23024 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=24388 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447122936.215:701077): pid=24388 uid=0 auid=0 ses=23024 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=24388 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447122936.215:701078): pid=24388 uid=0 auid=0 ses=23024 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447122936.237:701079): pid=24385 uid=0 auid=0 ses=23024 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447122936.237:701080): pid=24385 uid=0 auid=0 ses=23024 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447122936.243:701081): pid=24385 uid=0 auid=0 ses=23024 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447122936.243:701082): pid=24385 uid=0 auid=0 ses=23024 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447122936.244:701083): pid=24385 uid=0 auid=0 ses=23024 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24385 suid=0 rport=49187 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447122936.244:701084): pid=24385 uid=0 auid=0 ses=23024 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=24385 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447122936.244:701085): pid=24385 uid=0 auid=0 ses=23024 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=24385 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447122936.245:701086): pid=24385 uid=0 auid=0 ses=23024 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=24385 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447122936.265:701087): pid=24396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=24396 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447122936.266:701088): pid=24396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=24396 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447122936.266:701089): pid=24396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=24396 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447122936.309:701090): pid=24395 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=24396 suid=74 rport=49188 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447122936.310:701091): pid=24395 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=24396 suid=74 rport=49188 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447122936.440:701092): pid=24395 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=49188 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447122936.440:701093): pid=24395 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=49188 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447122936.449:701094): pid=24395 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447122936.450:701095): pid=24395 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24396 suid=74 rport=49188 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447122936.451:701096): pid=24395 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447122936.451:701097): pid=24395 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447122936.451:701098): pid=24395 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23025 res=1
type=USER_ROLE_CHANGE msg=audit(1447122936.516:701099): pid=24395 uid=0 auid=0 ses=23025 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447122936.542:701100): pid=24395 uid=0 auid=0 ses=23025 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447122936.544:701101): pid=24395 uid=0 auid=0 ses=23025 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447122936.544:701102): pid=24395 uid=0 auid=0 ses=23025 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447122936.545:701103): pid=24398 uid=0 auid=0 ses=23025 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=24398 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447122936.545:701104): pid=24398 uid=0 auid=0 ses=23025 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=24398 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447122936.545:701105): pid=24398 uid=0 auid=0 ses=23025 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=24398 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447122936.546:701106): pid=24398 uid=0 auid=0 ses=23025 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=SYSCALL msg=audit(1447122937.453:701107): arch=c000003e syscall=59 success=yes exit=0 a0=93a500 a1=937680 a2=92f5e0 a3=7fffb90fa540 items=3 ppid=24398 pid=24466 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23025 comm="service" exe="/usr/bin/bash" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key="privileged"
type=EXECVE msg=audit(1447122937.453:701107): argc=4 a0="/bin/sh" a1="/sbin/service" a2="snmpd" a3="status"
type=CWD msg=audit(1447122937.453:701107):  cwd="/root"
type=PATH msg=audit(1447122937.453:701107): item=0 name="/sbin/service" inode=663302 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:bin_t:s0 objtype=NORMAL
type=PATH msg=audit(1447122937.453:701107): item=1 name=(null) inode=25167244 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:shell_exec_t:s0 objtype=NORMAL
type=PATH msg=audit(1447122937.453:701107): item=2 name=(null) inode=2292 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=SYSCALL msg=audit(1447122937.474:701108): arch=c000003e syscall=59 success=yes exit=0 a0=1bed740 a1=1c16e90 a2=1beef50 a3=7fff15647a60 items=2 ppid=24398 pid=24466 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23025 comm="systemctl" exe="/usr/bin/systemctl" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key="privileged"
type=EXECVE msg=audit(1447122937.474:701108): argc=3 a0="/bin/systemctl" a1="status" a2="snmpd.service"
type=CWD msg=audit(1447122937.474:701108):  cwd="/"
type=PATH msg=audit(1447122937.474:701108): item=0 name="/bin/systemctl" inode=25275302 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:systemd_systemctl_exec_t:s0 objtype=NORMAL
type=PATH msg=audit(1447122937.474:701108): item=1 name=(null) inode=2292 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=SYSCALL msg=audit(1447122937.492:701109): arch=c000003e syscall=59 success=yes exit=0 a0=93a130 a1=93ab90 a2=92f5e0 a3=7fffb90f9f90 items=2 ppid=24398 pid=24480 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23025 comm="systemctl" exe="/usr/bin/systemctl" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key="privileged"
type=EXECVE msg=audit(1447122937.492:701109): argc=3 a0="/bin/systemctl" a1="is-enabled" a2="snmpd"
type=CWD msg=audit(1447122937.492:701109):  cwd="/root"
type=PATH msg=audit(1447122937.492:701109): item=0 name="/bin/systemctl" inode=25275302 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:systemd_systemctl_exec_t:s0 objtype=NORMAL
type=PATH msg=audit(1447122937.492:701109): item=1 name=(null) inode=2292 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=SYSCALL msg=audit(1447122937.494:701110): arch=c000003e syscall=59 success=yes exit=0 a0=92dc30 a1=937680 a2=92f5e0 a3=7fffb90fa540 items=3 ppid=24398 pid=24481 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23025 comm="service" exe="/usr/bin/bash" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key="privileged"
type=EXECVE msg=audit(1447122937.494:701110): argc=4 a0="/bin/sh" a1="/sbin/service" a2="crond" a3="status"
type=CWD msg=audit(1447122937.494:701110):  cwd="/root"
type=PATH msg=audit(1447122937.494:701110): item=0 name="/sbin/service" inode=663302 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:bin_t:s0 objtype=NORMAL
type=PATH msg=audit(1447122937.494:701110): item=1 name=(null) inode=25167244 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:shell_exec_t:s0 objtype=NORMAL
type=PATH msg=audit(1447122937.494:701110): item=2 name=(null) inode=2292 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=SYSCALL msg=audit(1447122937.518:701111): arch=c000003e syscall=59 success=yes exit=0 a0=207e740 a1=20a7e90 a2=207ff50 a3=7fff2c9cdcf0 items=2 ppid=24398 pid=24481 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23025 comm="systemctl" exe="/usr/bin/systemctl" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key="privileged"
type=EXECVE msg=audit(1447122937.518:701111): argc=3 a0="/bin/systemctl" a1="status" a2="crond.service"
type=CWD msg=audit(1447122937.518:701111):  cwd="/"
type=PATH msg=audit(1447122937.518:701111): item=0 name="/bin/systemctl" inode=25275302 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:systemd_systemctl_exec_t:s0 objtype=NORMAL
type=PATH msg=audit(1447122937.518:701111): item=1 name=(null) inode=2292 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=SYSCALL msg=audit(1447122937.531:701112): arch=c000003e syscall=59 success=yes exit=0 a0=93af70 a1=93ab90 a2=92f5e0 a3=7fffb90f9f90 items=2 ppid=24398 pid=24495 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23025 comm="systemctl" exe="/usr/bin/systemctl" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key="privileged"
type=EXECVE msg=audit(1447122937.531:701112): argc=3 a0="/bin/systemctl" a1="is-enabled" a2="crond"
type=CWD msg=audit(1447122937.531:701112):  cwd="/root"
type=PATH msg=audit(1447122937.531:701112): item=0 name="/bin/systemctl" inode=25275302 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:systemd_systemctl_exec_t:s0 objtype=NORMAL
type=PATH msg=audit(1447122937.531:701112): item=1 name=(null) inode=2292 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=SYSCALL msg=audit(1447122937.534:701113): arch=c000003e syscall=59 success=yes exit=0 a0=93a4c0 a1=937680 a2=92f5e0 a3=7fffb90fa540 items=3 ppid=24398 pid=24496 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23025 comm="service" exe="/usr/bin/bash" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key="privileged"
type=EXECVE msg=audit(1447122937.534:701113): argc=4 a0="/bin/sh" a1="/sbin/service" a2="firewalld" a3="status"
type=CWD msg=audit(1447122937.534:701113):  cwd="/root"
type=PATH msg=audit(1447122937.534:701113): item=0 name="/sbin/service" inode=663302 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:bin_t:s0 objtype=NORMAL
type=PATH msg=audit(1447122937.534:701113): item=1 name=(null) inode=25167244 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:shell_exec_t:s0 objtype=NORMAL
type=PATH msg=audit(1447122937.534:701113): item=2 name=(null) inode=2292 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=SYSCALL msg=audit(1447122937.554:701114): arch=c000003e syscall=59 success=yes exit=0 a0=ece740 a1=ef7e90 a2=ecff50 a3=7fff22f65ef0 items=2 ppid=24398 pid=24496 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23025 comm="systemctl" exe="/usr/bin/systemctl" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key="privileged"
type=EXECVE msg=audit(1447122937.554:701114): argc=3 a0="/bin/systemctl" a1="status" a2="firewalld.service"
type=CWD msg=audit(1447122937.554:701114):  cwd="/"
type=PATH msg=audit(1447122937.554:701114): item=0 name="/bin/systemctl" inode=25275302 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:systemd_systemctl_exec_t:s0 objtype=NORMAL
type=PATH msg=audit(1447122937.554:701114): item=1 name=(null) inode=2292 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=SYSCALL msg=audit(1447122937.562:701115): arch=c000003e syscall=59 success=yes exit=0 a0=93a4e0 a1=93abf0 a2=92f5e0 a3=7fffb90f9f90 items=2 ppid=24398 pid=24510 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23025 comm="systemctl" exe="/usr/bin/systemctl" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key="privileged"
type=EXECVE msg=audit(1447122937.562:701115): argc=3 a0="/bin/systemctl" a1="is-enabled" a2="firewalld"
type=CWD msg=audit(1447122937.562:701115):  cwd="/root"
type=PATH msg=audit(1447122937.562:701115): item=0 name="/bin/systemctl" inode=25275302 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:systemd_systemctl_exec_t:s0 objtype=NORMAL
type=PATH msg=audit(1447122937.562:701115): item=1 name=(null) inode=2292 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=SYSCALL msg=audit(1447122937.566:701116): arch=c000003e syscall=59 success=yes exit=0 a0=939fd0 a1=937680 a2=92f5e0 a3=7fffb90fa540 items=3 ppid=24398 pid=24511 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23025 comm="service" exe="/usr/bin/bash" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key="privileged"
type=EXECVE msg=audit(1447122937.566:701116): argc=4 a0="/bin/sh" a1="/sbin/service" a2="ntpd" a3="status"
type=CWD msg=audit(1447122937.566:701116):  cwd="/root"
type=PATH msg=audit(1447122937.566:701116): item=0 name="/sbin/service" inode=663302 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:bin_t:s0 objtype=NORMAL
type=PATH msg=audit(1447122937.566:701116): item=1 name=(null) inode=25167244 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:shell_exec_t:s0 objtype=NORMAL
type=PATH msg=audit(1447122937.566:701116): item=2 name=(null) inode=2292 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=SYSCALL msg=audit(1447122937.583:701117): arch=c000003e syscall=59 success=yes exit=0 a0=2627740 a1=2650e90 a2=2628f50 a3=7fffee650f30 items=2 ppid=24398 pid=24511 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23025 comm="systemctl" exe="/usr/bin/systemctl" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key="privileged"
type=EXECVE msg=audit(1447122937.583:701117): argc=3 a0="/bin/systemctl" a1="status" a2="ntpd.service"
type=CWD msg=audit(1447122937.583:701117):  cwd="/"
type=PATH msg=audit(1447122937.583:701117): item=0 name="/bin/systemctl" inode=25275302 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:systemd_systemctl_exec_t:s0 objtype=NORMAL
type=PATH msg=audit(1447122937.583:701117): item=1 name=(null) inode=2292 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=SYSCALL msg=audit(1447122937.639:701118): arch=c000003e syscall=59 success=yes exit=0 a0=93a8a0 a1=937d00 a2=92f5e0 a3=7fffb90f9f90 items=2 ppid=24398 pid=24534 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23025 comm="systemctl" exe="/usr/bin/systemctl" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key="privileged"
type=EXECVE msg=audit(1447122937.639:701118): argc=3 a0="/bin/systemctl" a1="is-enabled" a2="ntpd"
type=CWD msg=audit(1447122937.639:701118):  cwd="/root"
type=PATH msg=audit(1447122937.639:701118): item=0 name="/bin/systemctl" inode=25275302 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:systemd_systemctl_exec_t:s0 objtype=NORMAL
type=PATH msg=audit(1447122937.639:701118): item=1 name=(null) inode=2292 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=SYSCALL msg=audit(1447122938.500:701119): arch=c000003e syscall=59 success=yes exit=0 a0=939cb0 a1=93d9a0 a2=92f5e0 a3=7fffb90f8740 items=2 ppid=24398 pid=24622 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23025 comm="systemctl" exe="/usr/bin/systemctl" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key="privileged"
type=EXECVE msg=audit(1447122938.500:701119): argc=3 a0="/bin/systemctl" a1="is-enabled" a2="auditd"
type=CWD msg=audit(1447122938.500:701119):  cwd="/root"
type=PATH msg=audit(1447122938.500:701119): item=0 name="/bin/systemctl" inode=25275302 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:systemd_systemctl_exec_t:s0 objtype=NORMAL
type=PATH msg=audit(1447122938.500:701119): item=1 name=(null) inode=2292 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=SYSCALL msg=audit(1447122938.504:701120): arch=c000003e syscall=59 success=yes exit=0 a0=93dcd0 a1=93c040 a2=92f5e0 a3=7fffb90f8de0 items=3 ppid=24398 pid=24623 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23025 comm="service" exe="/usr/bin/bash" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key="privileged"
type=EXECVE msg=audit(1447122938.504:701120): argc=4 a0="/bin/sh" a1="/sbin/service" a2="auditd" a3="status"
type=CWD msg=audit(1447122938.504:701120):  cwd="/root"
type=PATH msg=audit(1447122938.504:701120): item=0 name="/sbin/service" inode=663302 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:bin_t:s0 objtype=NORMAL
type=PATH msg=audit(1447122938.504:701120): item=1 name=(null) inode=25167244 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:shell_exec_t:s0 objtype=NORMAL
type=PATH msg=audit(1447122938.504:701120): item=2 name=(null) inode=2292 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=SYSCALL msg=audit(1447122938.523:701121): arch=c000003e syscall=59 success=yes exit=0 a0=2514740 a1=253de90 a2=2515f50 a3=7fffcfb81ff0 items=2 ppid=24398 pid=24623 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23025 comm="systemctl" exe="/usr/bin/systemctl" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key="privileged"
type=EXECVE msg=audit(1447122938.523:701121): argc=3 a0="/bin/systemctl" a1="status" a2="auditd.service"
type=CWD msg=audit(1447122938.523:701121):  cwd="/"
type=PATH msg=audit(1447122938.523:701121): item=0 name="/bin/systemctl" inode=25275302 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:systemd_systemctl_exec_t:s0 objtype=NORMAL
type=PATH msg=audit(1447122938.523:701121): item=1 name=(null) inode=2292 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=SYSCALL msg=audit(1447122938.802:701122): arch=c000003e syscall=59 success=yes exit=0 a0=948250 a1=937c20 a2=92f5e0 a3=7fffb90fa540 items=2 ppid=24398 pid=24768 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23025 comm="systemctl" exe="/usr/bin/systemctl" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key="privileged"
type=EXECVE msg=audit(1447122938.802:701122): argc=3 a0="/bin/systemctl" a1="is-enabled" a2="os_watcher"
type=CWD msg=audit(1447122938.802:701122):  cwd="/root"
type=PATH msg=audit(1447122938.802:701122): item=0 name="/bin/systemctl" inode=25275302 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:systemd_systemctl_exec_t:s0 objtype=NORMAL
type=PATH msg=audit(1447122938.802:701122): item=1 name=(null) inode=2292 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=USER_END msg=audit(1447122938.875:701123): pid=24395 uid=0 auid=0 ses=23025 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447122938.875:701124): pid=24395 uid=0 auid=0 ses=23025 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447122938.879:701125): pid=24395 uid=0 auid=0 ses=23025 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447122938.879:701126): pid=24395 uid=0 auid=0 ses=23025 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447122938.880:701127): pid=24395 uid=0 auid=0 ses=23025 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24395 suid=0 rport=49188 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447122938.880:701128): pid=24395 uid=0 auid=0 ses=23025 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=24395 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447122938.880:701129): pid=24395 uid=0 auid=0 ses=23025 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=24395 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447122938.880:701130): pid=24395 uid=0 auid=0 ses=23025 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=24395 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447122938.912:701131): pid=24854 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=24854 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447122938.912:701132): pid=24854 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=24854 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447122938.912:701133): pid=24854 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=24854 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447122938.956:701134): pid=24853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=24854 suid=74 rport=49202 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447122938.956:701135): pid=24853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=24854 suid=74 rport=49202 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447122939.084:701136): pid=24853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=49202 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447122939.084:701137): pid=24853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=49202 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447122939.093:701138): pid=24853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447122939.094:701139): pid=24853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24854 suid=74 rport=49202 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447122939.097:701140): pid=24853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447122939.098:701141): pid=24853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447122939.099:701142): pid=24853 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23026 res=1
type=USER_ROLE_CHANGE msg=audit(1447122939.169:701143): pid=24853 uid=0 auid=0 ses=23026 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447122939.191:701144): pid=24853 uid=0 auid=0 ses=23026 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447122939.194:701145): pid=24853 uid=0 auid=0 ses=23026 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447122939.194:701146): pid=24853 uid=0 auid=0 ses=23026 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447122939.195:701147): pid=24856 uid=0 auid=0 ses=23026 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=24856 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447122939.195:701148): pid=24856 uid=0 auid=0 ses=23026 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=24856 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447122939.196:701149): pid=24856 uid=0 auid=0 ses=23026 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=24856 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447122939.196:701150): pid=24856 uid=0 auid=0 ses=23026 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447122939.214:701151): pid=24853 uid=0 auid=0 ses=23026 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447122939.214:701152): pid=24853 uid=0 auid=0 ses=23026 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447122939.218:701153): pid=24853 uid=0 auid=0 ses=23026 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447122939.218:701154): pid=24853 uid=0 auid=0 ses=23026 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447122939.218:701155): pid=24853 uid=0 auid=0 ses=23026 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24853 suid=0 rport=49202 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447122939.218:701156): pid=24853 uid=0 auid=0 ses=23026 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=24853 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447122939.218:701157): pid=24853 uid=0 auid=0 ses=23026 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=24853 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447122939.218:701158): pid=24853 uid=0 auid=0 ses=23026 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=24853 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447123201.264:701160): pid=25663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447123201.264:701159): pid=25664 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447123201.264:701161): pid=25664 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447123201.264:701162): pid=25663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447123201.265:701163): pid=25664 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23027 res=1
type=LOGIN msg=audit(1447123201.265:701164): pid=25663 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23028 res=1
type=USER_START msg=audit(1447123201.284:701165): pid=25664 uid=0 auid=0 ses=23027 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447123201.284:701166): pid=25663 uid=0 auid=0 ses=23028 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447123201.284:701167): pid=25664 uid=0 auid=0 ses=23027 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447123201.284:701168): pid=25663 uid=0 auid=0 ses=23028 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447123201.293:701169): pid=25664 uid=0 auid=0 ses=23027 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447123201.294:701170): pid=25664 uid=0 auid=0 ses=23027 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447123201.299:701171): pid=25663 uid=0 auid=0 ses=23028 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447123201.301:701172): pid=25663 uid=0 auid=0 ses=23028 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447123801.318:701173): pid=27448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447123801.318:701174): pid=27447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447123801.318:701175): pid=27448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447123801.318:701176): pid=27447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447123801.319:701177): pid=27448 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23029 res=1
type=LOGIN msg=audit(1447123801.319:701178): pid=27447 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23030 res=1
type=USER_START msg=audit(1447123801.334:701179): pid=27447 uid=0 auid=0 ses=23030 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447123801.334:701180): pid=27448 uid=0 auid=0 ses=23029 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447123801.335:701181): pid=27447 uid=0 auid=0 ses=23030 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447123801.335:701182): pid=27448 uid=0 auid=0 ses=23029 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447123801.343:701183): pid=27448 uid=0 auid=0 ses=23029 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447123801.346:701184): pid=27448 uid=0 auid=0 ses=23029 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447123801.349:701185): pid=27447 uid=0 auid=0 ses=23030 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447123801.353:701186): pid=27447 uid=0 auid=0 ses=23030 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1447123951.759:701187): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=CRYPTO_KEY_USER msg=audit(1447123983.289:701188): pid=28051 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=28051 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447123983.289:701189): pid=28051 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=28051 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447123983.290:701190): pid=28051 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=28051 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447123983.333:701191): pid=28050 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=28051 suid=74 rport=50775 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447123983.334:701192): pid=28050 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=28051 suid=74 rport=50775 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447123983.462:701193): pid=28050 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=50775 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447123983.462:701194): pid=28050 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=50775 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447123983.471:701195): pid=28050 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447123983.472:701196): pid=28050 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=28051 suid=74 rport=50775 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447123983.473:701197): pid=28050 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447123983.473:701198): pid=28050 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447123983.474:701199): pid=28050 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23031 res=1
type=USER_ROLE_CHANGE msg=audit(1447123983.542:701200): pid=28050 uid=0 auid=0 ses=23031 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447123983.563:701201): pid=28050 uid=0 auid=0 ses=23031 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447123983.566:701202): pid=28050 uid=0 auid=0 ses=23031 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447123983.566:701203): pid=28050 uid=0 auid=0 ses=23031 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447123983.567:701204): pid=28053 uid=0 auid=0 ses=23031 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=28053 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447123983.567:701205): pid=28053 uid=0 auid=0 ses=23031 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=28053 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447123983.567:701206): pid=28053 uid=0 auid=0 ses=23031 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=28053 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447123983.568:701207): pid=28053 uid=0 auid=0 ses=23031 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447123983.589:701208): pid=28050 uid=0 auid=0 ses=23031 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447123983.589:701209): pid=28050 uid=0 auid=0 ses=23031 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447123983.593:701210): pid=28050 uid=0 auid=0 ses=23031 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447123983.593:701211): pid=28050 uid=0 auid=0 ses=23031 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447123983.595:701212): pid=28050 uid=0 auid=0 ses=23031 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=28050 suid=0 rport=50775 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447123983.595:701213): pid=28050 uid=0 auid=0 ses=23031 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=28050 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447123983.595:701214): pid=28050 uid=0 auid=0 ses=23031 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=28050 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447123983.595:701215): pid=28050 uid=0 auid=0 ses=23031 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=28050 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447123983.614:701216): pid=28061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=28061 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447123983.615:701217): pid=28061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=28061 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447123983.615:701218): pid=28061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=28061 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447123983.660:701219): pid=28060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=28061 suid=74 rport=50776 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447123983.660:701220): pid=28060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=28061 suid=74 rport=50776 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447123983.788:701221): pid=28060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=50776 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447123983.788:701222): pid=28060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=50776 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447123983.798:701223): pid=28060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447123983.799:701224): pid=28060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=28061 suid=74 rport=50776 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447123983.802:701225): pid=28060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447123983.802:701226): pid=28060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447123983.802:701227): pid=28060 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23032 res=1
type=USER_ROLE_CHANGE msg=audit(1447123983.872:701228): pid=28060 uid=0 auid=0 ses=23032 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447123983.899:701229): pid=28060 uid=0 auid=0 ses=23032 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447123983.902:701230): pid=28060 uid=0 auid=0 ses=23032 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447123983.902:701231): pid=28060 uid=0 auid=0 ses=23032 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447123983.904:701232): pid=28075 uid=0 auid=0 ses=23032 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=28075 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447123983.904:701233): pid=28075 uid=0 auid=0 ses=23032 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=28075 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447123983.904:701234): pid=28075 uid=0 auid=0 ses=23032 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=28075 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447123983.905:701235): pid=28075 uid=0 auid=0 ses=23032 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447123985.178:701236): pid=28060 uid=0 auid=0 ses=23032 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447123985.178:701237): pid=28060 uid=0 auid=0 ses=23032 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447123985.182:701238): pid=28060 uid=0 auid=0 ses=23032 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447123985.182:701239): pid=28060 uid=0 auid=0 ses=23032 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447123985.182:701240): pid=28060 uid=0 auid=0 ses=23032 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=28060 suid=0 rport=50776 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447123985.183:701241): pid=28060 uid=0 auid=0 ses=23032 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=28060 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447123985.183:701242): pid=28060 uid=0 auid=0 ses=23032 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=28060 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447123985.183:701243): pid=28060 uid=0 auid=0 ses=23032 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=28060 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447123985.222:701244): pid=28135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=28135 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447123985.222:701245): pid=28135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=28135 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447123985.223:701246): pid=28135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=28135 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447123985.268:701247): pid=28134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=28135 suid=74 rport=50778 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447123985.268:701248): pid=28134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=28135 suid=74 rport=50778 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447123985.393:701249): pid=28134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=50778 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447123985.393:701250): pid=28134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=50778 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447123985.397:701251): pid=28134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447123985.397:701252): pid=28134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=28135 suid=74 rport=50778 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447123985.398:701253): pid=28134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447123985.398:701254): pid=28134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447123985.398:701255): pid=28134 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23033 res=1
type=USER_ROLE_CHANGE msg=audit(1447123985.467:701256): pid=28134 uid=0 auid=0 ses=23033 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447123985.488:701257): pid=28134 uid=0 auid=0 ses=23033 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447123985.491:701258): pid=28134 uid=0 auid=0 ses=23033 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447123985.491:701259): pid=28134 uid=0 auid=0 ses=23033 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447123985.493:701260): pid=28137 uid=0 auid=0 ses=23033 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=28137 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447123985.493:701261): pid=28137 uid=0 auid=0 ses=23033 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=28137 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447123985.493:701262): pid=28137 uid=0 auid=0 ses=23033 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=28137 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447123985.494:701263): pid=28137 uid=0 auid=0 ses=23033 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447123985.510:701264): pid=28134 uid=0 auid=0 ses=23033 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447123985.510:701265): pid=28134 uid=0 auid=0 ses=23033 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447123985.514:701266): pid=28134 uid=0 auid=0 ses=23033 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447123985.514:701267): pid=28134 uid=0 auid=0 ses=23033 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447123985.515:701268): pid=28134 uid=0 auid=0 ses=23033 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=28134 suid=0 rport=50778 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447123985.515:701269): pid=28134 uid=0 auid=0 ses=23033 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=28134 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447123985.515:701270): pid=28134 uid=0 auid=0 ses=23033 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=28134 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447123985.515:701271): pid=28134 uid=0 auid=0 ses=23033 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=28134 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447124401.373:701272): pid=29364 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447124401.373:701273): pid=29365 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447124401.373:701274): pid=29364 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447124401.373:701275): pid=29365 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447124401.374:701276): pid=29364 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23034 res=1
type=LOGIN msg=audit(1447124401.374:701277): pid=29365 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23035 res=1
type=USER_START msg=audit(1447124401.396:701278): pid=29365 uid=0 auid=0 ses=23035 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447124401.397:701279): pid=29365 uid=0 auid=0 ses=23035 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447124401.398:701280): pid=29364 uid=0 auid=0 ses=23034 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447124401.398:701281): pid=29364 uid=0 auid=0 ses=23034 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447124401.407:701282): pid=29365 uid=0 auid=0 ses=23035 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447124401.409:701283): pid=29365 uid=0 auid=0 ses=23035 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447124401.414:701284): pid=29364 uid=0 auid=0 ses=23034 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447124401.418:701285): pid=29364 uid=0 auid=0 ses=23034 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447124461.429:701286): pid=29635 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447124461.429:701287): pid=29635 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447124461.430:701288): pid=29635 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23036 res=1
type=USER_START msg=audit(1447124461.440:701289): pid=29635 uid=0 auid=0 ses=23036 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447124461.440:701290): pid=29635 uid=0 auid=0 ses=23036 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447124461.468:701291): pid=29635 uid=0 auid=0 ses=23036 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447124461.469:701292): pid=29635 uid=0 auid=0 ses=23036 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1447124992.727:701293): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447125001.481:701295): pid=31388 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447125001.481:701294): pid=31387 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447125001.481:701296): pid=31387 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447125001.481:701297): pid=31388 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447125001.482:701298): pid=31388 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23037 res=1
type=LOGIN msg=audit(1447125001.482:701299): pid=31387 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23038 res=1
type=USER_START msg=audit(1447125001.497:701300): pid=31387 uid=0 auid=0 ses=23038 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447125001.497:701301): pid=31388 uid=0 auid=0 ses=23037 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447125001.497:701302): pid=31387 uid=0 auid=0 ses=23038 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447125001.497:701303): pid=31388 uid=0 auid=0 ses=23037 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447125001.503:701304): pid=31388 uid=0 auid=0 ses=23037 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447125001.506:701305): pid=31388 uid=0 auid=0 ses=23037 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447125001.509:701306): pid=31387 uid=0 auid=0 ses=23038 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447125026.538:701307): pid=31387 uid=0 auid=0 ses=23038 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=CRYPTO_KEY_USER msg=audit(1447125183.308:701308): pid=31950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=31950 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447125183.309:701309): pid=31950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=31950 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447125183.309:701310): pid=31950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=31950 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447125183.352:701311): pid=31949 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=31950 suid=74 rport=52757 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447125183.353:701312): pid=31949 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=31950 suid=74 rport=52757 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447125183.478:701313): pid=31949 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52757 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447125183.478:701314): pid=31949 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=52757 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447125183.483:701315): pid=31949 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447125183.484:701316): pid=31949 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=31950 suid=74 rport=52757 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447125183.488:701317): pid=31949 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447125183.488:701318): pid=31949 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447125183.488:701319): pid=31949 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23039 res=1
type=USER_ROLE_CHANGE msg=audit(1447125183.556:701320): pid=31949 uid=0 auid=0 ses=23039 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447125183.578:701321): pid=31949 uid=0 auid=0 ses=23039 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447125183.581:701322): pid=31949 uid=0 auid=0 ses=23039 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447125183.581:701323): pid=31949 uid=0 auid=0 ses=23039 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447125183.582:701324): pid=31952 uid=0 auid=0 ses=23039 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=31952 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447125183.583:701325): pid=31952 uid=0 auid=0 ses=23039 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=31952 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447125183.583:701326): pid=31952 uid=0 auid=0 ses=23039 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=31952 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447125183.583:701327): pid=31952 uid=0 auid=0 ses=23039 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447125183.602:701328): pid=31949 uid=0 auid=0 ses=23039 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447125183.602:701329): pid=31949 uid=0 auid=0 ses=23039 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447125183.607:701330): pid=31949 uid=0 auid=0 ses=23039 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447125183.607:701331): pid=31949 uid=0 auid=0 ses=23039 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447125183.607:701332): pid=31949 uid=0 auid=0 ses=23039 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=31949 suid=0 rport=52757 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447125183.608:701333): pid=31949 uid=0 auid=0 ses=23039 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=31949 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447125183.608:701334): pid=31949 uid=0 auid=0 ses=23039 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=31949 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447125183.608:701335): pid=31949 uid=0 auid=0 ses=23039 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=31949 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447125183.632:701336): pid=31959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=31959 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447125183.632:701337): pid=31959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=31959 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447125183.632:701338): pid=31959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=31959 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447125183.677:701339): pid=31958 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=31959 suid=74 rport=52758 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447125183.677:701340): pid=31958 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=31959 suid=74 rport=52758 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447125183.805:701341): pid=31958 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52758 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447125183.805:701342): pid=31958 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=52758 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447125183.815:701343): pid=31958 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447125183.816:701344): pid=31958 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=31959 suid=74 rport=52758 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447125183.818:701345): pid=31958 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447125183.818:701346): pid=31958 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447125183.818:701347): pid=31958 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23040 res=1
type=USER_ROLE_CHANGE msg=audit(1447125183.884:701348): pid=31958 uid=0 auid=0 ses=23040 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447125183.910:701349): pid=31958 uid=0 auid=0 ses=23040 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447125183.913:701350): pid=31958 uid=0 auid=0 ses=23040 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447125183.914:701351): pid=31958 uid=0 auid=0 ses=23040 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447125183.916:701352): pid=31961 uid=0 auid=0 ses=23040 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=31961 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447125183.916:701353): pid=31961 uid=0 auid=0 ses=23040 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=31961 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447125183.916:701354): pid=31961 uid=0 auid=0 ses=23040 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=31961 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447125183.917:701355): pid=31961 uid=0 auid=0 ses=23040 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447125185.211:701356): pid=31958 uid=0 auid=0 ses=23040 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447125185.211:701357): pid=31958 uid=0 auid=0 ses=23040 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447125185.215:701358): pid=31958 uid=0 auid=0 ses=23040 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447125185.215:701359): pid=31958 uid=0 auid=0 ses=23040 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447125185.216:701360): pid=31958 uid=0 auid=0 ses=23040 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=31958 suid=0 rport=52758 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447125185.216:701361): pid=31958 uid=0 auid=0 ses=23040 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=31958 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447125185.216:701362): pid=31958 uid=0 auid=0 ses=23040 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=31958 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447125185.216:701363): pid=31958 uid=0 auid=0 ses=23040 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=31958 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447125185.250:701364): pid=32010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=32010 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447125185.250:701365): pid=32010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=32010 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447125185.250:701366): pid=32010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=32010 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447125185.295:701367): pid=32009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=32010 suid=74 rport=52760 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447125185.296:701368): pid=32009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=32010 suid=74 rport=52760 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447125185.419:701369): pid=32009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52760 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447125185.419:701370): pid=32009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=52760 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447125185.425:701371): pid=32009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447125185.425:701372): pid=32009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=32010 suid=74 rport=52760 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447125185.429:701373): pid=32009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447125185.429:701374): pid=32009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447125185.429:701375): pid=32009 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23041 res=1
type=USER_ROLE_CHANGE msg=audit(1447125185.492:701376): pid=32009 uid=0 auid=0 ses=23041 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447125185.514:701377): pid=32009 uid=0 auid=0 ses=23041 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447125185.516:701378): pid=32009 uid=0 auid=0 ses=23041 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447125185.516:701379): pid=32009 uid=0 auid=0 ses=23041 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447125185.518:701380): pid=32012 uid=0 auid=0 ses=23041 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=32012 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447125185.518:701381): pid=32012 uid=0 auid=0 ses=23041 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=32012 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447125185.518:701382): pid=32012 uid=0 auid=0 ses=23041 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=32012 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447125185.518:701383): pid=32012 uid=0 auid=0 ses=23041 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447125185.535:701384): pid=32009 uid=0 auid=0 ses=23041 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447125185.535:701385): pid=32009 uid=0 auid=0 ses=23041 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447125185.539:701386): pid=32009 uid=0 auid=0 ses=23041 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447125185.539:701387): pid=32009 uid=0 auid=0 ses=23041 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447125185.539:701388): pid=32009 uid=0 auid=0 ses=23041 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=32009 suid=0 rport=52760 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447125185.539:701389): pid=32009 uid=0 auid=0 ses=23041 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=32009 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447125185.539:701390): pid=32009 uid=0 auid=0 ses=23041 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=32009 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447125185.539:701391): pid=32009 uid=0 auid=0 ses=23041 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=32009 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447125601.563:701392): pid=951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447125601.563:701393): pid=950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447125601.563:701394): pid=950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447125601.563:701395): pid=951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447125601.564:701396): pid=951 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23042 res=1
type=LOGIN msg=audit(1447125601.564:701397): pid=950 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23043 res=1
type=USER_START msg=audit(1447125601.581:701398): pid=950 uid=0 auid=0 ses=23043 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447125601.581:701399): pid=950 uid=0 auid=0 ses=23043 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447125601.582:701400): pid=951 uid=0 auid=0 ses=23042 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447125601.582:701401): pid=951 uid=0 auid=0 ses=23042 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447125601.589:701402): pid=951 uid=0 auid=0 ses=23042 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447125601.590:701403): pid=951 uid=0 auid=0 ses=23042 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447125601.601:701404): pid=950 uid=0 auid=0 ses=23043 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447125601.603:701405): pid=950 uid=0 auid=0 ses=23043 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1447126075.758:701406): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447126201.618:701407): pid=2804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447126201.619:701408): pid=2804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447126201.619:701409): pid=2805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447126201.619:701410): pid=2805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447126201.620:701411): pid=2804 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23044 res=1
type=LOGIN msg=audit(1447126201.620:701412): pid=2805 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23045 res=1
type=USER_START msg=audit(1447126201.632:701413): pid=2805 uid=0 auid=0 ses=23045 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447126201.633:701414): pid=2805 uid=0 auid=0 ses=23045 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447126201.633:701415): pid=2804 uid=0 auid=0 ses=23044 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447126201.633:701416): pid=2804 uid=0 auid=0 ses=23044 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447126201.639:701417): pid=2805 uid=0 auid=0 ses=23045 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447126201.640:701418): pid=2805 uid=0 auid=0 ses=23045 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447126201.648:701419): pid=2804 uid=0 auid=0 ses=23044 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447126201.649:701420): pid=2804 uid=0 auid=0 ses=23044 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447126382.452:701421): pid=3365 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=3365 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447126382.453:701422): pid=3365 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=3365 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447126382.453:701423): pid=3365 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=3365 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447126382.496:701424): pid=3364 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=3365 suid=74 rport=54734 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447126382.496:701425): pid=3364 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=3365 suid=74 rport=54734 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447126382.624:701426): pid=3364 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=54734 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447126382.624:701427): pid=3364 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=54734 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447126382.632:701428): pid=3364 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447126382.634:701429): pid=3364 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3365 suid=74 rport=54734 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447126382.636:701430): pid=3364 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447126382.636:701431): pid=3364 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447126382.636:701432): pid=3364 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23046 res=1
type=USER_ROLE_CHANGE msg=audit(1447126382.708:701433): pid=3364 uid=0 auid=0 ses=23046 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447126382.725:701434): pid=3364 uid=0 auid=0 ses=23046 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447126382.730:701435): pid=3364 uid=0 auid=0 ses=23046 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447126382.730:701436): pid=3364 uid=0 auid=0 ses=23046 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447126382.732:701437): pid=3367 uid=0 auid=0 ses=23046 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=3367 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447126382.732:701438): pid=3367 uid=0 auid=0 ses=23046 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=3367 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447126382.732:701439): pid=3367 uid=0 auid=0 ses=23046 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=3367 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447126382.733:701440): pid=3367 uid=0 auid=0 ses=23046 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447126382.752:701441): pid=3364 uid=0 auid=0 ses=23046 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447126382.752:701442): pid=3364 uid=0 auid=0 ses=23046 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447126382.756:701443): pid=3364 uid=0 auid=0 ses=23046 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447126382.756:701444): pid=3364 uid=0 auid=0 ses=23046 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447126382.757:701445): pid=3364 uid=0 auid=0 ses=23046 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3364 suid=0 rport=54734 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447126382.757:701446): pid=3364 uid=0 auid=0 ses=23046 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=3364 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447126382.757:701447): pid=3364 uid=0 auid=0 ses=23046 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=3364 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447126382.757:701448): pid=3364 uid=0 auid=0 ses=23046 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=3364 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447126382.778:701449): pid=3376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=3376 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447126382.778:701450): pid=3376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=3376 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447126382.778:701451): pid=3376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=3376 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447126382.824:701452): pid=3373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=3376 suid=74 rport=54735 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447126382.824:701453): pid=3373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=3376 suid=74 rport=54735 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447126382.953:701454): pid=3373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=54735 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447126382.953:701455): pid=3373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=54735 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447126382.962:701456): pid=3373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447126382.963:701457): pid=3373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3376 suid=74 rport=54735 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447126382.968:701458): pid=3373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447126382.969:701459): pid=3373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447126382.969:701460): pid=3373 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23047 res=1
type=USER_ROLE_CHANGE msg=audit(1447126383.037:701461): pid=3373 uid=0 auid=0 ses=23047 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447126383.057:701462): pid=3373 uid=0 auid=0 ses=23047 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447126383.061:701463): pid=3373 uid=0 auid=0 ses=23047 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447126383.061:701464): pid=3373 uid=0 auid=0 ses=23047 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447126383.063:701465): pid=3379 uid=0 auid=0 ses=23047 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=3379 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447126383.063:701466): pid=3379 uid=0 auid=0 ses=23047 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=3379 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447126383.063:701467): pid=3379 uid=0 auid=0 ses=23047 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=3379 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447126383.064:701468): pid=3379 uid=0 auid=0 ses=23047 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447126384.347:701469): pid=3373 uid=0 auid=0 ses=23047 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447126384.347:701470): pid=3373 uid=0 auid=0 ses=23047 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447126384.351:701471): pid=3373 uid=0 auid=0 ses=23047 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447126384.351:701472): pid=3373 uid=0 auid=0 ses=23047 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447126384.352:701473): pid=3373 uid=0 auid=0 ses=23047 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3373 suid=0 rport=54735 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447126384.352:701474): pid=3373 uid=0 auid=0 ses=23047 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=3373 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447126384.352:701475): pid=3373 uid=0 auid=0 ses=23047 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=3373 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447126384.352:701476): pid=3373 uid=0 auid=0 ses=23047 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=3373 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447126384.385:701477): pid=3428 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=3428 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447126384.385:701478): pid=3428 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=3428 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447126384.385:701479): pid=3428 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=3428 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447126384.431:701480): pid=3427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=3428 suid=74 rport=54740 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447126384.432:701481): pid=3427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=3428 suid=74 rport=54740 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447126384.562:701482): pid=3427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=54740 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447126384.562:701483): pid=3427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=54740 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447126384.571:701484): pid=3427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447126384.571:701485): pid=3427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3428 suid=74 rport=54740 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447126384.573:701486): pid=3427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447126384.574:701487): pid=3427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447126384.574:701488): pid=3427 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23048 res=1
type=USER_ROLE_CHANGE msg=audit(1447126384.641:701489): pid=3427 uid=0 auid=0 ses=23048 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447126384.661:701490): pid=3427 uid=0 auid=0 ses=23048 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447126384.664:701491): pid=3427 uid=0 auid=0 ses=23048 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447126384.665:701492): pid=3427 uid=0 auid=0 ses=23048 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447126384.666:701493): pid=3430 uid=0 auid=0 ses=23048 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=3430 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447126384.666:701494): pid=3430 uid=0 auid=0 ses=23048 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=3430 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447126384.666:701495): pid=3430 uid=0 auid=0 ses=23048 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=3430 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447126384.668:701496): pid=3430 uid=0 auid=0 ses=23048 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447126384.688:701497): pid=3427 uid=0 auid=0 ses=23048 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447126384.688:701498): pid=3427 uid=0 auid=0 ses=23048 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447126384.694:701499): pid=3427 uid=0 auid=0 ses=23048 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447126384.694:701500): pid=3427 uid=0 auid=0 ses=23048 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447126384.694:701501): pid=3427 uid=0 auid=0 ses=23048 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3427 suid=0 rport=54740 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447126384.694:701502): pid=3427 uid=0 auid=0 ses=23048 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=3427 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447126384.695:701503): pid=3427 uid=0 auid=0 ses=23048 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=3427 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447126384.695:701504): pid=3427 uid=0 auid=0 ses=23048 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=3427 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447126801.671:701505): pid=4757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447126801.671:701506): pid=4757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447126801.671:701507): pid=4756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447126801.671:701508): pid=4756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447126801.672:701509): pid=4757 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23049 res=1
type=LOGIN msg=audit(1447126801.672:701510): pid=4756 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23050 res=1
type=USER_START msg=audit(1447126801.691:701511): pid=4756 uid=0 auid=0 ses=23050 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447126801.691:701512): pid=4757 uid=0 auid=0 ses=23049 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447126801.692:701513): pid=4757 uid=0 auid=0 ses=23049 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447126801.692:701514): pid=4756 uid=0 auid=0 ses=23050 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447126801.702:701515): pid=4757 uid=0 auid=0 ses=23049 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447126801.705:701516): pid=4756 uid=0 auid=0 ses=23050 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447126801.705:701517): pid=4757 uid=0 auid=0 ses=23049 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447126801.708:701518): pid=4756 uid=0 auid=0 ses=23050 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447127401.721:701519): pid=6601 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447127401.721:701520): pid=6602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447127401.721:701521): pid=6601 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447127401.721:701522): pid=6602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447127401.722:701523): pid=6602 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23051 res=1
type=LOGIN msg=audit(1447127401.722:701524): pid=6601 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23052 res=1
type=USER_START msg=audit(1447127401.741:701525): pid=6601 uid=0 auid=0 ses=23052 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447127401.741:701526): pid=6601 uid=0 auid=0 ses=23052 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447127401.741:701527): pid=6602 uid=0 auid=0 ses=23051 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447127401.741:701528): pid=6602 uid=0 auid=0 ses=23051 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447127401.749:701529): pid=6602 uid=0 auid=0 ses=23051 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447127401.750:701530): pid=6602 uid=0 auid=0 ses=23051 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447127401.755:701531): pid=6601 uid=0 auid=0 ses=23052 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447127401.757:701532): pid=6601 uid=0 auid=0 ses=23052 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447127582.543:701533): pid=7163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=7163 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447127582.543:701534): pid=7163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=7163 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447127582.543:701535): pid=7163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=7163 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447127582.588:701536): pid=7162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=7163 suid=74 rport=56715 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447127582.588:701537): pid=7162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=7163 suid=74 rport=56715 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447127582.712:701538): pid=7162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=56715 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447127582.712:701539): pid=7162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=56715 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447127582.718:701540): pid=7162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447127582.719:701541): pid=7162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7163 suid=74 rport=56715 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447127582.722:701542): pid=7162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447127582.722:701543): pid=7162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447127582.722:701544): pid=7162 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23053 res=1
type=USER_ROLE_CHANGE msg=audit(1447127582.791:701545): pid=7162 uid=0 auid=0 ses=23053 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447127582.811:701546): pid=7162 uid=0 auid=0 ses=23053 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447127582.814:701547): pid=7162 uid=0 auid=0 ses=23053 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447127582.814:701548): pid=7162 uid=0 auid=0 ses=23053 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447127582.815:701549): pid=7168 uid=0 auid=0 ses=23053 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=7168 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447127582.815:701550): pid=7168 uid=0 auid=0 ses=23053 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=7168 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447127582.815:701551): pid=7168 uid=0 auid=0 ses=23053 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=7168 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447127582.816:701552): pid=7168 uid=0 auid=0 ses=23053 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447127582.844:701553): pid=7162 uid=0 auid=0 ses=23053 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447127582.844:701554): pid=7162 uid=0 auid=0 ses=23053 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447127582.847:701555): pid=7162 uid=0 auid=0 ses=23053 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447127582.847:701556): pid=7162 uid=0 auid=0 ses=23053 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447127582.847:701557): pid=7162 uid=0 auid=0 ses=23053 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7162 suid=0 rport=56715 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447127582.847:701558): pid=7162 uid=0 auid=0 ses=23053 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=7162 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447127582.848:701559): pid=7162 uid=0 auid=0 ses=23053 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=7162 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447127582.848:701560): pid=7162 uid=0 auid=0 ses=23053 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=7162 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447127582.869:701561): pid=7176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=7176 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447127582.869:701562): pid=7176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=7176 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447127582.869:701563): pid=7176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=7176 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447127582.914:701564): pid=7175 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=7176 suid=74 rport=56716 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447127582.914:701565): pid=7175 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=7176 suid=74 rport=56716 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447127583.036:701566): pid=7175 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=56716 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447127583.036:701567): pid=7175 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=56716 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447127583.041:701568): pid=7175 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447127583.041:701569): pid=7175 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7176 suid=74 rport=56716 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447127583.043:701570): pid=7175 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447127583.044:701571): pid=7175 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447127583.044:701572): pid=7175 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23054 res=1
type=USER_ROLE_CHANGE msg=audit(1447127583.108:701573): pid=7175 uid=0 auid=0 ses=23054 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447127583.135:701574): pid=7175 uid=0 auid=0 ses=23054 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447127583.138:701575): pid=7175 uid=0 auid=0 ses=23054 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447127583.138:701576): pid=7175 uid=0 auid=0 ses=23054 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447127583.140:701577): pid=7178 uid=0 auid=0 ses=23054 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=7178 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447127583.140:701578): pid=7178 uid=0 auid=0 ses=23054 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=7178 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447127583.140:701579): pid=7178 uid=0 auid=0 ses=23054 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=7178 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447127583.141:701580): pid=7178 uid=0 auid=0 ses=23054 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447127584.418:701581): pid=7175 uid=0 auid=0 ses=23054 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447127584.419:701582): pid=7175 uid=0 auid=0 ses=23054 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447127584.424:701583): pid=7175 uid=0 auid=0 ses=23054 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447127584.425:701584): pid=7175 uid=0 auid=0 ses=23054 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447127584.425:701585): pid=7175 uid=0 auid=0 ses=23054 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7175 suid=0 rport=56716 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447127584.425:701586): pid=7175 uid=0 auid=0 ses=23054 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=7175 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447127584.426:701587): pid=7175 uid=0 auid=0 ses=23054 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=7175 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447127584.426:701588): pid=7175 uid=0 auid=0 ses=23054 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=7175 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447127584.461:701589): pid=7228 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=7228 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447127584.461:701590): pid=7228 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=7228 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447127584.461:701591): pid=7228 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=7228 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447127584.506:701592): pid=7227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=7228 suid=74 rport=56721 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447127584.506:701593): pid=7227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=7228 suid=74 rport=56721 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447127584.634:701594): pid=7227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=56721 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447127584.634:701595): pid=7227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=56721 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447127584.642:701596): pid=7227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447127584.643:701597): pid=7227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7228 suid=74 rport=56721 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447127584.645:701598): pid=7227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447127584.645:701599): pid=7227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447127584.645:701600): pid=7227 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23055 res=1
type=USER_ROLE_CHANGE msg=audit(1447127584.715:701601): pid=7227 uid=0 auid=0 ses=23055 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447127584.739:701602): pid=7227 uid=0 auid=0 ses=23055 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447127584.741:701603): pid=7227 uid=0 auid=0 ses=23055 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447127584.741:701604): pid=7227 uid=0 auid=0 ses=23055 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447127584.743:701605): pid=7230 uid=0 auid=0 ses=23055 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=7230 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447127584.743:701606): pid=7230 uid=0 auid=0 ses=23055 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=7230 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447127584.743:701607): pid=7230 uid=0 auid=0 ses=23055 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=7230 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447127584.744:701608): pid=7230 uid=0 auid=0 ses=23055 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447127584.761:701609): pid=7227 uid=0 auid=0 ses=23055 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447127584.761:701610): pid=7227 uid=0 auid=0 ses=23055 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447127584.765:701611): pid=7227 uid=0 auid=0 ses=23055 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447127584.766:701612): pid=7227 uid=0 auid=0 ses=23055 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447127584.766:701613): pid=7227 uid=0 auid=0 ses=23055 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7227 suid=0 rport=56721 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447127584.766:701614): pid=7227 uid=0 auid=0 ses=23055 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=7227 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447127584.766:701615): pid=7227 uid=0 auid=0 ses=23055 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=7227 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447127584.767:701616): pid=7227 uid=0 auid=0 ses=23055 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=7227 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447128001.778:701617): pid=8521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447128001.778:701618): pid=8522 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447128001.778:701619): pid=8521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447128001.778:701620): pid=8522 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447128001.779:701621): pid=8522 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23056 res=1
type=LOGIN msg=audit(1447128001.780:701622): pid=8521 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23057 res=1
type=USER_START msg=audit(1447128001.800:701623): pid=8521 uid=0 auid=0 ses=23057 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447128001.800:701624): pid=8521 uid=0 auid=0 ses=23057 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447128001.800:701625): pid=8522 uid=0 auid=0 ses=23056 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447128001.801:701626): pid=8522 uid=0 auid=0 ses=23056 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447128001.809:701627): pid=8522 uid=0 auid=0 ses=23056 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447128001.812:701628): pid=8522 uid=0 auid=0 ses=23056 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447128001.819:701629): pid=8521 uid=0 auid=0 ses=23057 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447128001.821:701630): pid=8521 uid=0 auid=0 ses=23057 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447128061.829:701631): pid=8757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447128061.830:701632): pid=8757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447128061.831:701633): pid=8757 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23058 res=1
type=USER_START msg=audit(1447128061.841:701634): pid=8757 uid=0 auid=0 ses=23058 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447128061.841:701635): pid=8757 uid=0 auid=0 ses=23058 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447128061.868:701636): pid=8757 uid=0 auid=0 ses=23058 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447128061.870:701637): pid=8757 uid=0 auid=0 ses=23058 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1447128191.758:701638): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447128601.882:701639): pid=10424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447128601.882:701640): pid=10424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447128601.883:701641): pid=10424 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23059 res=1
type=USER_ACCT msg=audit(1447128601.883:701642): pid=10423 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447128601.883:701643): pid=10423 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447128601.883:701644): pid=10423 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23060 res=1
type=USER_START msg=audit(1447128601.899:701645): pid=10424 uid=0 auid=0 ses=23059 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447128601.899:701646): pid=10424 uid=0 auid=0 ses=23059 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447128601.899:701647): pid=10423 uid=0 auid=0 ses=23060 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447128601.899:701648): pid=10423 uid=0 auid=0 ses=23060 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447128601.908:701649): pid=10424 uid=0 auid=0 ses=23059 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447128601.909:701650): pid=10424 uid=0 auid=0 ses=23059 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447128601.915:701651): pid=10423 uid=0 auid=0 ses=23060 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447128626.942:701652): pid=10423 uid=0 auid=0 ses=23060 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=CRYPTO_KEY_USER msg=audit(1447128782.526:701653): pid=10984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=10984 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447128782.526:701654): pid=10984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=10984 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447128782.526:701655): pid=10984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=10984 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447128782.570:701656): pid=10983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=10984 suid=74 rport=58696 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447128782.570:701657): pid=10983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=10984 suid=74 rport=58696 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447128782.701:701658): pid=10983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=58696 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447128782.701:701659): pid=10983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=58696 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447128782.709:701660): pid=10983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447128782.711:701661): pid=10983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10984 suid=74 rport=58696 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447128782.712:701662): pid=10983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447128782.712:701663): pid=10983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447128782.712:701664): pid=10983 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23061 res=1
type=USER_ROLE_CHANGE msg=audit(1447128782.780:701665): pid=10983 uid=0 auid=0 ses=23061 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447128782.798:701666): pid=10983 uid=0 auid=0 ses=23061 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447128782.800:701667): pid=10983 uid=0 auid=0 ses=23061 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447128782.800:701668): pid=10983 uid=0 auid=0 ses=23061 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447128782.802:701669): pid=10986 uid=0 auid=0 ses=23061 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=10986 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447128782.802:701670): pid=10986 uid=0 auid=0 ses=23061 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=10986 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447128782.802:701671): pid=10986 uid=0 auid=0 ses=23061 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=10986 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447128782.803:701672): pid=10986 uid=0 auid=0 ses=23061 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447128782.820:701673): pid=10983 uid=0 auid=0 ses=23061 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447128782.820:701674): pid=10983 uid=0 auid=0 ses=23061 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447128782.823:701675): pid=10983 uid=0 auid=0 ses=23061 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447128782.823:701676): pid=10983 uid=0 auid=0 ses=23061 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447128782.824:701677): pid=10983 uid=0 auid=0 ses=23061 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10983 suid=0 rport=58696 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447128782.824:701678): pid=10983 uid=0 auid=0 ses=23061 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=10983 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447128782.824:701679): pid=10983 uid=0 auid=0 ses=23061 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=10983 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447128782.824:701680): pid=10983 uid=0 auid=0 ses=23061 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=10983 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447128782.845:701681): pid=10997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=10997 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447128782.846:701682): pid=10997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=10997 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447128782.846:701683): pid=10997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=10997 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447128782.891:701684): pid=10994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=10997 suid=74 rport=58697 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447128782.891:701685): pid=10994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=10997 suid=74 rport=58697 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447128783.019:701686): pid=10994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=58697 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447128783.019:701687): pid=10994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=58697 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447128783.028:701688): pid=10994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447128783.029:701689): pid=10994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10997 suid=74 rport=58697 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447128783.031:701690): pid=10994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447128783.031:701691): pid=10994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447128783.031:701692): pid=10994 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23062 res=1
type=USER_ROLE_CHANGE msg=audit(1447128783.100:701693): pid=10994 uid=0 auid=0 ses=23062 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447128783.125:701694): pid=10994 uid=0 auid=0 ses=23062 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447128783.127:701695): pid=10994 uid=0 auid=0 ses=23062 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447128783.127:701696): pid=10994 uid=0 auid=0 ses=23062 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447128783.129:701697): pid=10999 uid=0 auid=0 ses=23062 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=10999 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447128783.129:701698): pid=10999 uid=0 auid=0 ses=23062 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=10999 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447128783.129:701699): pid=10999 uid=0 auid=0 ses=23062 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=10999 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447128783.130:701700): pid=10999 uid=0 auid=0 ses=23062 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447128784.416:701701): pid=10994 uid=0 auid=0 ses=23062 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447128784.416:701702): pid=10994 uid=0 auid=0 ses=23062 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447128784.423:701703): pid=10994 uid=0 auid=0 ses=23062 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447128784.423:701704): pid=10994 uid=0 auid=0 ses=23062 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447128784.424:701705): pid=10994 uid=0 auid=0 ses=23062 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10994 suid=0 rport=58697 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447128784.424:701706): pid=10994 uid=0 auid=0 ses=23062 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=10994 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447128784.424:701707): pid=10994 uid=0 auid=0 ses=23062 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=10994 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447128784.424:701708): pid=10994 uid=0 auid=0 ses=23062 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=10994 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447128784.458:701709): pid=11049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=11049 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447128784.458:701710): pid=11049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=11049 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447128784.458:701711): pid=11049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=11049 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447128784.503:701712): pid=11048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=11049 suid=74 rport=58702 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447128784.503:701713): pid=11048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=11049 suid=74 rport=58702 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447128784.633:701714): pid=11048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=58702 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447128784.633:701715): pid=11048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=58702 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447128784.642:701716): pid=11048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447128784.643:701717): pid=11048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11049 suid=74 rport=58702 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447128784.645:701718): pid=11048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447128784.645:701719): pid=11048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447128784.645:701720): pid=11048 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23063 res=1
type=USER_ROLE_CHANGE msg=audit(1447128784.714:701721): pid=11048 uid=0 auid=0 ses=23063 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447128784.738:701722): pid=11048 uid=0 auid=0 ses=23063 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447128784.741:701723): pid=11048 uid=0 auid=0 ses=23063 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447128784.741:701724): pid=11048 uid=0 auid=0 ses=23063 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447128784.742:701725): pid=11051 uid=0 auid=0 ses=23063 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=11051 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447128784.742:701726): pid=11051 uid=0 auid=0 ses=23063 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=11051 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447128784.742:701727): pid=11051 uid=0 auid=0 ses=23063 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=11051 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447128784.744:701728): pid=11051 uid=0 auid=0 ses=23063 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447128784.760:701729): pid=11048 uid=0 auid=0 ses=23063 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447128784.760:701730): pid=11048 uid=0 auid=0 ses=23063 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447128784.764:701731): pid=11048 uid=0 auid=0 ses=23063 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447128784.764:701732): pid=11048 uid=0 auid=0 ses=23063 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447128784.764:701733): pid=11048 uid=0 auid=0 ses=23063 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11048 suid=0 rport=58702 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447128784.764:701734): pid=11048 uid=0 auid=0 ses=23063 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=11048 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447128784.764:701735): pid=11048 uid=0 auid=0 ses=23063 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=11048 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447128784.765:701736): pid=11048 uid=0 auid=0 ses=23063 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=11048 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447129201.964:701737): pid=12347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447129201.964:701738): pid=12347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447129201.964:701739): pid=12348 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447129201.964:701740): pid=12348 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447129201.965:701741): pid=12347 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23064 res=1
type=LOGIN msg=audit(1447129201.965:701742): pid=12348 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23065 res=1
type=USER_START msg=audit(1447129201.986:701743): pid=12348 uid=0 auid=0 ses=23065 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447129201.986:701744): pid=12348 uid=0 auid=0 ses=23065 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447129201.988:701745): pid=12347 uid=0 auid=0 ses=23064 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447129201.988:701746): pid=12347 uid=0 auid=0 ses=23064 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447129202.001:701747): pid=12348 uid=0 auid=0 ses=23065 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447129202.004:701748): pid=12348 uid=0 auid=0 ses=23065 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447129202.006:701749): pid=12347 uid=0 auid=0 ses=23064 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447129202.010:701750): pid=12347 uid=0 auid=0 ses=23064 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1447129235.759:701751): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447129801.025:701752): pid=14192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447129801.025:701753): pid=14192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447129801.025:701754): pid=14192 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23066 res=1
type=USER_ACCT msg=audit(1447129801.027:701755): pid=14191 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447129801.027:701756): pid=14191 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447129801.027:701757): pid=14191 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23067 res=1
type=USER_START msg=audit(1447129801.047:701758): pid=14192 uid=0 auid=0 ses=23066 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447129801.047:701759): pid=14191 uid=0 auid=0 ses=23067 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447129801.048:701760): pid=14192 uid=0 auid=0 ses=23066 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447129801.048:701761): pid=14191 uid=0 auid=0 ses=23067 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447129801.055:701762): pid=14192 uid=0 auid=0 ses=23066 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447129801.058:701763): pid=14192 uid=0 auid=0 ses=23066 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447129801.061:701764): pid=14191 uid=0 auid=0 ses=23067 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447129826.088:701765): pid=14191 uid=0 auid=0 ses=23067 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=CRYPTO_KEY_USER msg=audit(1447129983.253:701766): pid=14757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=14757 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447129983.254:701767): pid=14757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=14757 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447129983.254:701768): pid=14757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=14757 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447129983.297:701769): pid=14756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=14757 suid=74 rport=60677 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447129983.297:701770): pid=14756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=14757 suid=74 rport=60677 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447129983.416:701771): pid=14756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60677 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447129983.416:701772): pid=14756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=60677 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447129983.425:701773): pid=14756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447129983.428:701774): pid=14756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14757 suid=74 rport=60677 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447129983.429:701775): pid=14756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447129983.429:701776): pid=14756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447129983.429:701777): pid=14756 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23068 res=1
type=USER_ROLE_CHANGE msg=audit(1447129983.500:701778): pid=14756 uid=0 auid=0 ses=23068 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447129983.520:701779): pid=14756 uid=0 auid=0 ses=23068 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447129983.522:701780): pid=14756 uid=0 auid=0 ses=23068 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447129983.522:701781): pid=14756 uid=0 auid=0 ses=23068 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447129983.524:701782): pid=14759 uid=0 auid=0 ses=23068 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=14759 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447129983.524:701783): pid=14759 uid=0 auid=0 ses=23068 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=14759 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447129983.524:701784): pid=14759 uid=0 auid=0 ses=23068 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=14759 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447129983.525:701785): pid=14759 uid=0 auid=0 ses=23068 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447129983.543:701786): pid=14756 uid=0 auid=0 ses=23068 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447129983.543:701787): pid=14756 uid=0 auid=0 ses=23068 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447129983.547:701788): pid=14756 uid=0 auid=0 ses=23068 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447129983.547:701789): pid=14756 uid=0 auid=0 ses=23068 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447129983.547:701790): pid=14756 uid=0 auid=0 ses=23068 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14756 suid=0 rport=60677 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447129983.547:701791): pid=14756 uid=0 auid=0 ses=23068 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=14756 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447129983.547:701792): pid=14756 uid=0 auid=0 ses=23068 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=14756 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447129983.547:701793): pid=14756 uid=0 auid=0 ses=23068 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=14756 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447129983.570:701794): pid=14767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=14767 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447129983.570:701795): pid=14767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=14767 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447129983.570:701796): pid=14767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=14767 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447129983.616:701797): pid=14766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=14767 suid=74 rport=60678 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447129983.616:701798): pid=14766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=14767 suid=74 rport=60678 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447129983.746:701799): pid=14766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60678 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447129983.746:701800): pid=14766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=60678 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447129983.755:701801): pid=14766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447129983.756:701802): pid=14766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14767 suid=74 rport=60678 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447129983.758:701803): pid=14766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447129983.758:701804): pid=14766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447129983.758:701805): pid=14766 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23069 res=1
type=USER_ROLE_CHANGE msg=audit(1447129983.822:701806): pid=14766 uid=0 auid=0 ses=23069 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447129983.847:701807): pid=14766 uid=0 auid=0 ses=23069 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447129983.850:701808): pid=14766 uid=0 auid=0 ses=23069 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447129983.850:701809): pid=14766 uid=0 auid=0 ses=23069 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447129983.851:701810): pid=14769 uid=0 auid=0 ses=23069 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=14769 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447129983.851:701811): pid=14769 uid=0 auid=0 ses=23069 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=14769 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447129983.851:701812): pid=14769 uid=0 auid=0 ses=23069 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=14769 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447129983.852:701813): pid=14769 uid=0 auid=0 ses=23069 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447129985.116:701814): pid=14766 uid=0 auid=0 ses=23069 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447129985.116:701815): pid=14766 uid=0 auid=0 ses=23069 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447129985.121:701816): pid=14766 uid=0 auid=0 ses=23069 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447129985.121:701817): pid=14766 uid=0 auid=0 ses=23069 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447129985.122:701818): pid=14766 uid=0 auid=0 ses=23069 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14766 suid=0 rport=60678 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447129985.122:701819): pid=14766 uid=0 auid=0 ses=23069 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=14766 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447129985.122:701820): pid=14766 uid=0 auid=0 ses=23069 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=14766 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447129985.122:701821): pid=14766 uid=0 auid=0 ses=23069 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=14766 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447129985.158:701822): pid=14819 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=14819 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447129985.159:701823): pid=14819 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=14819 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447129985.159:701824): pid=14819 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=14819 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447129985.203:701825): pid=14818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=14819 suid=74 rport=60683 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447129985.204:701826): pid=14818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=14819 suid=74 rport=60683 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447129985.334:701827): pid=14818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60683 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447129985.334:701828): pid=14818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=60683 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447129985.344:701829): pid=14818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447129985.345:701830): pid=14818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14819 suid=74 rport=60683 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447129985.346:701831): pid=14818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447129985.347:701832): pid=14818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447129985.347:701833): pid=14818 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23070 res=1
type=USER_ROLE_CHANGE msg=audit(1447129985.411:701834): pid=14818 uid=0 auid=0 ses=23070 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447129985.431:701835): pid=14818 uid=0 auid=0 ses=23070 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447129985.434:701836): pid=14818 uid=0 auid=0 ses=23070 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447129985.434:701837): pid=14818 uid=0 auid=0 ses=23070 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447129985.436:701838): pid=14821 uid=0 auid=0 ses=23070 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=14821 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447129985.436:701839): pid=14821 uid=0 auid=0 ses=23070 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=14821 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447129985.436:701840): pid=14821 uid=0 auid=0 ses=23070 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=14821 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447129985.437:701841): pid=14821 uid=0 auid=0 ses=23070 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447129985.454:701842): pid=14818 uid=0 auid=0 ses=23070 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447129985.454:701843): pid=14818 uid=0 auid=0 ses=23070 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447129985.458:701844): pid=14818 uid=0 auid=0 ses=23070 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447129985.458:701845): pid=14818 uid=0 auid=0 ses=23070 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447129985.459:701846): pid=14818 uid=0 auid=0 ses=23070 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14818 suid=0 rport=60683 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447129985.459:701847): pid=14818 uid=0 auid=0 ses=23070 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=14818 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447129985.459:701848): pid=14818 uid=0 auid=0 ses=23070 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=14818 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447129985.459:701849): pid=14818 uid=0 auid=0 ses=23070 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=14818 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=SYSCALL msg=audit(1447130269.759:701850): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447130401.110:701852): pid=16087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447130401.110:701851): pid=16086 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447130401.110:701853): pid=16086 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447130401.110:701854): pid=16087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447130401.111:701855): pid=16087 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23071 res=1
type=LOGIN msg=audit(1447130401.111:701856): pid=16086 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23072 res=1
type=USER_START msg=audit(1447130401.132:701857): pid=16087 uid=0 auid=0 ses=23071 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447130401.132:701858): pid=16086 uid=0 auid=0 ses=23072 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447130401.132:701859): pid=16086 uid=0 auid=0 ses=23072 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447130401.132:701860): pid=16087 uid=0 auid=0 ses=23071 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447130401.142:701861): pid=16087 uid=0 auid=0 ses=23071 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447130401.144:701862): pid=16087 uid=0 auid=0 ses=23071 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447130401.147:701863): pid=16086 uid=0 auid=0 ses=23072 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447130426.175:701864): pid=16086 uid=0 auid=0 ses=23072 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=USER_ACCT msg=audit(1447131001.188:701865): pid=17894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447131001.188:701866): pid=17895 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447131001.188:701867): pid=17895 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447131001.188:701868): pid=17894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447131001.188:701869): pid=17895 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23073 res=1
type=LOGIN msg=audit(1447131001.188:701870): pid=17894 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23074 res=1
type=USER_START msg=audit(1447131001.203:701871): pid=17895 uid=0 auid=0 ses=23073 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447131001.203:701872): pid=17894 uid=0 auid=0 ses=23074 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447131001.204:701873): pid=17895 uid=0 auid=0 ses=23073 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447131001.204:701874): pid=17894 uid=0 auid=0 ses=23074 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447131001.211:701875): pid=17895 uid=0 auid=0 ses=23073 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447131001.212:701876): pid=17895 uid=0 auid=0 ses=23073 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447131001.217:701877): pid=17894 uid=0 auid=0 ses=23074 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447131001.219:701878): pid=17894 uid=0 auid=0 ses=23074 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447131183.342:701879): pid=18470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=18470 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447131183.342:701880): pid=18470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=18470 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447131183.342:701881): pid=18470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=18470 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447131183.385:701882): pid=18467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=18470 suid=74 rport=62658 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447131183.389:701883): pid=18467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=18470 suid=74 rport=62658 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447131183.517:701884): pid=18467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=62658 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447131183.517:701885): pid=18467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=62658 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447131183.524:701886): pid=18467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447131183.527:701887): pid=18467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18470 suid=74 rport=62658 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447131183.528:701888): pid=18467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447131183.528:701889): pid=18467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447131183.529:701890): pid=18467 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23075 res=1
type=USER_ROLE_CHANGE msg=audit(1447131183.597:701891): pid=18467 uid=0 auid=0 ses=23075 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447131183.621:701892): pid=18467 uid=0 auid=0 ses=23075 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447131183.624:701893): pid=18467 uid=0 auid=0 ses=23075 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447131183.624:701894): pid=18467 uid=0 auid=0 ses=23075 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447131183.626:701895): pid=18500 uid=0 auid=0 ses=23075 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=18500 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447131183.626:701896): pid=18500 uid=0 auid=0 ses=23075 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=18500 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447131183.626:701897): pid=18500 uid=0 auid=0 ses=23075 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=18500 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447131183.627:701898): pid=18500 uid=0 auid=0 ses=23075 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447131183.655:701899): pid=18467 uid=0 auid=0 ses=23075 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447131183.655:701900): pid=18467 uid=0 auid=0 ses=23075 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447131183.659:701901): pid=18467 uid=0 auid=0 ses=23075 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447131183.660:701902): pid=18467 uid=0 auid=0 ses=23075 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447131183.660:701903): pid=18467 uid=0 auid=0 ses=23075 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18467 suid=0 rport=62658 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447131183.660:701904): pid=18467 uid=0 auid=0 ses=23075 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=18467 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447131183.660:701905): pid=18467 uid=0 auid=0 ses=23075 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=18467 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447131183.660:701906): pid=18467 uid=0 auid=0 ses=23075 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=18467 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447131183.682:701907): pid=18508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=18508 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447131183.682:701908): pid=18508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=18508 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447131183.682:701909): pid=18508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=18508 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447131183.725:701910): pid=18507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=18508 suid=74 rport=62659 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447131183.726:701911): pid=18507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=18508 suid=74 rport=62659 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447131183.855:701912): pid=18507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=62659 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447131183.855:701913): pid=18507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=62659 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447131183.865:701914): pid=18507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447131183.866:701915): pid=18507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18508 suid=74 rport=62659 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447131183.867:701916): pid=18507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447131183.868:701917): pid=18507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447131183.868:701918): pid=18507 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23076 res=1
type=USER_ROLE_CHANGE msg=audit(1447131183.930:701919): pid=18507 uid=0 auid=0 ses=23076 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447131183.948:701920): pid=18507 uid=0 auid=0 ses=23076 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447131183.951:701921): pid=18507 uid=0 auid=0 ses=23076 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447131183.952:701922): pid=18507 uid=0 auid=0 ses=23076 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447131183.953:701923): pid=18510 uid=0 auid=0 ses=23076 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=18510 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447131183.953:701924): pid=18510 uid=0 auid=0 ses=23076 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=18510 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447131183.953:701925): pid=18510 uid=0 auid=0 ses=23076 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=18510 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447131183.954:701926): pid=18510 uid=0 auid=0 ses=23076 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447131185.224:701927): pid=18507 uid=0 auid=0 ses=23076 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447131185.224:701928): pid=18507 uid=0 auid=0 ses=23076 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447131185.229:701929): pid=18507 uid=0 auid=0 ses=23076 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447131185.229:701930): pid=18507 uid=0 auid=0 ses=23076 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447131185.229:701931): pid=18507 uid=0 auid=0 ses=23076 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18507 suid=0 rport=62659 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447131185.230:701932): pid=18507 uid=0 auid=0 ses=23076 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=18507 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447131185.230:701933): pid=18507 uid=0 auid=0 ses=23076 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=18507 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447131185.230:701934): pid=18507 uid=0 auid=0 ses=23076 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=18507 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447131185.262:701935): pid=18572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=18572 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447131185.263:701936): pid=18572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=18572 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447131185.263:701937): pid=18572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=18572 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447131185.307:701938): pid=18571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=18572 suid=74 rport=62661 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447131185.307:701939): pid=18571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=18572 suid=74 rport=62661 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447131185.436:701940): pid=18571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=62661 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447131185.436:701941): pid=18571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=62661 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447131185.444:701942): pid=18571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447131185.446:701943): pid=18571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18572 suid=74 rport=62661 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447131185.448:701944): pid=18571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447131185.449:701945): pid=18571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447131185.449:701946): pid=18571 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23077 res=1
type=USER_ROLE_CHANGE msg=audit(1447131185.514:701947): pid=18571 uid=0 auid=0 ses=23077 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447131185.535:701948): pid=18571 uid=0 auid=0 ses=23077 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447131185.537:701949): pid=18571 uid=0 auid=0 ses=23077 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447131185.537:701950): pid=18571 uid=0 auid=0 ses=23077 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447131185.539:701951): pid=18584 uid=0 auid=0 ses=23077 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=18584 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447131185.539:701952): pid=18584 uid=0 auid=0 ses=23077 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=18584 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447131185.539:701953): pid=18584 uid=0 auid=0 ses=23077 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=18584 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447131185.539:701954): pid=18584 uid=0 auid=0 ses=23077 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447131185.557:701955): pid=18571 uid=0 auid=0 ses=23077 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447131185.557:701956): pid=18571 uid=0 auid=0 ses=23077 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447131185.564:701957): pid=18571 uid=0 auid=0 ses=23077 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447131185.564:701958): pid=18571 uid=0 auid=0 ses=23077 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447131185.564:701959): pid=18571 uid=0 auid=0 ses=23077 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18571 suid=0 rport=62661 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447131185.565:701960): pid=18571 uid=0 auid=0 ses=23077 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=18571 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447131185.565:701961): pid=18571 uid=0 auid=0 ses=23077 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=18571 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447131185.565:701962): pid=18571 uid=0 auid=0 ses=23077 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=18571 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=SYSCALL msg=audit(1447131330.759:701963): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447131601.239:701964): pid=19812 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447131601.239:701965): pid=19813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447131601.239:701966): pid=19813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447131601.239:701967): pid=19812 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447131601.240:701968): pid=19813 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23078 res=1
type=LOGIN msg=audit(1447131601.240:701969): pid=19812 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23079 res=1
type=USER_START msg=audit(1447131601.259:701970): pid=19812 uid=0 auid=0 ses=23079 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447131601.260:701971): pid=19812 uid=0 auid=0 ses=23079 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447131601.261:701972): pid=19813 uid=0 auid=0 ses=23078 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447131601.261:701973): pid=19813 uid=0 auid=0 ses=23078 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447131601.270:701974): pid=19813 uid=0 auid=0 ses=23078 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447131601.271:701975): pid=19813 uid=0 auid=0 ses=23078 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447131601.276:701976): pid=19812 uid=0 auid=0 ses=23079 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447131626.304:701977): pid=19812 uid=0 auid=0 ses=23079 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=USER_ACCT msg=audit(1447131661.322:701978): pid=20048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447131661.322:701979): pid=20048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447131661.322:701980): pid=20048 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23080 res=1
type=USER_START msg=audit(1447131661.333:701981): pid=20048 uid=0 auid=0 ses=23080 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447131661.333:701982): pid=20048 uid=0 auid=0 ses=23080 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447131661.358:701983): pid=20048 uid=0 auid=0 ses=23080 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447131661.360:701984): pid=20048 uid=0 auid=0 ses=23080 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447132201.377:701985): pid=21716 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447132201.377:701986): pid=21717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447132201.377:701987): pid=21717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447132201.377:701988): pid=21716 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447132201.377:701989): pid=21717 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23081 res=1
type=LOGIN msg=audit(1447132201.377:701990): pid=21716 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23082 res=1
type=USER_START msg=audit(1447132201.390:701991): pid=21717 uid=0 auid=0 ses=23081 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447132201.390:701992): pid=21717 uid=0 auid=0 ses=23081 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447132201.391:701993): pid=21716 uid=0 auid=0 ses=23082 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447132201.391:701994): pid=21716 uid=0 auid=0 ses=23082 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447132201.399:701995): pid=21717 uid=0 auid=0 ses=23081 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447132201.402:701996): pid=21717 uid=0 auid=0 ses=23081 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447132201.405:701997): pid=21716 uid=0 auid=0 ses=23082 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447132226.431:701998): pid=21716 uid=0 auid=0 ses=23082 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=CRYPTO_KEY_USER msg=audit(1447132382.888:701999): pid=22277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=22277 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447132382.888:702000): pid=22277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=22277 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447132382.888:702001): pid=22277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=22277 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447132382.932:702002): pid=22276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=22277 suid=74 rport=64638 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447132382.933:702003): pid=22276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=22277 suid=74 rport=64638 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447132383.057:702004): pid=22276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=64638 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447132383.057:702005): pid=22276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=64638 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447132383.061:702006): pid=22276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447132383.062:702007): pid=22276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22277 suid=74 rport=64638 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447132383.063:702008): pid=22276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447132383.063:702009): pid=22276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447132383.063:702010): pid=22276 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23083 res=1
type=USER_ROLE_CHANGE msg=audit(1447132383.134:702011): pid=22276 uid=0 auid=0 ses=23083 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447132383.156:702012): pid=22276 uid=0 auid=0 ses=23083 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447132383.158:702013): pid=22276 uid=0 auid=0 ses=23083 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447132383.159:702014): pid=22276 uid=0 auid=0 ses=23083 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447132383.160:702015): pid=22282 uid=0 auid=0 ses=23083 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=22282 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447132383.160:702016): pid=22282 uid=0 auid=0 ses=23083 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=22282 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447132383.160:702017): pid=22282 uid=0 auid=0 ses=23083 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=22282 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447132383.161:702018): pid=22282 uid=0 auid=0 ses=23083 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447132383.179:702019): pid=22276 uid=0 auid=0 ses=23083 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447132383.179:702020): pid=22276 uid=0 auid=0 ses=23083 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447132383.182:702021): pid=22276 uid=0 auid=0 ses=23083 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447132383.183:702022): pid=22276 uid=0 auid=0 ses=23083 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447132383.183:702023): pid=22276 uid=0 auid=0 ses=23083 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22276 suid=0 rport=64638 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447132383.183:702024): pid=22276 uid=0 auid=0 ses=23083 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=22276 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447132383.183:702025): pid=22276 uid=0 auid=0 ses=23083 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=22276 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447132383.183:702026): pid=22276 uid=0 auid=0 ses=23083 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=22276 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447132383.206:702027): pid=22290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=22290 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447132383.206:702028): pid=22290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=22290 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447132383.206:702029): pid=22290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=22290 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447132383.250:702030): pid=22289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=22290 suid=74 rport=64640 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447132383.251:702031): pid=22289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=22290 suid=74 rport=64640 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447132383.380:702032): pid=22289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=64640 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447132383.380:702033): pid=22289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=64640 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447132383.389:702034): pid=22289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447132383.390:702035): pid=22289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22290 suid=74 rport=64640 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447132383.393:702036): pid=22289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447132383.393:702037): pid=22289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447132383.394:702038): pid=22289 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23084 res=1
type=USER_ROLE_CHANGE msg=audit(1447132383.463:702039): pid=22289 uid=0 auid=0 ses=23084 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447132383.482:702040): pid=22289 uid=0 auid=0 ses=23084 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447132383.485:702041): pid=22289 uid=0 auid=0 ses=23084 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447132383.485:702042): pid=22289 uid=0 auid=0 ses=23084 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447132383.486:702043): pid=22292 uid=0 auid=0 ses=23084 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=22292 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447132383.486:702044): pid=22292 uid=0 auid=0 ses=23084 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=22292 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447132383.486:702045): pid=22292 uid=0 auid=0 ses=23084 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=22292 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447132383.487:702046): pid=22292 uid=0 auid=0 ses=23084 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447132384.783:702047): pid=22289 uid=0 auid=0 ses=23084 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447132384.783:702048): pid=22289 uid=0 auid=0 ses=23084 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447132384.787:702049): pid=22289 uid=0 auid=0 ses=23084 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447132384.787:702050): pid=22289 uid=0 auid=0 ses=23084 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447132384.788:702051): pid=22289 uid=0 auid=0 ses=23084 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22289 suid=0 rport=64640 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447132384.788:702052): pid=22289 uid=0 auid=0 ses=23084 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=22289 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447132384.788:702053): pid=22289 uid=0 auid=0 ses=23084 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=22289 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447132384.788:702054): pid=22289 uid=0 auid=0 ses=23084 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=22289 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447132384.819:702055): pid=22342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=22342 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447132384.820:702056): pid=22342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=22342 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447132384.820:702057): pid=22342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=22342 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447132384.864:702058): pid=22341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=22342 suid=74 rport=64641 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447132384.864:702059): pid=22341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=22342 suid=74 rport=64641 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447132384.994:702060): pid=22341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=64641 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447132384.994:702061): pid=22341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=64641 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447132385.004:702062): pid=22341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447132385.006:702063): pid=22341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22342 suid=74 rport=64641 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447132385.008:702064): pid=22341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447132385.008:702065): pid=22341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447132385.008:702066): pid=22341 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23085 res=1
type=USER_ROLE_CHANGE msg=audit(1447132385.072:702067): pid=22341 uid=0 auid=0 ses=23085 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447132385.097:702068): pid=22341 uid=0 auid=0 ses=23085 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447132385.099:702069): pid=22341 uid=0 auid=0 ses=23085 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447132385.100:702070): pid=22341 uid=0 auid=0 ses=23085 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447132385.101:702071): pid=22344 uid=0 auid=0 ses=23085 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=22344 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447132385.101:702072): pid=22344 uid=0 auid=0 ses=23085 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=22344 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447132385.101:702073): pid=22344 uid=0 auid=0 ses=23085 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=22344 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447132385.102:702074): pid=22344 uid=0 auid=0 ses=23085 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447132385.117:702075): pid=22341 uid=0 auid=0 ses=23085 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447132385.117:702076): pid=22341 uid=0 auid=0 ses=23085 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447132385.120:702077): pid=22341 uid=0 auid=0 ses=23085 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447132385.120:702078): pid=22341 uid=0 auid=0 ses=23085 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447132385.121:702079): pid=22341 uid=0 auid=0 ses=23085 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22341 suid=0 rport=64641 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447132385.121:702080): pid=22341 uid=0 auid=0 ses=23085 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=22341 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447132385.121:702081): pid=22341 uid=0 auid=0 ses=23085 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=22341 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447132385.121:702082): pid=22341 uid=0 auid=0 ses=23085 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=22341 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447132801.454:702083): pid=23639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447132801.454:702084): pid=23639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447132801.455:702085): pid=23638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447132801.455:702086): pid=23638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447132801.456:702087): pid=23639 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23086 res=1
type=LOGIN msg=audit(1447132801.456:702088): pid=23638 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23087 res=1
type=USER_START msg=audit(1447132801.474:702089): pid=23639 uid=0 auid=0 ses=23086 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447132801.474:702090): pid=23638 uid=0 auid=0 ses=23087 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447132801.475:702091): pid=23638 uid=0 auid=0 ses=23087 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447132801.475:702092): pid=23639 uid=0 auid=0 ses=23086 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447132801.483:702093): pid=23639 uid=0 auid=0 ses=23086 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447132801.486:702094): pid=23639 uid=0 auid=0 ses=23086 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447132801.494:702095): pid=23638 uid=0 auid=0 ses=23087 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447132801.495:702096): pid=23638 uid=0 auid=0 ses=23087 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447133401.511:702097): pid=25485 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447133401.511:702098): pid=25485 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447133401.512:702099): pid=25484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447133401.512:702100): pid=25484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447133401.512:702101): pid=25485 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23088 res=1
type=LOGIN msg=audit(1447133401.512:702102): pid=25484 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23089 res=1
type=USER_START msg=audit(1447133401.529:702103): pid=25485 uid=0 auid=0 ses=23088 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447133401.529:702104): pid=25484 uid=0 auid=0 ses=23089 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447133401.529:702105): pid=25485 uid=0 auid=0 ses=23088 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447133401.529:702106): pid=25484 uid=0 auid=0 ses=23089 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447133401.535:702107): pid=25485 uid=0 auid=0 ses=23088 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447133401.540:702108): pid=25484 uid=0 auid=0 ses=23089 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447133401.540:702109): pid=25485 uid=0 auid=0 ses=23088 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447133401.545:702110): pid=25484 uid=0 auid=0 ses=23089 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1447133484.759:702111): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=CRYPTO_KEY_USER msg=audit(1447133582.562:702112): pid=26045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=26045 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447133582.563:702113): pid=26045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=26045 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447133582.563:702114): pid=26045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=26045 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447133582.607:702115): pid=26044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=26045 suid=74 rport=33853 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447133582.607:702116): pid=26044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=26045 suid=74 rport=33853 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447133582.738:702117): pid=26044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33853 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447133582.738:702118): pid=26044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=33853 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447133582.743:702119): pid=26044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447133582.745:702120): pid=26044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26045 suid=74 rport=33853 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447133582.747:702121): pid=26044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447133582.747:702122): pid=26044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447133582.747:702123): pid=26044 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23090 res=1
type=USER_ROLE_CHANGE msg=audit(1447133582.817:702124): pid=26044 uid=0 auid=0 ses=23090 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447133582.837:702125): pid=26044 uid=0 auid=0 ses=23090 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447133582.839:702126): pid=26044 uid=0 auid=0 ses=23090 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447133582.839:702127): pid=26044 uid=0 auid=0 ses=23090 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447133582.841:702128): pid=26047 uid=0 auid=0 ses=23090 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=26047 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447133582.841:702129): pid=26047 uid=0 auid=0 ses=23090 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=26047 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447133582.841:702130): pid=26047 uid=0 auid=0 ses=23090 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=26047 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447133582.842:702131): pid=26047 uid=0 auid=0 ses=23090 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447133582.862:702132): pid=26044 uid=0 auid=0 ses=23090 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447133582.862:702133): pid=26044 uid=0 auid=0 ses=23090 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447133582.868:702134): pid=26044 uid=0 auid=0 ses=23090 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447133582.868:702135): pid=26044 uid=0 auid=0 ses=23090 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447133582.869:702136): pid=26044 uid=0 auid=0 ses=23090 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26044 suid=0 rport=33853 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447133582.869:702137): pid=26044 uid=0 auid=0 ses=23090 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=26044 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447133582.869:702138): pid=26044 uid=0 auid=0 ses=23090 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=26044 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447133582.869:702139): pid=26044 uid=0 auid=0 ses=23090 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=26044 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447133582.888:702140): pid=26055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=26055 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447133582.888:702141): pid=26055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=26055 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447133582.888:702142): pid=26055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=26055 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447133582.932:702143): pid=26054 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=26055 suid=74 rport=33854 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447133582.932:702144): pid=26054 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=26055 suid=74 rport=33854 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447133583.057:702145): pid=26054 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33854 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447133583.057:702146): pid=26054 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=33854 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447133583.061:702147): pid=26054 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447133583.063:702148): pid=26054 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26055 suid=74 rport=33854 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447133583.064:702149): pid=26054 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447133583.064:702150): pid=26054 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447133583.064:702151): pid=26054 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23091 res=1
type=USER_ROLE_CHANGE msg=audit(1447133583.130:702152): pid=26054 uid=0 auid=0 ses=23091 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447133583.148:702153): pid=26054 uid=0 auid=0 ses=23091 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447133583.151:702154): pid=26054 uid=0 auid=0 ses=23091 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447133583.151:702155): pid=26054 uid=0 auid=0 ses=23091 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447133583.153:702156): pid=26060 uid=0 auid=0 ses=23091 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=26060 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447133583.153:702157): pid=26060 uid=0 auid=0 ses=23091 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=26060 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447133583.153:702158): pid=26060 uid=0 auid=0 ses=23091 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=26060 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447133583.154:702159): pid=26060 uid=0 auid=0 ses=23091 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447133584.429:702160): pid=26054 uid=0 auid=0 ses=23091 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447133584.429:702161): pid=26054 uid=0 auid=0 ses=23091 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447133584.434:702162): pid=26054 uid=0 auid=0 ses=23091 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447133584.434:702163): pid=26054 uid=0 auid=0 ses=23091 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447133584.435:702164): pid=26054 uid=0 auid=0 ses=23091 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26054 suid=0 rport=33854 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447133584.435:702165): pid=26054 uid=0 auid=0 ses=23091 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=26054 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447133584.435:702166): pid=26054 uid=0 auid=0 ses=23091 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=26054 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447133584.435:702167): pid=26054 uid=0 auid=0 ses=23091 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=26054 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447133584.468:702168): pid=26110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=26110 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447133584.469:702169): pid=26110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=26110 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447133584.469:702170): pid=26110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=26110 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447133584.513:702171): pid=26109 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=26110 suid=74 rport=33856 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447133584.513:702172): pid=26109 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=26110 suid=74 rport=33856 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447133584.644:702173): pid=26109 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33856 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447133584.644:702174): pid=26109 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=33856 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447133584.653:702175): pid=26109 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447133584.654:702176): pid=26109 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26110 suid=74 rport=33856 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447133584.655:702177): pid=26109 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447133584.655:702178): pid=26109 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447133584.656:702179): pid=26109 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23092 res=1
type=USER_ROLE_CHANGE msg=audit(1447133584.721:702180): pid=26109 uid=0 auid=0 ses=23092 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447133584.740:702181): pid=26109 uid=0 auid=0 ses=23092 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447133584.742:702182): pid=26109 uid=0 auid=0 ses=23092 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447133584.742:702183): pid=26109 uid=0 auid=0 ses=23092 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447133584.744:702184): pid=26112 uid=0 auid=0 ses=23092 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=26112 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447133584.744:702185): pid=26112 uid=0 auid=0 ses=23092 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=26112 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447133584.744:702186): pid=26112 uid=0 auid=0 ses=23092 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=26112 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447133584.745:702187): pid=26112 uid=0 auid=0 ses=23092 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447133584.762:702188): pid=26109 uid=0 auid=0 ses=23092 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447133584.762:702189): pid=26109 uid=0 auid=0 ses=23092 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447133584.766:702190): pid=26109 uid=0 auid=0 ses=23092 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447133584.766:702191): pid=26109 uid=0 auid=0 ses=23092 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447133584.767:702192): pid=26109 uid=0 auid=0 ses=23092 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26109 suid=0 rport=33856 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447133584.767:702193): pid=26109 uid=0 auid=0 ses=23092 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=26109 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447133584.767:702194): pid=26109 uid=0 auid=0 ses=23092 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=26109 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447133584.767:702195): pid=26109 uid=0 auid=0 ses=23092 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=26109 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447134001.568:702196): pid=27400 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447134001.568:702197): pid=27401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447134001.568:702198): pid=27400 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447134001.568:702199): pid=27401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447134001.569:702200): pid=27401 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23093 res=1
type=LOGIN msg=audit(1447134001.569:702201): pid=27400 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23094 res=1
type=USER_START msg=audit(1447134001.587:702202): pid=27401 uid=0 auid=0 ses=23093 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447134001.587:702203): pid=27400 uid=0 auid=0 ses=23094 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447134001.587:702204): pid=27401 uid=0 auid=0 ses=23093 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447134001.587:702205): pid=27400 uid=0 auid=0 ses=23094 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447134001.597:702206): pid=27401 uid=0 auid=0 ses=23093 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447134001.600:702207): pid=27401 uid=0 auid=0 ses=23093 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447134001.604:702208): pid=27400 uid=0 auid=0 ses=23094 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447134001.607:702209): pid=27400 uid=0 auid=0 ses=23094 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447134601.625:702210): pid=29247 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447134601.626:702211): pid=29247 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447134601.626:702212): pid=29247 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23095 res=1
type=USER_ACCT msg=audit(1447134601.628:702213): pid=29246 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447134601.628:702214): pid=29246 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447134601.628:702215): pid=29246 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23096 res=1
type=USER_START msg=audit(1447134601.647:702216): pid=29246 uid=0 auid=0 ses=23096 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447134601.647:702217): pid=29247 uid=0 auid=0 ses=23095 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447134601.647:702218): pid=29246 uid=0 auid=0 ses=23096 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447134601.647:702219): pid=29247 uid=0 auid=0 ses=23095 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447134601.653:702220): pid=29247 uid=0 auid=0 ses=23095 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447134601.654:702221): pid=29247 uid=0 auid=0 ses=23095 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447134601.665:702222): pid=29246 uid=0 auid=0 ses=23096 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447134601.666:702223): pid=29246 uid=0 auid=0 ses=23096 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447134783.360:702224): pid=29861 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=29861 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447134783.360:702225): pid=29861 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=29861 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447134783.360:702226): pid=29861 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=29861 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447134783.404:702227): pid=29860 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=29861 suid=74 rport=35834 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447134783.404:702228): pid=29860 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=29861 suid=74 rport=35834 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447134783.533:702229): pid=29860 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=35834 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447134783.533:702230): pid=29860 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=35834 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447134783.542:702231): pid=29860 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447134783.543:702232): pid=29860 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29861 suid=74 rport=35834 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447134783.546:702233): pid=29860 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447134783.546:702234): pid=29860 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447134783.547:702235): pid=29860 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23097 res=1
type=USER_ROLE_CHANGE msg=audit(1447134783.618:702236): pid=29860 uid=0 auid=0 ses=23097 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447134783.646:702237): pid=29860 uid=0 auid=0 ses=23097 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447134783.648:702238): pid=29860 uid=0 auid=0 ses=23097 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447134783.648:702239): pid=29860 uid=0 auid=0 ses=23097 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447134783.650:702240): pid=29863 uid=0 auid=0 ses=23097 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=29863 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447134783.650:702241): pid=29863 uid=0 auid=0 ses=23097 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=29863 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447134783.650:702242): pid=29863 uid=0 auid=0 ses=23097 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=29863 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447134783.650:702243): pid=29863 uid=0 auid=0 ses=23097 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447134783.673:702244): pid=29860 uid=0 auid=0 ses=23097 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447134783.673:702245): pid=29860 uid=0 auid=0 ses=23097 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447134783.677:702246): pid=29860 uid=0 auid=0 ses=23097 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447134783.677:702247): pid=29860 uid=0 auid=0 ses=23097 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447134783.677:702248): pid=29860 uid=0 auid=0 ses=23097 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29860 suid=0 rport=35834 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447134783.677:702249): pid=29860 uid=0 auid=0 ses=23097 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=29860 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447134783.677:702250): pid=29860 uid=0 auid=0 ses=23097 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=29860 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447134783.677:702251): pid=29860 uid=0 auid=0 ses=23097 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=29860 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447134783.698:702252): pid=29871 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=29871 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447134783.698:702253): pid=29871 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=29871 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447134783.698:702254): pid=29871 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=29871 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447134783.742:702255): pid=29870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=29871 suid=74 rport=35835 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447134783.743:702256): pid=29870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=29871 suid=74 rport=35835 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447134783.872:702257): pid=29870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=35835 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447134783.872:702258): pid=29870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=35835 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447134783.880:702259): pid=29870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447134783.882:702260): pid=29870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29871 suid=74 rport=35835 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447134783.885:702261): pid=29870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447134783.886:702262): pid=29870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447134783.886:702263): pid=29870 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23098 res=1
type=USER_ROLE_CHANGE msg=audit(1447134783.954:702264): pid=29870 uid=0 auid=0 ses=23098 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447134783.978:702265): pid=29870 uid=0 auid=0 ses=23098 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447134783.981:702266): pid=29870 uid=0 auid=0 ses=23098 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447134783.981:702267): pid=29870 uid=0 auid=0 ses=23098 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447134783.983:702268): pid=29873 uid=0 auid=0 ses=23098 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=29873 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447134783.983:702269): pid=29873 uid=0 auid=0 ses=23098 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=29873 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447134783.983:702270): pid=29873 uid=0 auid=0 ses=23098 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=29873 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447134783.985:702271): pid=29873 uid=0 auid=0 ses=23098 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447134785.249:702272): pid=29870 uid=0 auid=0 ses=23098 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447134785.249:702273): pid=29870 uid=0 auid=0 ses=23098 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447134785.256:702274): pid=29870 uid=0 auid=0 ses=23098 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447134785.256:702275): pid=29870 uid=0 auid=0 ses=23098 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447134785.256:702276): pid=29870 uid=0 auid=0 ses=23098 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29870 suid=0 rport=35835 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447134785.256:702277): pid=29870 uid=0 auid=0 ses=23098 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=29870 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447134785.257:702278): pid=29870 uid=0 auid=0 ses=23098 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=29870 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447134785.257:702279): pid=29870 uid=0 auid=0 ses=23098 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=29870 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447134785.293:702280): pid=29924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=29924 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447134785.294:702281): pid=29924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=29924 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447134785.294:702282): pid=29924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=29924 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447134785.338:702283): pid=29923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=29924 suid=74 rport=35837 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447134785.339:702284): pid=29923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=29924 suid=74 rport=35837 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447134785.468:702285): pid=29923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=35837 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447134785.468:702286): pid=29923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=35837 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447134785.477:702287): pid=29923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447134785.478:702288): pid=29923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29924 suid=74 rport=35837 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447134785.479:702289): pid=29923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447134785.479:702290): pid=29923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447134785.479:702291): pid=29923 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23099 res=1
type=USER_ROLE_CHANGE msg=audit(1447134785.547:702292): pid=29923 uid=0 auid=0 ses=23099 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447134785.573:702293): pid=29923 uid=0 auid=0 ses=23099 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447134785.575:702294): pid=29923 uid=0 auid=0 ses=23099 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447134785.575:702295): pid=29923 uid=0 auid=0 ses=23099 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447134785.577:702296): pid=29927 uid=0 auid=0 ses=23099 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=29927 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447134785.577:702297): pid=29927 uid=0 auid=0 ses=23099 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=29927 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447134785.577:702298): pid=29927 uid=0 auid=0 ses=23099 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=29927 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447134785.578:702299): pid=29927 uid=0 auid=0 ses=23099 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447134785.599:702300): pid=29923 uid=0 auid=0 ses=23099 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447134785.599:702301): pid=29923 uid=0 auid=0 ses=23099 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447134785.603:702302): pid=29923 uid=0 auid=0 ses=23099 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447134785.603:702303): pid=29923 uid=0 auid=0 ses=23099 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447134785.603:702304): pid=29923 uid=0 auid=0 ses=23099 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29923 suid=0 rport=35837 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447134785.604:702305): pid=29923 uid=0 auid=0 ses=23099 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=29923 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447134785.604:702306): pid=29923 uid=0 auid=0 ses=23099 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=29923 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447134785.604:702307): pid=29923 uid=0 auid=0 ses=23099 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=29923 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447135201.686:702309): pid=31280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447135201.686:702308): pid=31281 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447135201.686:702310): pid=31280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447135201.686:702311): pid=31281 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447135201.687:702312): pid=31281 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23100 res=1
type=LOGIN msg=audit(1447135201.687:702313): pid=31280 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23101 res=1
type=USER_START msg=audit(1447135201.706:702314): pid=31280 uid=0 auid=0 ses=23101 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447135201.706:702315): pid=31281 uid=0 auid=0 ses=23100 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447135201.706:702316): pid=31280 uid=0 auid=0 ses=23101 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447135201.706:702317): pid=31281 uid=0 auid=0 ses=23100 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447135201.715:702318): pid=31281 uid=0 auid=0 ses=23100 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447135201.716:702319): pid=31281 uid=0 auid=0 ses=23100 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447135201.729:702320): pid=31280 uid=0 auid=0 ses=23101 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447135201.730:702321): pid=31280 uid=0 auid=0 ses=23101 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447135261.746:702322): pid=31517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447135261.746:702323): pid=31517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447135261.747:702324): pid=31517 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23102 res=1
type=USER_START msg=audit(1447135261.757:702325): pid=31517 uid=0 auid=0 ses=23102 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447135261.757:702326): pid=31517 uid=0 auid=0 ses=23102 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447135261.783:702327): pid=31517 uid=0 auid=0 ses=23102 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447135261.785:702328): pid=31517 uid=0 auid=0 ses=23102 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1447135613.759:702329): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447135801.799:702330): pid=831 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447135801.799:702331): pid=831 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447135801.800:702332): pid=831 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23103 res=1
type=USER_ACCT msg=audit(1447135801.800:702333): pid=830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447135801.800:702334): pid=830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447135801.800:702335): pid=830 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23104 res=1
type=USER_START msg=audit(1447135801.814:702336): pid=830 uid=0 auid=0 ses=23104 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447135801.814:702337): pid=831 uid=0 auid=0 ses=23103 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447135801.814:702338): pid=830 uid=0 auid=0 ses=23104 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447135801.814:702339): pid=831 uid=0 auid=0 ses=23103 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447135801.820:702340): pid=831 uid=0 auid=0 ses=23103 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447135801.821:702341): pid=831 uid=0 auid=0 ses=23103 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447135801.827:702342): pid=830 uid=0 auid=0 ses=23104 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447135801.828:702343): pid=830 uid=0 auid=0 ses=23104 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447135983.263:702344): pid=1402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=1402 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447135983.263:702345): pid=1402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=1402 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447135983.263:702346): pid=1402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=1402 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447135983.308:702347): pid=1401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=1402 suid=74 rport=37812 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447135983.308:702348): pid=1401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=1402 suid=74 rport=37812 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447135983.438:702349): pid=1401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=37812 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447135983.438:702350): pid=1401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=37812 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447135983.444:702351): pid=1401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447135983.445:702352): pid=1401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1402 suid=74 rport=37812 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447135983.447:702353): pid=1401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447135983.447:702354): pid=1401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447135983.447:702355): pid=1401 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23105 res=1
type=USER_ROLE_CHANGE msg=audit(1447135983.518:702356): pid=1401 uid=0 auid=0 ses=23105 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447135983.538:702357): pid=1401 uid=0 auid=0 ses=23105 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447135983.540:702358): pid=1401 uid=0 auid=0 ses=23105 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447135983.540:702359): pid=1401 uid=0 auid=0 ses=23105 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447135983.542:702360): pid=1404 uid=0 auid=0 ses=23105 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=1404 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447135983.542:702361): pid=1404 uid=0 auid=0 ses=23105 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=1404 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447135983.542:702362): pid=1404 uid=0 auid=0 ses=23105 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=1404 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447135983.543:702363): pid=1404 uid=0 auid=0 ses=23105 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447135983.564:702364): pid=1401 uid=0 auid=0 ses=23105 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447135983.564:702365): pid=1401 uid=0 auid=0 ses=23105 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447135983.568:702366): pid=1401 uid=0 auid=0 ses=23105 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447135983.568:702367): pid=1401 uid=0 auid=0 ses=23105 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447135983.569:702368): pid=1401 uid=0 auid=0 ses=23105 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1401 suid=0 rport=37812 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447135983.569:702369): pid=1401 uid=0 auid=0 ses=23105 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=1401 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447135983.569:702370): pid=1401 uid=0 auid=0 ses=23105 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=1401 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447135983.569:702371): pid=1401 uid=0 auid=0 ses=23105 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=1401 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447135983.590:702372): pid=1412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=1412 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447135983.590:702373): pid=1412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=1412 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447135983.590:702374): pid=1412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=1412 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447135983.636:702375): pid=1411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=1412 suid=74 rport=37816 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447135983.636:702376): pid=1411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=1412 suid=74 rport=37816 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447135983.766:702377): pid=1411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=37816 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447135983.766:702378): pid=1411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=37816 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447135983.774:702379): pid=1411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447135983.775:702380): pid=1411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1412 suid=74 rport=37816 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447135983.777:702381): pid=1411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447135983.778:702382): pid=1411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447135983.778:702383): pid=1411 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23106 res=1
type=USER_ROLE_CHANGE msg=audit(1447135983.846:702384): pid=1411 uid=0 auid=0 ses=23106 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447135983.870:702385): pid=1411 uid=0 auid=0 ses=23106 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447135983.872:702386): pid=1411 uid=0 auid=0 ses=23106 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447135983.872:702387): pid=1411 uid=0 auid=0 ses=23106 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447135983.874:702388): pid=1414 uid=0 auid=0 ses=23106 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=1414 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447135983.874:702389): pid=1414 uid=0 auid=0 ses=23106 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=1414 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447135983.874:702390): pid=1414 uid=0 auid=0 ses=23106 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=1414 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447135983.875:702391): pid=1414 uid=0 auid=0 ses=23106 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447135985.166:702392): pid=1411 uid=0 auid=0 ses=23106 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447135985.166:702393): pid=1411 uid=0 auid=0 ses=23106 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447135985.171:702394): pid=1411 uid=0 auid=0 ses=23106 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447135985.171:702395): pid=1411 uid=0 auid=0 ses=23106 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447135985.171:702396): pid=1411 uid=0 auid=0 ses=23106 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1411 suid=0 rport=37816 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447135985.171:702397): pid=1411 uid=0 auid=0 ses=23106 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=1411 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447135985.171:702398): pid=1411 uid=0 auid=0 ses=23106 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=1411 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447135985.171:702399): pid=1411 uid=0 auid=0 ses=23106 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=1411 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447135985.202:702400): pid=1464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=1464 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447135985.202:702401): pid=1464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=1464 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447135985.203:702402): pid=1464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=1464 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447135985.248:702403): pid=1463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=1464 suid=74 rport=37818 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447135985.248:702404): pid=1463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=1464 suid=74 rport=37818 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447135985.373:702405): pid=1463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=37818 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447135985.373:702406): pid=1463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=37818 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447135985.380:702407): pid=1463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447135985.381:702408): pid=1463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1464 suid=74 rport=37818 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447135985.381:702409): pid=1463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447135985.382:702410): pid=1463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447135985.382:702411): pid=1463 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23107 res=1
type=USER_ROLE_CHANGE msg=audit(1447135985.450:702412): pid=1463 uid=0 auid=0 ses=23107 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447135985.473:702413): pid=1463 uid=0 auid=0 ses=23107 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447135985.475:702414): pid=1463 uid=0 auid=0 ses=23107 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447135985.476:702415): pid=1463 uid=0 auid=0 ses=23107 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447135985.477:702416): pid=1466 uid=0 auid=0 ses=23107 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=1466 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447135985.477:702417): pid=1466 uid=0 auid=0 ses=23107 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=1466 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447135985.477:702418): pid=1466 uid=0 auid=0 ses=23107 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=1466 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447135985.478:702419): pid=1466 uid=0 auid=0 ses=23107 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447135985.495:702420): pid=1463 uid=0 auid=0 ses=23107 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447135985.495:702421): pid=1463 uid=0 auid=0 ses=23107 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447135985.499:702422): pid=1463 uid=0 auid=0 ses=23107 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447135985.500:702423): pid=1463 uid=0 auid=0 ses=23107 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447135985.500:702424): pid=1463 uid=0 auid=0 ses=23107 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1463 suid=0 rport=37818 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447135985.500:702425): pid=1463 uid=0 auid=0 ses=23107 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=1463 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447135985.500:702426): pid=1463 uid=0 auid=0 ses=23107 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=1463 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447135985.500:702427): pid=1463 uid=0 auid=0 ses=23107 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=1463 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447136401.847:702428): pid=2761 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447136401.848:702429): pid=2762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447136401.848:702430): pid=2761 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447136401.848:702431): pid=2762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447136401.849:702432): pid=2762 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23108 res=1
type=LOGIN msg=audit(1447136401.849:702433): pid=2761 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23109 res=1
type=USER_START msg=audit(1447136401.867:702435): pid=2761 uid=0 auid=0 ses=23109 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447136401.867:702434): pid=2762 uid=0 auid=0 ses=23108 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447136401.868:702436): pid=2762 uid=0 auid=0 ses=23108 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447136401.868:702437): pid=2761 uid=0 auid=0 ses=23109 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447136401.876:702438): pid=2762 uid=0 auid=0 ses=23108 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447136401.877:702439): pid=2762 uid=0 auid=0 ses=23108 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447136401.889:702440): pid=2761 uid=0 auid=0 ses=23109 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447136401.891:702441): pid=2761 uid=0 auid=0 ses=23109 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1447136666.699:702442): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447137001.909:702443): pid=4606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447137001.909:702444): pid=4605 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447137001.909:702445): pid=4605 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447137001.909:702446): pid=4606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447137001.910:702447): pid=4606 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23110 res=1
type=LOGIN msg=audit(1447137001.910:702448): pid=4605 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23111 res=1
type=USER_START msg=audit(1447137001.925:702449): pid=4606 uid=0 auid=0 ses=23110 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447137001.925:702450): pid=4606 uid=0 auid=0 ses=23110 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447137001.926:702451): pid=4605 uid=0 auid=0 ses=23111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447137001.926:702452): pid=4605 uid=0 auid=0 ses=23111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447137001.937:702453): pid=4606 uid=0 auid=0 ses=23110 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447137001.937:702454): pid=4605 uid=0 auid=0 ses=23111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447137001.938:702455): pid=4606 uid=0 auid=0 ses=23110 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447137001.942:702456): pid=4605 uid=0 auid=0 ses=23111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447137182.491:702457): pid=5167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=5167 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447137182.492:702458): pid=5167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=5167 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447137182.492:702459): pid=5167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=5167 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447137182.536:702460): pid=5166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=5167 suid=74 rport=39811 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447137182.536:702461): pid=5166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=5167 suid=74 rport=39811 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447137182.666:702462): pid=5166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=39811 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447137182.666:702463): pid=5166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=39811 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447137182.673:702464): pid=5166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447137182.674:702465): pid=5166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5167 suid=74 rport=39811 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447137182.676:702466): pid=5166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447137182.676:702467): pid=5166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447137182.677:702468): pid=5166 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23112 res=1
type=USER_ROLE_CHANGE msg=audit(1447137182.747:702469): pid=5166 uid=0 auid=0 ses=23112 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447137182.768:702470): pid=5166 uid=0 auid=0 ses=23112 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447137182.770:702471): pid=5166 uid=0 auid=0 ses=23112 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447137182.770:702472): pid=5166 uid=0 auid=0 ses=23112 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447137182.772:702473): pid=5169 uid=0 auid=0 ses=23112 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=5169 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447137182.772:702474): pid=5169 uid=0 auid=0 ses=23112 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=5169 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447137182.772:702475): pid=5169 uid=0 auid=0 ses=23112 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=5169 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447137182.773:702476): pid=5169 uid=0 auid=0 ses=23112 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447137182.792:702477): pid=5166 uid=0 auid=0 ses=23112 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447137182.792:702478): pid=5166 uid=0 auid=0 ses=23112 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447137182.795:702479): pid=5166 uid=0 auid=0 ses=23112 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447137182.795:702480): pid=5166 uid=0 auid=0 ses=23112 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447137182.796:702481): pid=5166 uid=0 auid=0 ses=23112 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5166 suid=0 rport=39811 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447137182.796:702482): pid=5166 uid=0 auid=0 ses=23112 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=5166 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447137182.796:702483): pid=5166 uid=0 auid=0 ses=23112 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=5166 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447137182.796:702484): pid=5166 uid=0 auid=0 ses=23112 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=5166 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447137182.818:702485): pid=5177 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=5177 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447137182.819:702486): pid=5177 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=5177 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447137182.819:702487): pid=5177 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=5177 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447137182.863:702488): pid=5176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=5177 suid=74 rport=39813 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447137182.863:702489): pid=5176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=5177 suid=74 rport=39813 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447137182.989:702490): pid=5176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=39813 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447137182.989:702491): pid=5176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=39813 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447137182.996:702492): pid=5176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447137182.997:702493): pid=5176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5177 suid=74 rport=39813 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447137182.998:702494): pid=5176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447137182.999:702495): pid=5176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447137182.999:702496): pid=5176 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23113 res=1
type=USER_ROLE_CHANGE msg=audit(1447137183.065:702497): pid=5176 uid=0 auid=0 ses=23113 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447137183.086:702498): pid=5176 uid=0 auid=0 ses=23113 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447137183.088:702499): pid=5176 uid=0 auid=0 ses=23113 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447137183.088:702500): pid=5176 uid=0 auid=0 ses=23113 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447137183.090:702501): pid=5182 uid=0 auid=0 ses=23113 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=5182 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447137183.090:702502): pid=5182 uid=0 auid=0 ses=23113 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=5182 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447137183.090:702503): pid=5182 uid=0 auid=0 ses=23113 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=5182 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447137183.091:702504): pid=5182 uid=0 auid=0 ses=23113 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447137184.349:702505): pid=5176 uid=0 auid=0 ses=23113 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447137184.349:702506): pid=5176 uid=0 auid=0 ses=23113 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447137184.355:702507): pid=5176 uid=0 auid=0 ses=23113 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447137184.355:702508): pid=5176 uid=0 auid=0 ses=23113 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447137184.356:702509): pid=5176 uid=0 auid=0 ses=23113 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5176 suid=0 rport=39813 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447137184.356:702510): pid=5176 uid=0 auid=0 ses=23113 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=5176 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447137184.356:702511): pid=5176 uid=0 auid=0 ses=23113 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=5176 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447137184.356:702512): pid=5176 uid=0 auid=0 ses=23113 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=5176 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447137184.387:702513): pid=5233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=5233 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447137184.387:702514): pid=5233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=5233 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447137184.388:702515): pid=5233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=5233 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447137184.432:702516): pid=5232 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=5233 suid=74 rport=39819 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447137184.432:702517): pid=5232 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=5233 suid=74 rport=39819 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447137184.558:702518): pid=5232 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=39819 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447137184.558:702519): pid=5232 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=39819 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447137184.568:702520): pid=5232 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447137184.569:702521): pid=5232 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5233 suid=74 rport=39819 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447137184.571:702522): pid=5232 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447137184.571:702523): pid=5232 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447137184.571:702524): pid=5232 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23114 res=1
type=USER_ROLE_CHANGE msg=audit(1447137184.639:702525): pid=5232 uid=0 auid=0 ses=23114 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447137184.663:702526): pid=5232 uid=0 auid=0 ses=23114 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447137184.666:702527): pid=5232 uid=0 auid=0 ses=23114 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447137184.666:702528): pid=5232 uid=0 auid=0 ses=23114 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447137184.668:702529): pid=5235 uid=0 auid=0 ses=23114 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=5235 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447137184.668:702530): pid=5235 uid=0 auid=0 ses=23114 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=5235 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447137184.668:702531): pid=5235 uid=0 auid=0 ses=23114 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=5235 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447137184.669:702532): pid=5235 uid=0 auid=0 ses=23114 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447137184.685:702533): pid=5232 uid=0 auid=0 ses=23114 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447137184.685:702534): pid=5232 uid=0 auid=0 ses=23114 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447137184.689:702535): pid=5232 uid=0 auid=0 ses=23114 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447137184.689:702536): pid=5232 uid=0 auid=0 ses=23114 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447137184.689:702537): pid=5232 uid=0 auid=0 ses=23114 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5232 suid=0 rport=39819 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447137184.689:702538): pid=5232 uid=0 auid=0 ses=23114 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=5232 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447137184.689:702539): pid=5232 uid=0 auid=0 ses=23114 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=5232 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447137184.689:702540): pid=5232 uid=0 auid=0 ses=23114 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=5232 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447137235.852:702541): pid=5363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=5363 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447137235.852:702542): pid=5363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=5363 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447137235.852:702543): pid=5363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=5363 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447137235.897:702544): pid=5362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=5363 suid=74 rport=40005 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447137235.897:702545): pid=5362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=5363 suid=74 rport=40005 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447137236.027:702546): pid=5362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=40005 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447137236.027:702547): pid=5362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=40005 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447137236.036:702548): pid=5362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447137236.037:702549): pid=5362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5363 suid=74 rport=40005 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447137236.042:702550): pid=5362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447137236.042:702551): pid=5362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447137236.042:702552): pid=5362 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23115 res=1
type=USER_ROLE_CHANGE msg=audit(1447137236.108:702553): pid=5362 uid=0 auid=0 ses=23115 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447137236.129:702554): pid=5362 uid=0 auid=0 ses=23115 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447137236.131:702555): pid=5362 uid=0 auid=0 ses=23115 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447137236.131:702556): pid=5362 uid=0 auid=0 ses=23115 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447137236.133:702557): pid=5365 uid=0 auid=0 ses=23115 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=5365 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447137236.133:702558): pid=5365 uid=0 auid=0 ses=23115 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=5365 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447137236.133:702559): pid=5365 uid=0 auid=0 ses=23115 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=5365 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447137236.134:702560): pid=5365 uid=0 auid=0 ses=23115 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447137236.198:702561): pid=5362 uid=0 auid=0 ses=23115 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447137236.198:702562): pid=5362 uid=0 auid=0 ses=23115 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447137236.202:702563): pid=5362 uid=0 auid=0 ses=23115 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447137236.203:702564): pid=5362 uid=0 auid=0 ses=23115 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447137236.203:702565): pid=5362 uid=0 auid=0 ses=23115 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5362 suid=0 rport=40005 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447137236.203:702566): pid=5362 uid=0 auid=0 ses=23115 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=5362 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447137236.203:702567): pid=5362 uid=0 auid=0 ses=23115 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=5362 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447137236.203:702568): pid=5362 uid=0 auid=0 ses=23115 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=5362 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447137236.224:702569): pid=5373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=5373 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447137236.224:702570): pid=5373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=5373 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447137236.224:702571): pid=5373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=5373 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447137236.269:702572): pid=5372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=5373 suid=74 rport=40006 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447137236.269:702573): pid=5372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=5373 suid=74 rport=40006 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447137236.397:702574): pid=5372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=40006 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447137236.398:702575): pid=5372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=40006 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447137236.408:702576): pid=5372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447137236.409:702577): pid=5372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5373 suid=74 rport=40006 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447137236.411:702578): pid=5372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447137236.411:702579): pid=5372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447137236.411:702580): pid=5372 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23116 res=1
type=USER_ROLE_CHANGE msg=audit(1447137236.474:702581): pid=5372 uid=0 auid=0 ses=23116 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447137236.501:702582): pid=5372 uid=0 auid=0 ses=23116 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447137236.503:702583): pid=5372 uid=0 auid=0 ses=23116 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447137236.503:702584): pid=5372 uid=0 auid=0 ses=23116 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447137236.505:702585): pid=5375 uid=0 auid=0 ses=23116 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=5375 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447137236.505:702586): pid=5375 uid=0 auid=0 ses=23116 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=5375 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447137236.505:702587): pid=5375 uid=0 auid=0 ses=23116 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=5375 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447137236.505:702588): pid=5375 uid=0 auid=0 ses=23116 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447137238.551:702589): pid=5372 uid=0 auid=0 ses=23116 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447137238.551:702590): pid=5372 uid=0 auid=0 ses=23116 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447137238.556:702591): pid=5372 uid=0 auid=0 ses=23116 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447137238.556:702592): pid=5372 uid=0 auid=0 ses=23116 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447137238.556:702593): pid=5372 uid=0 auid=0 ses=23116 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5372 suid=0 rport=40006 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447137238.557:702594): pid=5372 uid=0 auid=0 ses=23116 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=5372 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447137238.557:702595): pid=5372 uid=0 auid=0 ses=23116 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=5372 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447137238.557:702596): pid=5372 uid=0 auid=0 ses=23116 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=5372 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447137238.583:702597): pid=6134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=6134 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447137238.584:702598): pid=6134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=6134 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447137238.584:702599): pid=6134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=6134 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447137238.627:702600): pid=6133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=6134 suid=74 rport=40015 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447137238.628:702601): pid=6133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=6134 suid=74 rport=40015 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447137238.748:702602): pid=6133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=40015 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447137238.748:702603): pid=6133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=40015 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447137238.753:702604): pid=6133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447137238.754:702605): pid=6133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6134 suid=74 rport=40015 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447137238.755:702606): pid=6133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447137238.756:702607): pid=6133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447137238.756:702608): pid=6133 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23117 res=1
type=USER_ROLE_CHANGE msg=audit(1447137238.823:702609): pid=6133 uid=0 auid=0 ses=23117 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447137238.842:702610): pid=6133 uid=0 auid=0 ses=23117 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447137238.845:702611): pid=6133 uid=0 auid=0 ses=23117 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447137238.845:702612): pid=6133 uid=0 auid=0 ses=23117 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447137238.847:702613): pid=6136 uid=0 auid=0 ses=23117 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=6136 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447137238.847:702614): pid=6136 uid=0 auid=0 ses=23117 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=6136 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447137238.847:702615): pid=6136 uid=0 auid=0 ses=23117 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=6136 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447137238.848:702616): pid=6136 uid=0 auid=0 ses=23117 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447137238.863:702617): pid=6133 uid=0 auid=0 ses=23117 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447137238.863:702618): pid=6133 uid=0 auid=0 ses=23117 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447137238.867:702619): pid=6133 uid=0 auid=0 ses=23117 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447137238.867:702620): pid=6133 uid=0 auid=0 ses=23117 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447137238.868:702621): pid=6133 uid=0 auid=0 ses=23117 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6133 suid=0 rport=40015 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447137238.868:702622): pid=6133 uid=0 auid=0 ses=23117 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=6133 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447137238.868:702623): pid=6133 uid=0 auid=0 ses=23117 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=6133 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447137238.868:702624): pid=6133 uid=0 auid=0 ses=23117 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=6133 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447137601.965:702625): pid=7281 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447137601.965:702626): pid=7280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447137601.965:702627): pid=7281 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447137601.965:702628): pid=7280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447137601.966:702629): pid=7281 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23118 res=1
type=LOGIN msg=audit(1447137601.966:702630): pid=7280 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23119 res=1
type=USER_START msg=audit(1447137601.985:702631): pid=7280 uid=0 auid=0 ses=23119 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447137601.985:702632): pid=7281 uid=0 auid=0 ses=23118 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447137601.985:702633): pid=7280 uid=0 auid=0 ses=23119 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447137601.985:702634): pid=7281 uid=0 auid=0 ses=23118 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447137601.994:702635): pid=7281 uid=0 auid=0 ses=23118 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447137601.998:702636): pid=7281 uid=0 auid=0 ses=23118 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447137601.999:702637): pid=7280 uid=0 auid=0 ses=23119 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447137602.004:702638): pid=7280 uid=0 auid=0 ses=23119 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447138201.020:702639): pid=9089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447138201.020:702640): pid=9088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447138201.020:702641): pid=9088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447138201.020:702642): pid=9089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447138201.020:702643): pid=9089 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23120 res=1
type=LOGIN msg=audit(1447138201.020:702644): pid=9088 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23121 res=1
type=USER_START msg=audit(1447138201.036:702645): pid=9089 uid=0 auid=0 ses=23120 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447138201.037:702646): pid=9089 uid=0 auid=0 ses=23120 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447138201.037:702647): pid=9088 uid=0 auid=0 ses=23121 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447138201.038:702648): pid=9088 uid=0 auid=0 ses=23121 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447138201.044:702649): pid=9089 uid=0 auid=0 ses=23120 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447138201.046:702650): pid=9089 uid=0 auid=0 ses=23120 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447138201.049:702651): pid=9088 uid=0 auid=0 ses=23121 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447138201.053:702652): pid=9088 uid=0 auid=0 ses=23121 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447138382.988:702653): pid=9649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=9649 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447138382.988:702654): pid=9649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=9649 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447138382.989:702655): pid=9649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=9649 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447138383.032:702656): pid=9648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=9649 suid=74 rport=41978 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447138383.033:702657): pid=9648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=9649 suid=74 rport=41978 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447138383.160:702658): pid=9648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=41978 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447138383.160:702659): pid=9648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=41978 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447138383.164:702660): pid=9648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447138383.166:702661): pid=9648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9649 suid=74 rport=41978 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447138383.167:702662): pid=9648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447138383.167:702663): pid=9648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447138383.167:702664): pid=9648 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23122 res=1
type=USER_ROLE_CHANGE msg=audit(1447138383.237:702665): pid=9648 uid=0 auid=0 ses=23122 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447138383.261:702666): pid=9648 uid=0 auid=0 ses=23122 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447138383.264:702667): pid=9648 uid=0 auid=0 ses=23122 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447138383.264:702668): pid=9648 uid=0 auid=0 ses=23122 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447138383.266:702669): pid=9654 uid=0 auid=0 ses=23122 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=9654 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447138383.266:702670): pid=9654 uid=0 auid=0 ses=23122 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=9654 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447138383.266:702671): pid=9654 uid=0 auid=0 ses=23122 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=9654 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447138383.267:702672): pid=9654 uid=0 auid=0 ses=23122 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447138383.288:702673): pid=9648 uid=0 auid=0 ses=23122 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447138383.288:702674): pid=9648 uid=0 auid=0 ses=23122 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447138383.292:702675): pid=9648 uid=0 auid=0 ses=23122 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447138383.292:702676): pid=9648 uid=0 auid=0 ses=23122 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447138383.293:702677): pid=9648 uid=0 auid=0 ses=23122 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9648 suid=0 rport=41978 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447138383.293:702678): pid=9648 uid=0 auid=0 ses=23122 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=9648 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447138383.293:702679): pid=9648 uid=0 auid=0 ses=23122 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=9648 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447138383.293:702680): pid=9648 uid=0 auid=0 ses=23122 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=9648 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447138383.317:702681): pid=9662 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=9662 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447138383.317:702682): pid=9662 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=9662 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447138383.317:702683): pid=9662 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=9662 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447138383.362:702684): pid=9661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=9662 suid=74 rport=41980 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447138383.362:702685): pid=9661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=9662 suid=74 rport=41980 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447138383.491:702686): pid=9661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=41980 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447138383.491:702687): pid=9661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=41980 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447138383.501:702688): pid=9661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447138383.502:702689): pid=9661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9662 suid=74 rport=41980 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447138383.504:702690): pid=9661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447138383.504:702691): pid=9661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447138383.504:702692): pid=9661 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23123 res=1
type=USER_ROLE_CHANGE msg=audit(1447138383.568:702693): pid=9661 uid=0 auid=0 ses=23123 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447138383.593:702694): pid=9661 uid=0 auid=0 ses=23123 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447138383.596:702695): pid=9661 uid=0 auid=0 ses=23123 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447138383.597:702696): pid=9661 uid=0 auid=0 ses=23123 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447138383.598:702697): pid=9664 uid=0 auid=0 ses=23123 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=9664 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447138383.598:702698): pid=9664 uid=0 auid=0 ses=23123 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=9664 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447138383.598:702699): pid=9664 uid=0 auid=0 ses=23123 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=9664 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447138383.599:702700): pid=9664 uid=0 auid=0 ses=23123 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447138384.901:702701): pid=9661 uid=0 auid=0 ses=23123 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447138384.901:702702): pid=9661 uid=0 auid=0 ses=23123 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447138384.905:702703): pid=9661 uid=0 auid=0 ses=23123 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447138384.905:702704): pid=9661 uid=0 auid=0 ses=23123 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447138384.906:702705): pid=9661 uid=0 auid=0 ses=23123 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9661 suid=0 rport=41980 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447138384.906:702706): pid=9661 uid=0 auid=0 ses=23123 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=9661 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447138384.906:702707): pid=9661 uid=0 auid=0 ses=23123 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=9661 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447138384.906:702708): pid=9661 uid=0 auid=0 ses=23123 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=9661 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447138384.940:702709): pid=9754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=9754 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447138384.940:702710): pid=9754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=9754 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447138384.940:702711): pid=9754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=9754 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447138384.985:702712): pid=9753 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=9754 suid=74 rport=41986 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447138384.985:702713): pid=9753 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=9754 suid=74 rport=41986 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447138385.116:702714): pid=9753 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=41986 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447138385.116:702715): pid=9753 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=41986 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447138385.125:702716): pid=9753 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447138385.127:702717): pid=9753 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9754 suid=74 rport=41986 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447138385.129:702718): pid=9753 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447138385.130:702719): pid=9753 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447138385.130:702720): pid=9753 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23124 res=1
type=USER_ROLE_CHANGE msg=audit(1447138385.197:702721): pid=9753 uid=0 auid=0 ses=23124 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447138385.217:702722): pid=9753 uid=0 auid=0 ses=23124 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447138385.219:702723): pid=9753 uid=0 auid=0 ses=23124 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447138385.219:702724): pid=9753 uid=0 auid=0 ses=23124 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447138385.221:702725): pid=9756 uid=0 auid=0 ses=23124 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=9756 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447138385.221:702726): pid=9756 uid=0 auid=0 ses=23124 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=9756 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447138385.221:702727): pid=9756 uid=0 auid=0 ses=23124 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=9756 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447138385.222:702728): pid=9756 uid=0 auid=0 ses=23124 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447138385.239:702729): pid=9753 uid=0 auid=0 ses=23124 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447138385.239:702730): pid=9753 uid=0 auid=0 ses=23124 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447138385.243:702731): pid=9753 uid=0 auid=0 ses=23124 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447138385.243:702732): pid=9753 uid=0 auid=0 ses=23124 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447138385.243:702733): pid=9753 uid=0 auid=0 ses=23124 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9753 suid=0 rport=41986 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447138385.244:702734): pid=9753 uid=0 auid=0 ses=23124 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=9753 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447138385.244:702735): pid=9753 uid=0 auid=0 ses=23124 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=9753 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447138385.244:702736): pid=9753 uid=0 auid=0 ses=23124 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=9753 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=SYSCALL msg=audit(1447138748.682:702737): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447138801.078:702738): pid=11005 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447138801.078:702739): pid=11004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447138801.078:702740): pid=11005 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447138801.078:702741): pid=11004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447138801.079:702742): pid=11005 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23125 res=1
type=LOGIN msg=audit(1447138801.079:702743): pid=11004 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23126 res=1
type=USER_START msg=audit(1447138801.097:702744): pid=11005 uid=0 auid=0 ses=23125 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447138801.097:702745): pid=11004 uid=0 auid=0 ses=23126 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447138801.097:702746): pid=11005 uid=0 auid=0 ses=23125 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447138801.097:702747): pid=11004 uid=0 auid=0 ses=23126 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447138801.105:702748): pid=11005 uid=0 auid=0 ses=23125 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447138801.107:702749): pid=11005 uid=0 auid=0 ses=23125 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447138801.116:702750): pid=11004 uid=0 auid=0 ses=23126 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447138801.117:702751): pid=11004 uid=0 auid=0 ses=23126 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447138861.133:702752): pid=11241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447138861.134:702753): pid=11241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447138861.135:702754): pid=11241 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23127 res=1
type=USER_START msg=audit(1447138861.146:702755): pid=11241 uid=0 auid=0 ses=23127 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447138861.146:702756): pid=11241 uid=0 auid=0 ses=23127 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447138861.170:702757): pid=11241 uid=0 auid=0 ses=23127 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447138861.171:702758): pid=11241 uid=0 auid=0 ses=23127 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447139086.617:702759): pid=11990 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=11990 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447139086.617:702760): pid=11990 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=11990 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447139086.617:702761): pid=11990 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=11990 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447139086.619:702762): pid=11989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-cbc ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=11990 suid=74 rport=60756 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447139086.619:702763): pid=11989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-cbc ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=11990 suid=74 rport=60756 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_AUTH msg=audit(1447139086.704:702764): pid=11989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60756 acct="svnadm" exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_AUTH msg=audit(1447139086.704:702765): pid=11989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-dss size=1024 fp=41:85:f9:50:1a:0f:bb:e4:07:e8:23:7a:13:fa:b2:e5 rport=60756 acct="svnadm" exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_ACCT msg=audit(1447139086.712:702766): pid=11989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447139086.714:702767): pid=11989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11990 suid=74 rport=60756 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_AUTH msg=audit(1447139086.716:702768): pid=11989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="svnadm" exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447139086.716:702769): pid=11989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=LOGIN msg=audit(1447139086.716:702770): pid=11989 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1001 old-ses=4294967295 ses=23128 res=1
type=USER_ROLE_CHANGE msg=audit(1447139086.783:702771): pid=11989 uid=0 auid=1001 ses=23128 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=USER_START msg=audit(1447139086.801:702772): pid=11989 uid=0 auid=1001 ses=23128 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447139086.802:702773): pid=11989 uid=0 auid=1001 ses=23128 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11989 suid=0 rport=60756 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447139086.802:702774): pid=11992 uid=0 auid=1001 ses=23128 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=11992 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447139086.802:702775): pid=11992 uid=0 auid=1001 ses=23128 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=11992 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447139086.802:702776): pid=11992 uid=0 auid=1001 ses=23128 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=11992 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRED_ACQ msg=audit(1447139086.803:702777): pid=11992 uid=0 auid=1001 ses=23128 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447139086.804:702778): pid=11989 uid=0 auid=1001 ses=23128 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1001 exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=USER_START msg=audit(1447139086.805:702779): pid=11989 uid=0 auid=1001 ses=23128 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1001 exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447139086.806:702780): pid=11989 uid=0 auid=1001 ses=23128 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=11993 suid=1001  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_END msg=audit(1447139086.823:702781): pid=11989 uid=0 auid=1001 ses=23128 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1001 exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447139086.823:702782): pid=11989 uid=0 auid=1001 ses=23128 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1001 exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447139086.823:702783): pid=11989 uid=0 auid=1001 ses=23128 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11992 suid=1001 rport=60756 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447139086.823:702784): pid=11989 uid=0 auid=1001 ses=23128 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=11992 suid=1001  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_END msg=audit(1447139086.826:702785): pid=11989 uid=0 auid=1001 ses=23128 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447139086.826:702786): pid=11989 uid=0 auid=1001 ses=23128 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447139086.827:702787): pid=11989 uid=0 auid=1001 ses=23128 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=11989 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447139086.827:702788): pid=11989 uid=0 auid=1001 ses=23128 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=11989 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447139086.827:702789): pid=11989 uid=0 auid=1001 ses=23128 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=11989 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447139086.841:702790): pid=12003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12003 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447139086.841:702791): pid=12003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12003 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447139086.841:702792): pid=12003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12003 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447139086.842:702793): pid=12001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-cbc ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=12003 suid=74 rport=60757 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447139086.842:702794): pid=12001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-cbc ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=12003 suid=74 rport=60757 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_AUTH msg=audit(1447139086.902:702795): pid=12001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60757 acct="svnadm" exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_AUTH msg=audit(1447139086.902:702796): pid=12001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-dss size=1024 fp=41:85:f9:50:1a:0f:bb:e4:07:e8:23:7a:13:fa:b2:e5 rport=60757 acct="svnadm" exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_ACCT msg=audit(1447139086.910:702797): pid=12001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447139086.911:702798): pid=12001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12003 suid=74 rport=60757 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_AUTH msg=audit(1447139086.914:702799): pid=12001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="svnadm" exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447139086.915:702800): pid=12001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=LOGIN msg=audit(1447139086.916:702801): pid=12001 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1001 old-ses=4294967295 ses=23129 res=1
type=USER_ROLE_CHANGE msg=audit(1447139086.983:702802): pid=12001 uid=0 auid=1001 ses=23129 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=USER_START msg=audit(1447139087.001:702803): pid=12001 uid=0 auid=1001 ses=23129 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447139087.001:702804): pid=12001 uid=0 auid=1001 ses=23129 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12001 suid=0 rport=60757 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447139087.002:702805): pid=12005 uid=0 auid=1001 ses=23129 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12005 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447139087.002:702806): pid=12005 uid=0 auid=1001 ses=23129 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12005 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447139087.002:702807): pid=12005 uid=0 auid=1001 ses=23129 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12005 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRED_ACQ msg=audit(1447139087.002:702808): pid=12005 uid=0 auid=1001 ses=23129 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447139087.004:702809): pid=12001 uid=0 auid=1001 ses=23129 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1001 exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=USER_START msg=audit(1447139087.004:702810): pid=12001 uid=0 auid=1001 ses=23129 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1001 exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447139087.005:702811): pid=12001 uid=0 auid=1001 ses=23129 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12006 suid=1001  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=SYSCALL msg=audit(1447139087.020:702812): arch=c000003e syscall=263 success=yes exit=0 a0=ffffffffffffff9c a1=17930c0 a2=0 a3=7fffe1df4b90 items=2 ppid=12005 pid=12006 auid=1001 uid=1001 gid=1003 euid=1001 suid=1001 fsuid=1001 egid=1003 sgid=1003 fsgid=1003 tty=(none) ses=23129 comm="rm" exe="/usr/bin/rm" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key="delete"
type=CWD msg=audit(1447139087.020:702812):  cwd="/home/svnadm"
type=PATH msg=audit(1447139087.020:702812): item=0 name="/usr/local/test/titan/" inode=9255149 dev=08:02 mode=040777 ouid=0 ogid=0 rdev=00:00 obj=unconfined_u:object_r:usr_t:s0 objtype=PARENT
type=PATH msg=audit(1447139087.020:702812): item=1 name="/usr/local/test/titan/NNI-titan-master-7.6.3-4285.linux-x64.sh" inode=9255147 dev=08:02 mode=0100755 ouid=1001 ogid=1003 rdev=00:00 obj=unconfined_u:object_r:usr_t:s0 objtype=DELETE
type=USER_END msg=audit(1447139087.173:702813): pid=12001 uid=0 auid=1001 ses=23129 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1001 exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447139087.173:702814): pid=12001 uid=0 auid=1001 ses=23129 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1001 exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447139087.173:702815): pid=12001 uid=0 auid=1001 ses=23129 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12005 suid=1001 rport=60757 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447139087.173:702816): pid=12001 uid=0 auid=1001 ses=23129 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12005 suid=1001  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_END msg=audit(1447139087.177:702817): pid=12001 uid=0 auid=1001 ses=23129 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447139087.178:702818): pid=12001 uid=0 auid=1001 ses=23129 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447139087.178:702819): pid=12001 uid=0 auid=1001 ses=23129 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12001 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447139087.179:702820): pid=12001 uid=0 auid=1001 ses=23129 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12001 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447139087.179:702821): pid=12001 uid=0 auid=1001 ses=23129 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12001 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447139087.189:702822): pid=12016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12016 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447139087.189:702823): pid=12016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12016 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447139087.189:702824): pid=12016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12016 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447139087.190:702825): pid=12014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-cbc ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=12016 suid=74 rport=60758 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447139087.191:702826): pid=12014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-cbc ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=12016 suid=74 rport=60758 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_AUTH msg=audit(1447139087.250:702827): pid=12014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60758 acct="svnadm" exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_AUTH msg=audit(1447139087.250:702828): pid=12014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-dss size=1024 fp=41:85:f9:50:1a:0f:bb:e4:07:e8:23:7a:13:fa:b2:e5 rport=60758 acct="svnadm" exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_ACCT msg=audit(1447139087.257:702829): pid=12014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447139087.257:702830): pid=12014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12016 suid=74 rport=60758 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_AUTH msg=audit(1447139087.259:702831): pid=12014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="svnadm" exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447139087.259:702832): pid=12014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=LOGIN msg=audit(1447139087.259:702833): pid=12014 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1001 old-ses=4294967295 ses=23130 res=1
type=USER_ROLE_CHANGE msg=audit(1447139087.325:702834): pid=12014 uid=0 auid=1001 ses=23130 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=USER_START msg=audit(1447139087.347:702835): pid=12014 uid=0 auid=1001 ses=23130 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447139087.347:702836): pid=12014 uid=0 auid=1001 ses=23130 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12014 suid=0 rport=60758 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447139087.348:702837): pid=12018 uid=0 auid=1001 ses=23130 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12018 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447139087.348:702838): pid=12018 uid=0 auid=1001 ses=23130 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12018 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447139087.348:702839): pid=12018 uid=0 auid=1001 ses=23130 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12018 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRED_ACQ msg=audit(1447139087.348:702840): pid=12018 uid=0 auid=1001 ses=23130 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447139087.350:702841): pid=12014 uid=0 auid=1001 ses=23130 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1001 exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=USER_START msg=audit(1447139087.350:702842): pid=12014 uid=0 auid=1001 ses=23130 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1001 exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447139087.351:702843): pid=12014 uid=0 auid=1001 ses=23130 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12019 suid=1001  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_END msg=audit(1447139103.315:702844): pid=12014 uid=0 auid=1001 ses=23130 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1001 exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447139103.315:702845): pid=12014 uid=0 auid=1001 ses=23130 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1001 exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447139103.315:702846): pid=12014 uid=0 auid=1001 ses=23130 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12018 suid=1001 rport=60758 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447139103.315:702847): pid=12014 uid=0 auid=1001 ses=23130 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12018 suid=1001  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_END msg=audit(1447139103.320:702848): pid=12014 uid=0 auid=1001 ses=23130 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447139103.320:702849): pid=12014 uid=0 auid=1001 ses=23130 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447139103.321:702850): pid=12014 uid=0 auid=1001 ses=23130 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12014 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447139103.321:702851): pid=12014 uid=0 auid=1001 ses=23130 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12014 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447139103.321:702852): pid=12014 uid=0 auid=1001 ses=23130 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12014 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447139103.342:702853): pid=12036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12036 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447139103.342:702854): pid=12036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12036 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447139103.342:702855): pid=12036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12036 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447139103.344:702856): pid=12034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-cbc ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=12036 suid=74 rport=60760 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447139103.344:702857): pid=12034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-cbc ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=12036 suid=74 rport=60760 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_AUTH msg=audit(1447139103.408:702858): pid=12034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60760 acct="svnadm" exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_AUTH msg=audit(1447139103.408:702859): pid=12034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-dss size=1024 fp=41:85:f9:50:1a:0f:bb:e4:07:e8:23:7a:13:fa:b2:e5 rport=60760 acct="svnadm" exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_ACCT msg=audit(1447139103.413:702860): pid=12034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447139103.413:702861): pid=12034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12036 suid=74 rport=60760 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_AUTH msg=audit(1447139103.415:702862): pid=12034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="svnadm" exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447139103.415:702863): pid=12034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=LOGIN msg=audit(1447139103.415:702864): pid=12034 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1001 old-ses=4294967295 ses=23131 res=1
type=USER_ROLE_CHANGE msg=audit(1447139103.479:702865): pid=12034 uid=0 auid=1001 ses=23131 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=USER_START msg=audit(1447139103.498:702866): pid=12034 uid=0 auid=1001 ses=23131 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447139103.498:702867): pid=12034 uid=0 auid=1001 ses=23131 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12034 suid=0 rport=60760 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447139103.499:702868): pid=12040 uid=0 auid=1001 ses=23131 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12040 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447139103.499:702869): pid=12040 uid=0 auid=1001 ses=23131 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12040 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447139103.499:702870): pid=12040 uid=0 auid=1001 ses=23131 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12040 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRED_ACQ msg=audit(1447139103.499:702871): pid=12040 uid=0 auid=1001 ses=23131 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447139103.501:702872): pid=12034 uid=0 auid=1001 ses=23131 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1001 exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=USER_START msg=audit(1447139103.501:702873): pid=12034 uid=0 auid=1001 ses=23131 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1001 exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447139103.502:702874): pid=12034 uid=0 auid=1001 ses=23131 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12041 suid=1001  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_END msg=audit(1447139103.520:702875): pid=12034 uid=0 auid=1001 ses=23131 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1001 exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447139103.521:702876): pid=12034 uid=0 auid=1001 ses=23131 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1001 exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447139103.521:702877): pid=12034 uid=0 auid=1001 ses=23131 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12040 suid=1001 rport=60760 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447139103.521:702878): pid=12034 uid=0 auid=1001 ses=23131 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12040 suid=1001  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_END msg=audit(1447139103.524:702879): pid=12034 uid=0 auid=1001 ses=23131 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447139103.524:702880): pid=12034 uid=0 auid=1001 ses=23131 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447139103.525:702881): pid=12034 uid=0 auid=1001 ses=23131 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12034 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447139103.525:702882): pid=12034 uid=0 auid=1001 ses=23131 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12034 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447139103.525:702883): pid=12034 uid=0 auid=1001 ses=23131 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12034 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447139103.538:702884): pid=12051 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12051 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447139103.539:702885): pid=12051 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12051 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447139103.539:702886): pid=12051 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12051 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447139103.540:702887): pid=12048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-cbc ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=12051 suid=74 rport=60761 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447139103.540:702888): pid=12048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-cbc ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=12051 suid=74 rport=60761 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_AUTH msg=audit(1447139103.593:702889): pid=12048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60761 acct="svnadm" exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_AUTH msg=audit(1447139103.593:702890): pid=12048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-dss size=1024 fp=41:85:f9:50:1a:0f:bb:e4:07:e8:23:7a:13:fa:b2:e5 rport=60761 acct="svnadm" exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_ACCT msg=audit(1447139103.598:702891): pid=12048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447139103.598:702892): pid=12048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12051 suid=74 rport=60761 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_AUTH msg=audit(1447139103.599:702893): pid=12048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="svnadm" exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447139103.599:702894): pid=12048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=LOGIN msg=audit(1447139103.600:702895): pid=12048 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1001 old-ses=4294967295 ses=23132 res=1
type=USER_ROLE_CHANGE msg=audit(1447139103.664:702896): pid=12048 uid=0 auid=1001 ses=23132 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=USER_START msg=audit(1447139103.682:702897): pid=12048 uid=0 auid=1001 ses=23132 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447139103.683:702899): pid=12048 uid=0 auid=1001 ses=23132 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12048 suid=0 rport=60761 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447139103.683:702898): pid=12053 uid=0 auid=1001 ses=23132 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12053 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447139103.683:702900): pid=12053 uid=0 auid=1001 ses=23132 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12053 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447139103.683:702901): pid=12053 uid=0 auid=1001 ses=23132 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12053 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRED_ACQ msg=audit(1447139103.683:702902): pid=12053 uid=0 auid=1001 ses=23132 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447139103.685:702903): pid=12048 uid=0 auid=1001 ses=23132 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1001 exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=USER_START msg=audit(1447139103.685:702904): pid=12048 uid=0 auid=1001 ses=23132 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1001 exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447139103.686:702905): pid=12048 uid=0 auid=1001 ses=23132 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12054 suid=1001  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_END msg=audit(1447139103.703:702906): pid=12048 uid=0 auid=1001 ses=23132 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1001 exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447139103.703:702907): pid=12048 uid=0 auid=1001 ses=23132 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1001 exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447139103.703:702908): pid=12048 uid=0 auid=1001 ses=23132 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12053 suid=1001 rport=60761 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447139103.703:702909): pid=12048 uid=0 auid=1001 ses=23132 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12053 suid=1001  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_END msg=audit(1447139103.706:702910): pid=12048 uid=0 auid=1001 ses=23132 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447139103.706:702911): pid=12048 uid=0 auid=1001 ses=23132 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447139103.706:702912): pid=12048 uid=0 auid=1001 ses=23132 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12048 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447139103.706:702913): pid=12048 uid=0 auid=1001 ses=23132 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12048 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447139103.706:702914): pid=12048 uid=0 auid=1001 ses=23132 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12048 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_ACCT msg=audit(1447139401.190:702915): pid=12976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447139401.190:702916): pid=12976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447139401.191:702917): pid=12975 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447139401.191:702918): pid=12975 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447139401.191:702919): pid=12976 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23133 res=1
type=LOGIN msg=audit(1447139401.192:702920): pid=12975 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23134 res=1
type=USER_START msg=audit(1447139401.214:702921): pid=12976 uid=0 auid=0 ses=23133 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447139401.214:702922): pid=12976 uid=0 auid=0 ses=23133 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447139401.216:702923): pid=12975 uid=0 auid=0 ses=23134 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447139401.217:702924): pid=12975 uid=0 auid=0 ses=23134 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447139401.233:702925): pid=12975 uid=0 auid=0 ses=23134 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447139401.236:702926): pid=12975 uid=0 auid=0 ses=23134 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1447139401.238:702927): arch=c000003e syscall=59 success=yes exit=0 a0=90c600 a1=90bfd0 a2=915430 a3=7fff835aeb40 items=2 ppid=12984 pid=12993 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23133 comm="systemctl" exe="/usr/bin/systemctl" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key="privileged"
type=EXECVE msg=audit(1447139401.238:702927): argc=3 a0="/usr/bin/systemctl" a1="stop" a2="titan"
type=CWD msg=audit(1447139401.238:702927):  cwd="/usr/local/test/titan"
type=PATH msg=audit(1447139401.238:702927): item=0 name="/usr/bin/systemctl" inode=25275302 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:systemd_systemctl_exec_t:s0 objtype=NORMAL
type=PATH msg=audit(1447139401.238:702927): item=1 name=(null) inode=2292 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=SERVICE_STOP msg=audit(1447139406.289:702928): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="titan" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=SYSCALL msg=audit(1447139410.989:702929): arch=c000003e syscall=59 success=yes exit=0 a0=ebe2d0 a1=ebd290 a2=ebcc70 a3=7fff675b4c10 items=2 ppid=13120 pid=13121 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23133 comm="systemctl" exe="/usr/bin/systemctl" subj=unconfined_u:unconfined_r:rpm_script_t:s0-s0:c0.c1023 key="privileged"
type=EXECVE msg=audit(1447139410.989:702929): argc=3 a0="systemctl" a1="disable" a2="titan"
type=CWD msg=audit(1447139410.989:702929):  cwd="/"
type=PATH msg=audit(1447139410.989:702929): item=0 name="/bin/systemctl" inode=25275302 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:systemd_systemctl_exec_t:s0 objtype=NORMAL
type=PATH msg=audit(1447139410.989:702929): item=1 name=(null) inode=2292 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=SYSCALL msg=audit(1447139411.047:702930): arch=c000003e syscall=59 success=yes exit=0 a0=ebcd80 a1=ebe0b0 a2=ebeb30 a3=7fff675b4c10 items=2 ppid=13120 pid=13131 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23133 comm="systemctl" exe="/usr/bin/systemctl" subj=unconfined_u:unconfined_r:rpm_script_t:s0-s0:c0.c1023 key="privileged"
type=EXECVE msg=audit(1447139411.047:702930): argc=2 a0="systemctl" a1="daemon-reload"
type=CWD msg=audit(1447139411.047:702930):  cwd="/"
type=PATH msg=audit(1447139411.047:702930): item=0 name="/bin/systemctl" inode=25275302 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:systemd_systemctl_exec_t:s0 objtype=NORMAL
type=PATH msg=audit(1447139411.047:702930): item=1 name=(null) inode=2292 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=SYSCALL msg=audit(1447139427.399:702931): arch=c000003e syscall=59 success=yes exit=0 a0=18f13e0 a1=18f0fe0 a2=18f10b0 a3=7fff5f1f6f00 items=2 ppid=13172 pid=13175 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23133 comm="systemctl" exe="/usr/bin/systemctl" subj=unconfined_u:unconfined_r:rpm_script_t:s0-s0:c0.c1023 key="privileged"
type=EXECVE msg=audit(1447139427.399:702931): argc=2 a0="systemctl" a1="daemon-reload"
type=CWD msg=audit(1447139427.399:702931):  cwd="/"
type=PATH msg=audit(1447139427.399:702931): item=0 name="/bin/systemctl" inode=25275302 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:systemd_systemctl_exec_t:s0 objtype=NORMAL
type=PATH msg=audit(1447139427.399:702931): item=1 name=(null) inode=2292 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=SYSCALL msg=audit(1447139427.439:702932): arch=c000003e syscall=59 success=yes exit=0 a0=18f1690 a1=18f14d0 a2=18f10b0 a3=7fff5f1f6f00 items=2 ppid=13172 pid=13184 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23133 comm="systemctl" exe="/usr/bin/systemctl" subj=unconfined_u:unconfined_r:rpm_script_t:s0-s0:c0.c1023 key="privileged"
type=EXECVE msg=audit(1447139427.439:702932): argc=3 a0="systemctl" a1="enable" a2="titan"
type=CWD msg=audit(1447139427.439:702932):  cwd="/"
type=PATH msg=audit(1447139427.439:702932): item=0 name="/bin/systemctl" inode=25275302 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:systemd_systemctl_exec_t:s0 objtype=NORMAL
type=PATH msg=audit(1447139427.439:702932): item=1 name=(null) inode=2292 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=SYSCALL msg=audit(1447139547.609:702933): arch=c000003e syscall=59 success=yes exit=0 a0=90c6f0 a1=9080c0 a2=915430 a3=7fff835aee70 items=2 ppid=12984 pid=13529 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23133 comm="systemctl" exe="/usr/bin/systemctl" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key="privileged"
type=EXECVE msg=audit(1447139547.609:702933): argc=3 a0="/usr/bin/systemctl" a1="start" a2="titan"
type=CWD msg=audit(1447139547.609:702933):  cwd="/usr/local/test/titan"
type=PATH msg=audit(1447139547.609:702933): item=0 name="/usr/bin/systemctl" inode=25275302 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:systemd_systemctl_exec_t:s0 objtype=NORMAL
type=PATH msg=audit(1447139547.609:702933): item=1 name=(null) inode=2292 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=SERVICE_START msg=audit(1447139548.649:702934): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="titan" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447139582.537:702935): pid=13744 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=13744 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447139582.537:702936): pid=13744 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=13744 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447139582.537:702937): pid=13744 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=13744 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447139582.581:702938): pid=13743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=13744 suid=74 rport=43957 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447139582.581:702939): pid=13743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=13744 suid=74 rport=43957 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447139582.706:702940): pid=13743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=43957 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447139582.706:702941): pid=13743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=43957 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447139582.710:702942): pid=13743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447139582.711:702943): pid=13743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13744 suid=74 rport=43957 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447139582.713:702944): pid=13743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447139582.714:702945): pid=13743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447139582.714:702946): pid=13743 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23135 res=1
type=USER_ROLE_CHANGE msg=audit(1447139582.783:702947): pid=13743 uid=0 auid=0 ses=23135 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447139582.801:702948): pid=13743 uid=0 auid=0 ses=23135 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447139582.805:702949): pid=13743 uid=0 auid=0 ses=23135 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447139582.805:702950): pid=13743 uid=0 auid=0 ses=23135 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447139582.807:702951): pid=13746 uid=0 auid=0 ses=23135 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=13746 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447139582.807:702952): pid=13746 uid=0 auid=0 ses=23135 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=13746 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447139582.807:702953): pid=13746 uid=0 auid=0 ses=23135 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=13746 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447139582.808:702954): pid=13746 uid=0 auid=0 ses=23135 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447139582.830:702955): pid=13743 uid=0 auid=0 ses=23135 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447139582.830:702956): pid=13743 uid=0 auid=0 ses=23135 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447139582.835:702957): pid=13743 uid=0 auid=0 ses=23135 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447139582.835:702958): pid=13743 uid=0 auid=0 ses=23135 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447139582.835:702959): pid=13743 uid=0 auid=0 ses=23135 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13743 suid=0 rport=43957 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447139582.835:702960): pid=13743 uid=0 auid=0 ses=23135 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=13743 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447139582.835:702961): pid=13743 uid=0 auid=0 ses=23135 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=13743 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447139582.835:702962): pid=13743 uid=0 auid=0 ses=23135 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=13743 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447139582.855:702963): pid=13753 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=13753 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447139582.855:702964): pid=13753 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=13753 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447139582.855:702965): pid=13753 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=13753 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447139582.900:702966): pid=13752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=13753 suid=74 rport=43958 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447139582.900:702967): pid=13752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=13753 suid=74 rport=43958 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447139583.030:702968): pid=13752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=43958 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447139583.030:702969): pid=13752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=43958 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447139583.038:702970): pid=13752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447139583.039:702971): pid=13752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13753 suid=74 rport=43958 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447139583.042:702972): pid=13752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447139583.043:702973): pid=13752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447139583.043:702974): pid=13752 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23136 res=1
type=USER_ROLE_CHANGE msg=audit(1447139583.107:702975): pid=13752 uid=0 auid=0 ses=23136 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447139583.131:702976): pid=13752 uid=0 auid=0 ses=23136 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447139583.134:702977): pid=13752 uid=0 auid=0 ses=23136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447139583.134:702978): pid=13752 uid=0 auid=0 ses=23136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447139583.135:702979): pid=13755 uid=0 auid=0 ses=23136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=13755 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447139583.135:702980): pid=13755 uid=0 auid=0 ses=23136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=13755 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447139583.135:702981): pid=13755 uid=0 auid=0 ses=23136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=13755 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447139583.136:702982): pid=13755 uid=0 auid=0 ses=23136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447139584.410:702983): pid=13752 uid=0 auid=0 ses=23136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447139584.410:702984): pid=13752 uid=0 auid=0 ses=23136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447139584.415:702985): pid=13752 uid=0 auid=0 ses=23136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447139584.415:702986): pid=13752 uid=0 auid=0 ses=23136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447139584.415:702987): pid=13752 uid=0 auid=0 ses=23136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13752 suid=0 rport=43958 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447139584.415:702988): pid=13752 uid=0 auid=0 ses=23136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=13752 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447139584.415:702989): pid=13752 uid=0 auid=0 ses=23136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=13752 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447139584.415:702990): pid=13752 uid=0 auid=0 ses=23136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=13752 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447139584.451:702991): pid=13804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=13804 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447139584.451:702992): pid=13804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=13804 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447139584.451:702993): pid=13804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=13804 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447139584.497:702994): pid=13803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=13804 suid=74 rport=43962 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447139584.497:702995): pid=13803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=13804 suid=74 rport=43962 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447139584.626:702996): pid=13803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=43962 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447139584.626:702997): pid=13803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=43962 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447139584.633:702998): pid=13803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447139584.634:702999): pid=13803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13804 suid=74 rport=43962 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447139584.636:703000): pid=13803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447139584.636:703001): pid=13803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447139584.636:703002): pid=13803 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23137 res=1
type=USER_ROLE_CHANGE msg=audit(1447139584.700:703003): pid=13803 uid=0 auid=0 ses=23137 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447139584.720:703004): pid=13803 uid=0 auid=0 ses=23137 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447139584.723:703005): pid=13803 uid=0 auid=0 ses=23137 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447139584.723:703006): pid=13803 uid=0 auid=0 ses=23137 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447139584.724:703007): pid=13806 uid=0 auid=0 ses=23137 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=13806 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447139584.724:703008): pid=13806 uid=0 auid=0 ses=23137 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=13806 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447139584.724:703009): pid=13806 uid=0 auid=0 ses=23137 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=13806 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447139584.725:703010): pid=13806 uid=0 auid=0 ses=23137 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447139584.741:703011): pid=13803 uid=0 auid=0 ses=23137 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447139584.741:703012): pid=13803 uid=0 auid=0 ses=23137 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447139584.744:703013): pid=13803 uid=0 auid=0 ses=23137 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447139584.744:703014): pid=13803 uid=0 auid=0 ses=23137 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447139584.744:703015): pid=13803 uid=0 auid=0 ses=23137 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13803 suid=0 rport=43962 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447139584.744:703016): pid=13803 uid=0 auid=0 ses=23137 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=13803 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447139584.744:703017): pid=13803 uid=0 auid=0 ses=23137 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=13803 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447139584.744:703018): pid=13803 uid=0 auid=0 ses=23137 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=13803 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_DISP msg=audit(1447139668.661:703019): pid=12976 uid=0 auid=0 ses=23133 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447139668.666:703020): pid=12976 uid=0 auid=0 ses=23133 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1447139776.759:703021): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447140001.685:703022): pid=15201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447140001.685:703023): pid=15202 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447140001.685:703024): pid=15201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447140001.685:703025): pid=15202 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447140001.686:703026): pid=15202 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23138 res=1
type=LOGIN msg=audit(1447140001.686:703027): pid=15201 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23139 res=1
type=USER_START msg=audit(1447140001.700:703028): pid=15202 uid=0 auid=0 ses=23138 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447140001.700:703029): pid=15201 uid=0 auid=0 ses=23139 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447140001.700:703030): pid=15202 uid=0 auid=0 ses=23138 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447140001.700:703031): pid=15201 uid=0 auid=0 ses=23139 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447140001.709:703032): pid=15202 uid=0 auid=0 ses=23138 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447140001.710:703033): pid=15202 uid=0 auid=0 ses=23138 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447140001.720:703034): pid=15201 uid=0 auid=0 ses=23139 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447140001.721:703035): pid=15201 uid=0 auid=0 ses=23139 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447140601.734:703036): pid=17048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447140601.734:703037): pid=17048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447140601.735:703038): pid=17048 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23140 res=1
type=USER_ACCT msg=audit(1447140601.735:703039): pid=17047 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447140601.735:703040): pid=17047 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447140601.735:703041): pid=17047 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23141 res=1
type=USER_START msg=audit(1447140601.753:703042): pid=17047 uid=0 auid=0 ses=23141 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447140601.753:703043): pid=17047 uid=0 auid=0 ses=23141 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447140601.753:703044): pid=17048 uid=0 auid=0 ses=23140 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447140601.754:703045): pid=17048 uid=0 auid=0 ses=23140 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447140601.761:703046): pid=17048 uid=0 auid=0 ses=23140 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447140601.762:703047): pid=17048 uid=0 auid=0 ses=23140 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447140601.764:703048): pid=17047 uid=0 auid=0 ses=23141 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447140626.791:703049): pid=17047 uid=0 auid=0 ses=23141 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=CRYPTO_KEY_USER msg=audit(1447140783.122:703050): pid=17614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=17614 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447140783.122:703051): pid=17614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=17614 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447140783.122:703052): pid=17614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=17614 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447140783.166:703053): pid=17613 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=17614 suid=74 rport=45938 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447140783.166:703054): pid=17613 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=17614 suid=74 rport=45938 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447140783.296:703055): pid=17613 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=45938 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447140783.296:703056): pid=17613 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=45938 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447140783.305:703057): pid=17613 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447140783.307:703058): pid=17613 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=17614 suid=74 rport=45938 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447140783.309:703059): pid=17613 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447140783.310:703060): pid=17613 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447140783.310:703061): pid=17613 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23142 res=1
type=USER_ROLE_CHANGE msg=audit(1447140783.378:703062): pid=17613 uid=0 auid=0 ses=23142 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447140783.404:703063): pid=17613 uid=0 auid=0 ses=23142 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447140783.409:703064): pid=17613 uid=0 auid=0 ses=23142 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447140783.409:703065): pid=17613 uid=0 auid=0 ses=23142 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447140783.411:703066): pid=17616 uid=0 auid=0 ses=23142 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=17616 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447140783.411:703067): pid=17616 uid=0 auid=0 ses=23142 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=17616 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447140783.411:703068): pid=17616 uid=0 auid=0 ses=23142 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=17616 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447140783.412:703069): pid=17616 uid=0 auid=0 ses=23142 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447140783.431:703070): pid=17613 uid=0 auid=0 ses=23142 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447140783.431:703071): pid=17613 uid=0 auid=0 ses=23142 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447140783.436:703072): pid=17613 uid=0 auid=0 ses=23142 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447140783.437:703073): pid=17613 uid=0 auid=0 ses=23142 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447140783.437:703074): pid=17613 uid=0 auid=0 ses=23142 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=17613 suid=0 rport=45938 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447140783.437:703075): pid=17613 uid=0 auid=0 ses=23142 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=17613 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447140783.437:703076): pid=17613 uid=0 auid=0 ses=23142 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=17613 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447140783.437:703077): pid=17613 uid=0 auid=0 ses=23142 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=17613 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447140783.457:703078): pid=17624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=17624 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447140783.457:703079): pid=17624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=17624 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447140783.457:703080): pid=17624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=17624 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447140783.502:703081): pid=17623 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=17624 suid=74 rport=45939 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447140783.502:703082): pid=17623 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=17624 suid=74 rport=45939 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447140783.632:703083): pid=17623 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=45939 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447140783.632:703084): pid=17623 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=45939 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447140783.641:703085): pid=17623 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447140783.642:703086): pid=17623 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=17624 suid=74 rport=45939 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447140783.644:703087): pid=17623 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447140783.644:703088): pid=17623 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447140783.644:703089): pid=17623 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23143 res=1
type=USER_ROLE_CHANGE msg=audit(1447140783.714:703090): pid=17623 uid=0 auid=0 ses=23143 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447140783.735:703091): pid=17623 uid=0 auid=0 ses=23143 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447140783.737:703092): pid=17623 uid=0 auid=0 ses=23143 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447140783.737:703093): pid=17623 uid=0 auid=0 ses=23143 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447140783.739:703094): pid=17626 uid=0 auid=0 ses=23143 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=17626 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447140783.739:703095): pid=17626 uid=0 auid=0 ses=23143 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=17626 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447140783.739:703096): pid=17626 uid=0 auid=0 ses=23143 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=17626 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447140783.740:703097): pid=17626 uid=0 auid=0 ses=23143 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447140785.005:703098): pid=17623 uid=0 auid=0 ses=23143 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447140785.005:703099): pid=17623 uid=0 auid=0 ses=23143 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447140785.009:703100): pid=17623 uid=0 auid=0 ses=23143 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447140785.009:703101): pid=17623 uid=0 auid=0 ses=23143 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447140785.010:703102): pid=17623 uid=0 auid=0 ses=23143 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=17623 suid=0 rport=45939 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447140785.010:703103): pid=17623 uid=0 auid=0 ses=23143 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=17623 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447140785.010:703104): pid=17623 uid=0 auid=0 ses=23143 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=17623 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447140785.010:703105): pid=17623 uid=0 auid=0 ses=23143 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=17623 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447140785.046:703106): pid=17676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=17676 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447140785.046:703107): pid=17676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=17676 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447140785.046:703108): pid=17676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=17676 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447140785.090:703109): pid=17675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=17676 suid=74 rport=45943 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447140785.091:703110): pid=17675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=17676 suid=74 rport=45943 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447140785.221:703111): pid=17675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=45943 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447140785.221:703112): pid=17675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=45943 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447140785.230:703113): pid=17675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447140785.231:703114): pid=17675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=17676 suid=74 rport=45943 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447140785.232:703115): pid=17675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447140785.232:703116): pid=17675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447140785.232:703117): pid=17675 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23144 res=1
type=USER_ROLE_CHANGE msg=audit(1447140785.296:703118): pid=17675 uid=0 auid=0 ses=23144 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447140785.330:703119): pid=17675 uid=0 auid=0 ses=23144 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447140785.333:703120): pid=17675 uid=0 auid=0 ses=23144 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447140785.333:703121): pid=17675 uid=0 auid=0 ses=23144 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447140785.334:703122): pid=17678 uid=0 auid=0 ses=23144 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=17678 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447140785.335:703123): pid=17678 uid=0 auid=0 ses=23144 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=17678 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447140785.335:703124): pid=17678 uid=0 auid=0 ses=23144 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=17678 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447140785.336:703125): pid=17678 uid=0 auid=0 ses=23144 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447140785.356:703126): pid=17675 uid=0 auid=0 ses=23144 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447140785.356:703127): pid=17675 uid=0 auid=0 ses=23144 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447140785.360:703128): pid=17675 uid=0 auid=0 ses=23144 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447140785.360:703129): pid=17675 uid=0 auid=0 ses=23144 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447140785.360:703130): pid=17675 uid=0 auid=0 ses=23144 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=17675 suid=0 rport=45943 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447140785.360:703131): pid=17675 uid=0 auid=0 ses=23144 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=17675 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447140785.360:703132): pid=17675 uid=0 auid=0 ses=23144 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=17675 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447140785.361:703133): pid=17675 uid=0 auid=0 ses=23144 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=17675 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447141201.814:703134): pid=18964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447141201.814:703135): pid=18964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447141201.815:703136): pid=18964 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23145 res=1
type=USER_ACCT msg=audit(1447141201.818:703137): pid=18963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447141201.818:703138): pid=18963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447141201.819:703139): pid=18963 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23146 res=1
type=USER_START msg=audit(1447141201.834:703140): pid=18963 uid=0 auid=0 ses=23146 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447141201.834:703141): pid=18964 uid=0 auid=0 ses=23145 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447141201.835:703142): pid=18963 uid=0 auid=0 ses=23146 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447141201.835:703143): pid=18964 uid=0 auid=0 ses=23145 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447141201.845:703144): pid=18964 uid=0 auid=0 ses=23145 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447141201.846:703145): pid=18964 uid=0 auid=0 ses=23145 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447141201.850:703146): pid=18963 uid=0 auid=0 ses=23146 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447141201.853:703147): pid=18963 uid=0 auid=0 ses=23146 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447141801.871:703148): pid=20810 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447141801.871:703149): pid=20811 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447141801.871:703150): pid=20810 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447141801.871:703151): pid=20811 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447141801.871:703152): pid=20811 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23147 res=1
type=LOGIN msg=audit(1447141801.871:703153): pid=20810 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23148 res=1
type=USER_START msg=audit(1447141801.888:703154): pid=20810 uid=0 auid=0 ses=23148 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447141801.888:703155): pid=20810 uid=0 auid=0 ses=23148 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447141801.889:703156): pid=20811 uid=0 auid=0 ses=23147 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447141801.889:703157): pid=20811 uid=0 auid=0 ses=23147 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447141801.894:703158): pid=20811 uid=0 auid=0 ses=23147 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447141801.897:703159): pid=20811 uid=0 auid=0 ses=23147 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447141801.901:703160): pid=20810 uid=0 auid=0 ses=23148 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447141801.906:703161): pid=20810 uid=0 auid=0 ses=23148 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1447141868.758:703162): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=CRYPTO_KEY_USER msg=audit(1447141982.752:703163): pid=21374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=21374 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447141982.752:703164): pid=21374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=21374 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447141982.752:703165): pid=21374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=21374 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447141982.796:703166): pid=21373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=21374 suid=74 rport=47918 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447141982.796:703167): pid=21373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=21374 suid=74 rport=47918 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447141982.921:703168): pid=21373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=47918 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447141982.921:703169): pid=21373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=47918 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447141982.928:703170): pid=21373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447141982.930:703171): pid=21373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21374 suid=74 rport=47918 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447141982.931:703172): pid=21373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447141982.931:703173): pid=21373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447141982.931:703174): pid=21373 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23149 res=1
type=USER_ROLE_CHANGE msg=audit(1447141983.001:703175): pid=21373 uid=0 auid=0 ses=23149 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447141983.021:703176): pid=21373 uid=0 auid=0 ses=23149 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447141983.023:703177): pid=21373 uid=0 auid=0 ses=23149 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447141983.023:703178): pid=21373 uid=0 auid=0 ses=23149 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447141983.025:703179): pid=21376 uid=0 auid=0 ses=23149 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=21376 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447141983.025:703180): pid=21376 uid=0 auid=0 ses=23149 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=21376 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447141983.025:703181): pid=21376 uid=0 auid=0 ses=23149 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=21376 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447141983.026:703182): pid=21376 uid=0 auid=0 ses=23149 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447141983.045:703183): pid=21373 uid=0 auid=0 ses=23149 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447141983.045:703184): pid=21373 uid=0 auid=0 ses=23149 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447141983.048:703185): pid=21373 uid=0 auid=0 ses=23149 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447141983.048:703186): pid=21373 uid=0 auid=0 ses=23149 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447141983.048:703187): pid=21373 uid=0 auid=0 ses=23149 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21373 suid=0 rport=47918 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447141983.048:703188): pid=21373 uid=0 auid=0 ses=23149 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=21373 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447141983.048:703189): pid=21373 uid=0 auid=0 ses=23149 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=21373 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447141983.049:703190): pid=21373 uid=0 auid=0 ses=23149 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=21373 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447141983.071:703191): pid=21384 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=21384 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447141983.071:703192): pid=21384 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=21384 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447141983.071:703193): pid=21384 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=21384 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447141983.115:703194): pid=21383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=21384 suid=74 rport=47920 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447141983.116:703195): pid=21383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=21384 suid=74 rport=47920 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447141983.246:703196): pid=21383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=47920 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447141983.246:703197): pid=21383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=47920 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447141983.254:703198): pid=21383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447141983.255:703199): pid=21383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21384 suid=74 rport=47920 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447141983.257:703200): pid=21383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447141983.258:703201): pid=21383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447141983.258:703202): pid=21383 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23150 res=1
type=USER_ROLE_CHANGE msg=audit(1447141983.327:703203): pid=21383 uid=0 auid=0 ses=23150 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447141983.353:703204): pid=21383 uid=0 auid=0 ses=23150 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447141983.355:703205): pid=21383 uid=0 auid=0 ses=23150 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447141983.355:703206): pid=21383 uid=0 auid=0 ses=23150 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447141983.357:703207): pid=21386 uid=0 auid=0 ses=23150 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=21386 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447141983.357:703208): pid=21386 uid=0 auid=0 ses=23150 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=21386 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447141983.357:703209): pid=21386 uid=0 auid=0 ses=23150 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=21386 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447141983.358:703210): pid=21386 uid=0 auid=0 ses=23150 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447141984.632:703211): pid=21383 uid=0 auid=0 ses=23150 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447141984.632:703212): pid=21383 uid=0 auid=0 ses=23150 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447141984.637:703213): pid=21383 uid=0 auid=0 ses=23150 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447141984.637:703214): pid=21383 uid=0 auid=0 ses=23150 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447141984.638:703215): pid=21383 uid=0 auid=0 ses=23150 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21383 suid=0 rport=47920 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447141984.638:703216): pid=21383 uid=0 auid=0 ses=23150 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=21383 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447141984.638:703217): pid=21383 uid=0 auid=0 ses=23150 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=21383 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447141984.638:703218): pid=21383 uid=0 auid=0 ses=23150 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=21383 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447141984.675:703219): pid=21436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=21436 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447141984.675:703220): pid=21436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=21436 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447141984.675:703221): pid=21436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=21436 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447141984.719:703222): pid=21435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=21436 suid=74 rport=47924 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447141984.719:703223): pid=21435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=21436 suid=74 rport=47924 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447141984.839:703224): pid=21435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=47924 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447141984.839:703225): pid=21435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=47924 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447141984.845:703226): pid=21435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447141984.846:703227): pid=21435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21436 suid=74 rport=47924 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447141984.847:703228): pid=21435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447141984.848:703229): pid=21435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447141984.848:703230): pid=21435 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23151 res=1
type=USER_ROLE_CHANGE msg=audit(1447141984.914:703231): pid=21435 uid=0 auid=0 ses=23151 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447141984.937:703232): pid=21435 uid=0 auid=0 ses=23151 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447141984.939:703233): pid=21435 uid=0 auid=0 ses=23151 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447141984.939:703234): pid=21435 uid=0 auid=0 ses=23151 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447141984.941:703235): pid=21438 uid=0 auid=0 ses=23151 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=21438 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447141984.941:703236): pid=21438 uid=0 auid=0 ses=23151 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=21438 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447141984.941:703237): pid=21438 uid=0 auid=0 ses=23151 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=21438 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447141984.942:703238): pid=21438 uid=0 auid=0 ses=23151 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447141984.959:703239): pid=21435 uid=0 auid=0 ses=23151 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447141984.959:703240): pid=21435 uid=0 auid=0 ses=23151 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447141984.962:703241): pid=21435 uid=0 auid=0 ses=23151 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447141984.963:703242): pid=21435 uid=0 auid=0 ses=23151 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447141984.963:703243): pid=21435 uid=0 auid=0 ses=23151 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21435 suid=0 rport=47924 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447141984.964:703244): pid=21435 uid=0 auid=0 ses=23151 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=21435 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447141984.964:703245): pid=21435 uid=0 auid=0 ses=23151 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=21435 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447141984.964:703246): pid=21435 uid=0 auid=0 ses=23151 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=21435 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447142401.926:703247): pid=22727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447142401.926:703248): pid=22726 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447142401.926:703249): pid=22726 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447142401.926:703250): pid=22727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447142401.928:703251): pid=22727 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23152 res=1
type=LOGIN msg=audit(1447142401.928:703252): pid=22726 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23153 res=1
type=USER_START msg=audit(1447142401.946:703253): pid=22727 uid=0 auid=0 ses=23152 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447142401.946:703254): pid=22727 uid=0 auid=0 ses=23152 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447142401.949:703255): pid=22726 uid=0 auid=0 ses=23153 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447142401.949:703256): pid=22726 uid=0 auid=0 ses=23153 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447142401.955:703257): pid=22727 uid=0 auid=0 ses=23152 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447142401.959:703258): pid=22727 uid=0 auid=0 ses=23152 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447142401.969:703259): pid=22726 uid=0 auid=0 ses=23153 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447142401.970:703260): pid=22726 uid=0 auid=0 ses=23153 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447142461.980:703261): pid=22962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447142461.980:703262): pid=22962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447142461.982:703263): pid=22962 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23154 res=1
type=USER_START msg=audit(1447142461.994:703264): pid=22962 uid=0 auid=0 ses=23154 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447142461.994:703265): pid=22962 uid=0 auid=0 ses=23154 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447142462.020:703266): pid=22962 uid=0 auid=0 ses=23154 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447142462.022:703267): pid=22962 uid=0 auid=0 ses=23154 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1447142943.677:703268): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447143001.031:703269): pid=24631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447143001.031:703270): pid=24631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447143001.032:703271): pid=24632 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447143001.032:703272): pid=24632 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447143001.032:703273): pid=24631 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23155 res=1
type=LOGIN msg=audit(1447143001.032:703274): pid=24632 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23156 res=1
type=USER_START msg=audit(1447143001.048:703275): pid=24632 uid=0 auid=0 ses=23156 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447143001.048:703276): pid=24632 uid=0 auid=0 ses=23156 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447143001.048:703277): pid=24631 uid=0 auid=0 ses=23155 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447143001.049:703278): pid=24631 uid=0 auid=0 ses=23155 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447143001.057:703279): pid=24632 uid=0 auid=0 ses=23156 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447143001.058:703280): pid=24632 uid=0 auid=0 ses=23156 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447143001.059:703281): pid=24631 uid=0 auid=0 ses=23155 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447143026.087:703282): pid=24631 uid=0 auid=0 ses=23155 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=CRYPTO_KEY_USER msg=audit(1447143183.247:703283): pid=25202 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=25202 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447143183.248:703284): pid=25202 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=25202 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447143183.248:703285): pid=25202 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=25202 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447143183.292:703286): pid=25201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=25202 suid=74 rport=49900 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447143183.292:703287): pid=25201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=25202 suid=74 rport=49900 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447143183.422:703288): pid=25201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=49900 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447143183.422:703289): pid=25201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=49900 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447143183.430:703290): pid=25201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447143183.432:703291): pid=25201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25202 suid=74 rport=49900 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447143183.434:703292): pid=25201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447143183.435:703293): pid=25201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447143183.435:703294): pid=25201 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23157 res=1
type=USER_ROLE_CHANGE msg=audit(1447143183.505:703295): pid=25201 uid=0 auid=0 ses=23157 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447143183.525:703296): pid=25201 uid=0 auid=0 ses=23157 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447143183.528:703297): pid=25201 uid=0 auid=0 ses=23157 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447143183.528:703298): pid=25201 uid=0 auid=0 ses=23157 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447143183.529:703299): pid=25204 uid=0 auid=0 ses=23157 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=25204 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447143183.529:703300): pid=25204 uid=0 auid=0 ses=23157 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=25204 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447143183.529:703301): pid=25204 uid=0 auid=0 ses=23157 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=25204 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447143183.530:703302): pid=25204 uid=0 auid=0 ses=23157 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447143183.549:703303): pid=25201 uid=0 auid=0 ses=23157 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447143183.549:703304): pid=25201 uid=0 auid=0 ses=23157 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447143183.552:703305): pid=25201 uid=0 auid=0 ses=23157 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447143183.552:703306): pid=25201 uid=0 auid=0 ses=23157 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447143183.553:703307): pid=25201 uid=0 auid=0 ses=23157 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25201 suid=0 rport=49900 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447143183.553:703308): pid=25201 uid=0 auid=0 ses=23157 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=25201 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447143183.553:703309): pid=25201 uid=0 auid=0 ses=23157 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=25201 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447143183.553:703310): pid=25201 uid=0 auid=0 ses=23157 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=25201 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447143183.576:703311): pid=25212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=25212 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447143183.576:703312): pid=25212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=25212 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447143183.576:703313): pid=25212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=25212 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447143183.620:703314): pid=25211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=25212 suid=74 rport=49901 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447143183.620:703315): pid=25211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=25212 suid=74 rport=49901 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447143183.749:703316): pid=25211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=49901 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447143183.749:703317): pid=25211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=49901 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447143183.757:703318): pid=25211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447143183.758:703319): pid=25211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25212 suid=74 rport=49901 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447143183.761:703320): pid=25211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447143183.762:703321): pid=25211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447143183.762:703322): pid=25211 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23158 res=1
type=USER_ROLE_CHANGE msg=audit(1447143183.833:703323): pid=25211 uid=0 auid=0 ses=23158 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447143183.857:703324): pid=25211 uid=0 auid=0 ses=23158 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447143183.861:703325): pid=25211 uid=0 auid=0 ses=23158 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447143183.861:703326): pid=25211 uid=0 auid=0 ses=23158 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447143183.863:703327): pid=25214 uid=0 auid=0 ses=23158 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=25214 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447143183.863:703328): pid=25214 uid=0 auid=0 ses=23158 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=25214 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447143183.863:703329): pid=25214 uid=0 auid=0 ses=23158 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=25214 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447143183.863:703330): pid=25214 uid=0 auid=0 ses=23158 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447143185.123:703331): pid=25211 uid=0 auid=0 ses=23158 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447143185.123:703332): pid=25211 uid=0 auid=0 ses=23158 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447143185.128:703333): pid=25211 uid=0 auid=0 ses=23158 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447143185.128:703334): pid=25211 uid=0 auid=0 ses=23158 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447143185.128:703335): pid=25211 uid=0 auid=0 ses=23158 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25211 suid=0 rport=49901 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447143185.128:703336): pid=25211 uid=0 auid=0 ses=23158 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=25211 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447143185.128:703337): pid=25211 uid=0 auid=0 ses=23158 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=25211 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447143185.128:703338): pid=25211 uid=0 auid=0 ses=23158 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=25211 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447143185.162:703339): pid=25264 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=25264 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447143185.163:703340): pid=25264 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=25264 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447143185.163:703341): pid=25264 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=25264 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447143185.208:703342): pid=25263 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=25264 suid=74 rport=49905 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447143185.208:703343): pid=25263 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=25264 suid=74 rport=49905 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447143185.338:703344): pid=25263 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=49905 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447143185.338:703345): pid=25263 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=49905 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447143185.346:703346): pid=25263 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447143185.347:703347): pid=25263 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25264 suid=74 rport=49905 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447143185.349:703348): pid=25263 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447143185.349:703349): pid=25263 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447143185.349:703350): pid=25263 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23159 res=1
type=USER_ROLE_CHANGE msg=audit(1447143185.414:703351): pid=25263 uid=0 auid=0 ses=23159 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447143185.438:703352): pid=25263 uid=0 auid=0 ses=23159 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447143185.441:703353): pid=25263 uid=0 auid=0 ses=23159 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447143185.441:703354): pid=25263 uid=0 auid=0 ses=23159 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447143185.442:703355): pid=25266 uid=0 auid=0 ses=23159 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=25266 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447143185.442:703356): pid=25266 uid=0 auid=0 ses=23159 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=25266 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447143185.442:703357): pid=25266 uid=0 auid=0 ses=23159 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=25266 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447143185.443:703358): pid=25266 uid=0 auid=0 ses=23159 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447143185.459:703359): pid=25263 uid=0 auid=0 ses=23159 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447143185.459:703360): pid=25263 uid=0 auid=0 ses=23159 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447143185.463:703361): pid=25263 uid=0 auid=0 ses=23159 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447143185.463:703362): pid=25263 uid=0 auid=0 ses=23159 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447143185.463:703363): pid=25263 uid=0 auid=0 ses=23159 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25263 suid=0 rport=49905 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447143185.463:703364): pid=25263 uid=0 auid=0 ses=23159 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=25263 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447143185.463:703365): pid=25263 uid=0 auid=0 ses=23159 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=25263 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447143185.463:703366): pid=25263 uid=0 auid=0 ses=23159 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=25263 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447143601.109:703367): pid=26553 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447143601.109:703368): pid=26554 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447143601.109:703369): pid=26553 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447143601.109:703370): pid=26554 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447143601.111:703371): pid=26554 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23160 res=1
type=LOGIN msg=audit(1447143601.111:703372): pid=26553 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23161 res=1
type=USER_START msg=audit(1447143601.131:703373): pid=26553 uid=0 auid=0 ses=23161 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447143601.131:703374): pid=26554 uid=0 auid=0 ses=23160 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447143601.131:703375): pid=26553 uid=0 auid=0 ses=23161 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447143601.131:703376): pid=26554 uid=0 auid=0 ses=23160 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447143601.139:703377): pid=26554 uid=0 auid=0 ses=23160 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447143601.145:703378): pid=26554 uid=0 auid=0 ses=23160 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447143601.148:703379): pid=26553 uid=0 auid=0 ses=23161 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447143601.150:703380): pid=26553 uid=0 auid=0 ses=23161 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1447143992.756:703381): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447144201.170:703382): pid=28388 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447144201.170:703383): pid=28389 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447144201.170:703384): pid=28388 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447144201.170:703385): pid=28389 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447144201.171:703386): pid=28389 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23162 res=1
type=LOGIN msg=audit(1447144201.171:703387): pid=28388 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23163 res=1
type=USER_START msg=audit(1447144201.188:703388): pid=28389 uid=0 auid=0 ses=23162 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447144201.188:703389): pid=28389 uid=0 auid=0 ses=23162 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447144201.189:703390): pid=28388 uid=0 auid=0 ses=23163 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447144201.189:703391): pid=28388 uid=0 auid=0 ses=23163 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447144201.195:703392): pid=28389 uid=0 auid=0 ses=23162 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447144201.197:703393): pid=28389 uid=0 auid=0 ses=23162 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447144201.202:703394): pid=28388 uid=0 auid=0 ses=23163 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447144201.203:703395): pid=28388 uid=0 auid=0 ses=23163 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447144383.111:703396): pid=28964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=28964 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447144383.111:703397): pid=28964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=28964 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447144383.111:703398): pid=28964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=28964 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447144383.155:703399): pid=28963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=28964 suid=74 rport=51879 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447144383.156:703400): pid=28963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=28964 suid=74 rport=51879 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447144383.283:703401): pid=28963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=51879 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447144383.283:703402): pid=28963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=51879 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447144383.292:703403): pid=28963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447144383.293:703404): pid=28963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=28964 suid=74 rport=51879 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447144383.295:703405): pid=28963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447144383.296:703406): pid=28963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447144383.296:703407): pid=28963 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23164 res=1
type=USER_ROLE_CHANGE msg=audit(1447144383.362:703408): pid=28963 uid=0 auid=0 ses=23164 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447144383.386:703409): pid=28963 uid=0 auid=0 ses=23164 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447144383.389:703410): pid=28963 uid=0 auid=0 ses=23164 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447144383.389:703411): pid=28963 uid=0 auid=0 ses=23164 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447144383.390:703412): pid=28966 uid=0 auid=0 ses=23164 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=28966 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447144383.391:703413): pid=28966 uid=0 auid=0 ses=23164 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=28966 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447144383.391:703414): pid=28966 uid=0 auid=0 ses=23164 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=28966 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447144383.391:703415): pid=28966 uid=0 auid=0 ses=23164 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447144383.411:703416): pid=28963 uid=0 auid=0 ses=23164 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447144383.412:703417): pid=28963 uid=0 auid=0 ses=23164 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447144383.414:703418): pid=28963 uid=0 auid=0 ses=23164 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447144383.414:703419): pid=28963 uid=0 auid=0 ses=23164 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447144383.415:703420): pid=28963 uid=0 auid=0 ses=23164 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=28963 suid=0 rport=51879 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447144383.415:703421): pid=28963 uid=0 auid=0 ses=23164 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=28963 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447144383.415:703422): pid=28963 uid=0 auid=0 ses=23164 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=28963 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447144383.415:703423): pid=28963 uid=0 auid=0 ses=23164 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=28963 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447144383.442:703424): pid=28974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=28974 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447144383.442:703425): pid=28974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=28974 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447144383.442:703426): pid=28974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=28974 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447144383.486:703427): pid=28973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=28974 suid=74 rport=51880 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447144383.487:703428): pid=28973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=28974 suid=74 rport=51880 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447144383.617:703429): pid=28973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=51880 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447144383.617:703430): pid=28973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=51880 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447144383.626:703431): pid=28973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447144383.627:703432): pid=28973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=28974 suid=74 rport=51880 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447144383.628:703433): pid=28973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447144383.628:703434): pid=28973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447144383.628:703435): pid=28973 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23165 res=1
type=USER_ROLE_CHANGE msg=audit(1447144383.692:703436): pid=28973 uid=0 auid=0 ses=23165 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447144383.722:703437): pid=28973 uid=0 auid=0 ses=23165 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447144383.726:703438): pid=28973 uid=0 auid=0 ses=23165 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447144383.726:703439): pid=28973 uid=0 auid=0 ses=23165 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447144383.728:703440): pid=28976 uid=0 auid=0 ses=23165 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=28976 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447144383.728:703441): pid=28976 uid=0 auid=0 ses=23165 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=28976 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447144383.728:703442): pid=28976 uid=0 auid=0 ses=23165 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=28976 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447144383.730:703443): pid=28976 uid=0 auid=0 ses=23165 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447144385.019:703444): pid=28973 uid=0 auid=0 ses=23165 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447144385.019:703445): pid=28973 uid=0 auid=0 ses=23165 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447144385.023:703446): pid=28973 uid=0 auid=0 ses=23165 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447144385.023:703447): pid=28973 uid=0 auid=0 ses=23165 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447144385.024:703448): pid=28973 uid=0 auid=0 ses=23165 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=28973 suid=0 rport=51880 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447144385.024:703449): pid=28973 uid=0 auid=0 ses=23165 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=28973 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447144385.025:703450): pid=28973 uid=0 auid=0 ses=23165 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=28973 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447144385.025:703451): pid=28973 uid=0 auid=0 ses=23165 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=28973 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447144385.057:703452): pid=29026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=29026 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447144385.058:703453): pid=29026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=29026 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447144385.058:703454): pid=29026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=29026 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447144385.101:703455): pid=29025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=29026 suid=74 rport=51882 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447144385.102:703456): pid=29025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=29026 suid=74 rport=51882 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447144385.228:703457): pid=29025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=51882 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447144385.228:703458): pid=29025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=51882 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447144385.237:703459): pid=29025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447144385.238:703460): pid=29025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29026 suid=74 rport=51882 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447144385.239:703461): pid=29025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447144385.240:703462): pid=29025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447144385.240:703463): pid=29025 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23166 res=1
type=USER_ROLE_CHANGE msg=audit(1447144385.307:703464): pid=29025 uid=0 auid=0 ses=23166 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447144385.334:703465): pid=29025 uid=0 auid=0 ses=23166 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447144385.337:703466): pid=29025 uid=0 auid=0 ses=23166 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447144385.337:703467): pid=29025 uid=0 auid=0 ses=23166 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447144385.339:703468): pid=29028 uid=0 auid=0 ses=23166 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=29028 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447144385.339:703469): pid=29028 uid=0 auid=0 ses=23166 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=29028 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447144385.339:703470): pid=29028 uid=0 auid=0 ses=23166 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=29028 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447144385.339:703471): pid=29028 uid=0 auid=0 ses=23166 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447144385.355:703472): pid=29025 uid=0 auid=0 ses=23166 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447144385.355:703473): pid=29025 uid=0 auid=0 ses=23166 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447144385.358:703474): pid=29025 uid=0 auid=0 ses=23166 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447144385.358:703475): pid=29025 uid=0 auid=0 ses=23166 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447144385.359:703476): pid=29025 uid=0 auid=0 ses=23166 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29025 suid=0 rport=51882 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447144385.359:703477): pid=29025 uid=0 auid=0 ses=23166 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=29025 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447144385.359:703478): pid=29025 uid=0 auid=0 ses=23166 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=29025 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447144385.359:703479): pid=29025 uid=0 auid=0 ses=23166 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=29025 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447144801.222:703480): pid=30252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447144801.222:703481): pid=30252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447144801.222:703482): pid=30251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447144801.222:703483): pid=30251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447144801.223:703484): pid=30252 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23167 res=1
type=LOGIN msg=audit(1447144801.223:703485): pid=30251 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23168 res=1
type=USER_START msg=audit(1447144801.243:703486): pid=30251 uid=0 auid=0 ses=23168 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447144801.243:703487): pid=30252 uid=0 auid=0 ses=23167 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447144801.244:703488): pid=30252 uid=0 auid=0 ses=23167 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447144801.244:703489): pid=30251 uid=0 auid=0 ses=23168 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447144801.255:703490): pid=30252 uid=0 auid=0 ses=23167 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447144801.256:703491): pid=30252 uid=0 auid=0 ses=23167 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447144801.267:703492): pid=30251 uid=0 auid=0 ses=23168 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447144801.269:703493): pid=30251 uid=0 auid=0 ses=23168 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1447145061.665:703494): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447145401.279:703495): pid=32099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447145401.279:703496): pid=32098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447145401.279:703497): pid=32099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447145401.279:703498): pid=32098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447145401.280:703499): pid=32099 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23169 res=1
type=LOGIN msg=audit(1447145401.280:703500): pid=32098 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23170 res=1
type=USER_START msg=audit(1447145401.295:703501): pid=32099 uid=0 auid=0 ses=23169 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447145401.295:703502): pid=32099 uid=0 auid=0 ses=23169 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447145401.296:703503): pid=32098 uid=0 auid=0 ses=23170 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447145401.297:703504): pid=32098 uid=0 auid=0 ses=23170 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447145401.304:703505): pid=32099 uid=0 auid=0 ses=23169 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447145401.305:703506): pid=32099 uid=0 auid=0 ses=23169 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447145401.308:703507): pid=32098 uid=0 auid=0 ses=23170 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447145401.312:703508): pid=32098 uid=0 auid=0 ses=23170 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447145582.885:703509): pid=32662 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=32662 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447145582.885:703510): pid=32662 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=32662 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447145582.885:703511): pid=32662 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=32662 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447145582.931:703512): pid=32661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=32662 suid=74 rport=53860 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447145582.931:703513): pid=32661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=32662 suid=74 rport=53860 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447145583.058:703514): pid=32661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=53860 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447145583.058:703515): pid=32661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=53860 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447145583.064:703516): pid=32661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447145583.065:703517): pid=32661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=32662 suid=74 rport=53860 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447145583.065:703518): pid=32661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447145583.066:703519): pid=32661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447145583.066:703520): pid=32661 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23171 res=1
type=USER_ROLE_CHANGE msg=audit(1447145583.136:703521): pid=32661 uid=0 auid=0 ses=23171 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447145583.156:703522): pid=32661 uid=0 auid=0 ses=23171 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447145583.158:703523): pid=32661 uid=0 auid=0 ses=23171 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447145583.158:703524): pid=32661 uid=0 auid=0 ses=23171 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447145583.159:703525): pid=32664 uid=0 auid=0 ses=23171 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=32664 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447145583.159:703526): pid=32664 uid=0 auid=0 ses=23171 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=32664 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447145583.159:703527): pid=32664 uid=0 auid=0 ses=23171 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=32664 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447145583.160:703528): pid=32664 uid=0 auid=0 ses=23171 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447145583.177:703529): pid=32661 uid=0 auid=0 ses=23171 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447145583.177:703530): pid=32661 uid=0 auid=0 ses=23171 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447145583.182:703531): pid=32661 uid=0 auid=0 ses=23171 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447145583.182:703532): pid=32661 uid=0 auid=0 ses=23171 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447145583.182:703533): pid=32661 uid=0 auid=0 ses=23171 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=32661 suid=0 rport=53860 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447145583.182:703534): pid=32661 uid=0 auid=0 ses=23171 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=32661 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447145583.183:703535): pid=32661 uid=0 auid=0 ses=23171 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=32661 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447145583.183:703536): pid=32661 uid=0 auid=0 ses=23171 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=32661 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447145583.205:703537): pid=32672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=32672 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447145583.206:703538): pid=32672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=32672 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447145583.206:703539): pid=32672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=32672 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447145583.250:703540): pid=32671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=32672 suid=74 rport=53861 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447145583.250:703541): pid=32671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=32672 suid=74 rport=53861 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447145583.379:703542): pid=32671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=53861 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447145583.379:703543): pid=32671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=53861 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447145583.387:703544): pid=32671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447145583.388:703545): pid=32671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=32672 suid=74 rport=53861 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447145583.390:703546): pid=32671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447145583.390:703547): pid=32671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447145583.390:703548): pid=32671 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23172 res=1
type=USER_ROLE_CHANGE msg=audit(1447145583.456:703549): pid=32671 uid=0 auid=0 ses=23172 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447145583.480:703550): pid=32671 uid=0 auid=0 ses=23172 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447145583.483:703551): pid=32671 uid=0 auid=0 ses=23172 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447145583.483:703552): pid=32671 uid=0 auid=0 ses=23172 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447145583.485:703553): pid=32674 uid=0 auid=0 ses=23172 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=32674 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447145583.485:703554): pid=32674 uid=0 auid=0 ses=23172 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=32674 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447145583.485:703555): pid=32674 uid=0 auid=0 ses=23172 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=32674 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447145583.486:703556): pid=32674 uid=0 auid=0 ses=23172 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447145584.764:703557): pid=32671 uid=0 auid=0 ses=23172 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447145584.764:703558): pid=32671 uid=0 auid=0 ses=23172 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447145584.768:703559): pid=32671 uid=0 auid=0 ses=23172 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447145584.768:703560): pid=32671 uid=0 auid=0 ses=23172 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447145584.768:703561): pid=32671 uid=0 auid=0 ses=23172 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=32671 suid=0 rport=53861 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447145584.769:703562): pid=32671 uid=0 auid=0 ses=23172 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=32671 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447145584.769:703563): pid=32671 uid=0 auid=0 ses=23172 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=32671 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447145584.769:703564): pid=32671 uid=0 auid=0 ses=23172 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=32671 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447145584.801:703565): pid=32724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=32724 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447145584.801:703566): pid=32724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=32724 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447145584.801:703567): pid=32724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=32724 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447145584.846:703568): pid=32723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=32724 suid=74 rport=53863 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447145584.846:703569): pid=32723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=32724 suid=74 rport=53863 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447145584.969:703570): pid=32723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=53863 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447145584.970:703571): pid=32723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=53863 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447145584.976:703572): pid=32723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447145584.978:703573): pid=32723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=32724 suid=74 rport=53863 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447145584.978:703574): pid=32723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447145584.979:703575): pid=32723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447145584.979:703576): pid=32723 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23173 res=1
type=USER_ROLE_CHANGE msg=audit(1447145585.052:703577): pid=32723 uid=0 auid=0 ses=23173 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447145585.071:703578): pid=32723 uid=0 auid=0 ses=23173 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447145585.073:703579): pid=32723 uid=0 auid=0 ses=23173 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447145585.074:703580): pid=32723 uid=0 auid=0 ses=23173 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447145585.075:703581): pid=32726 uid=0 auid=0 ses=23173 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=32726 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447145585.075:703582): pid=32726 uid=0 auid=0 ses=23173 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=32726 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447145585.075:703583): pid=32726 uid=0 auid=0 ses=23173 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=32726 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447145585.076:703584): pid=32726 uid=0 auid=0 ses=23173 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447145585.095:703585): pid=32723 uid=0 auid=0 ses=23173 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447145585.095:703586): pid=32723 uid=0 auid=0 ses=23173 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447145585.098:703587): pid=32723 uid=0 auid=0 ses=23173 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447145585.098:703588): pid=32723 uid=0 auid=0 ses=23173 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447145585.099:703589): pid=32723 uid=0 auid=0 ses=23173 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=32723 suid=0 rport=53863 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447145585.099:703590): pid=32723 uid=0 auid=0 ses=23173 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=32723 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447145585.099:703591): pid=32723 uid=0 auid=0 ses=23173 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=32723 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447145585.099:703592): pid=32723 uid=0 auid=0 ses=23173 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=32723 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447146001.332:703593): pid=1670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447146001.332:703594): pid=1670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447146001.333:703595): pid=1670 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23174 res=1
type=USER_ACCT msg=audit(1447146001.335:703596): pid=1669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447146001.335:703597): pid=1669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447146001.336:703598): pid=1669 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23175 res=1
type=USER_START msg=audit(1447146001.352:703599): pid=1669 uid=0 auid=0 ses=23175 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447146001.352:703600): pid=1670 uid=0 auid=0 ses=23174 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447146001.352:703601): pid=1669 uid=0 auid=0 ses=23175 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447146001.352:703602): pid=1670 uid=0 auid=0 ses=23174 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447146001.360:703603): pid=1670 uid=0 auid=0 ses=23174 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447146001.363:703604): pid=1670 uid=0 auid=0 ses=23174 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447146001.372:703605): pid=1669 uid=0 auid=0 ses=23175 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447146001.374:703606): pid=1669 uid=0 auid=0 ses=23175 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447146061.387:703607): pid=1906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447146061.387:703608): pid=1906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447146061.389:703609): pid=1906 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23176 res=1
type=USER_START msg=audit(1447146061.402:703610): pid=1906 uid=0 auid=0 ses=23176 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447146061.402:703611): pid=1906 uid=0 auid=0 ses=23176 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447146061.426:703612): pid=1906 uid=0 auid=0 ses=23176 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447146061.428:703613): pid=1906 uid=0 auid=0 ses=23176 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1447146127.758:703614): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447146601.447:703615): pid=3573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447146601.447:703616): pid=3574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447146601.447:703617): pid=3573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447146601.447:703618): pid=3574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447146601.447:703619): pid=3573 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23177 res=1
type=LOGIN msg=audit(1447146601.448:703620): pid=3574 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23178 res=1
type=USER_START msg=audit(1447146601.462:703621): pid=3574 uid=0 auid=0 ses=23178 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447146601.462:703622): pid=3574 uid=0 auid=0 ses=23178 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447146601.463:703623): pid=3573 uid=0 auid=0 ses=23177 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447146601.463:703624): pid=3573 uid=0 auid=0 ses=23177 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447146601.470:703625): pid=3574 uid=0 auid=0 ses=23178 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447146601.473:703626): pid=3574 uid=0 auid=0 ses=23178 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447146601.475:703627): pid=3573 uid=0 auid=0 ses=23177 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447146626.503:703628): pid=3573 uid=0 auid=0 ses=23177 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=CRYPTO_KEY_USER msg=audit(1447146783.395:703629): pid=4143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=4143 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447146783.395:703630): pid=4143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=4143 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447146783.395:703631): pid=4143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=4143 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447146783.438:703632): pid=4142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=4143 suid=74 rport=55841 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447146783.439:703633): pid=4142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=4143 suid=74 rport=55841 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447146783.569:703634): pid=4142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=55841 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447146783.569:703635): pid=4142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=55841 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447146783.576:703636): pid=4142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447146783.577:703637): pid=4142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4143 suid=74 rport=55841 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447146783.579:703638): pid=4142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447146783.579:703639): pid=4142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447146783.580:703640): pid=4142 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23179 res=1
type=USER_ROLE_CHANGE msg=audit(1447146783.647:703641): pid=4142 uid=0 auid=0 ses=23179 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447146783.668:703642): pid=4142 uid=0 auid=0 ses=23179 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447146783.670:703643): pid=4142 uid=0 auid=0 ses=23179 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447146783.670:703644): pid=4142 uid=0 auid=0 ses=23179 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447146783.672:703645): pid=4145 uid=0 auid=0 ses=23179 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=4145 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447146783.672:703646): pid=4145 uid=0 auid=0 ses=23179 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=4145 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447146783.672:703647): pid=4145 uid=0 auid=0 ses=23179 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=4145 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447146783.673:703648): pid=4145 uid=0 auid=0 ses=23179 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447146783.694:703649): pid=4142 uid=0 auid=0 ses=23179 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447146783.694:703650): pid=4142 uid=0 auid=0 ses=23179 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447146783.700:703651): pid=4142 uid=0 auid=0 ses=23179 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447146783.700:703652): pid=4142 uid=0 auid=0 ses=23179 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447146783.700:703653): pid=4142 uid=0 auid=0 ses=23179 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4142 suid=0 rport=55841 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447146783.701:703654): pid=4142 uid=0 auid=0 ses=23179 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=4142 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447146783.701:703655): pid=4142 uid=0 auid=0 ses=23179 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=4142 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447146783.701:703656): pid=4142 uid=0 auid=0 ses=23179 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=4142 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447146783.719:703657): pid=4153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=4153 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447146783.719:703658): pid=4153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=4153 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447146783.720:703659): pid=4153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=4153 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447146783.765:703660): pid=4152 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=4153 suid=74 rport=55842 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447146783.765:703661): pid=4152 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=4153 suid=74 rport=55842 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447146783.895:703662): pid=4152 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=55842 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447146783.895:703663): pid=4152 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=55842 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447146783.902:703664): pid=4152 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447146783.903:703665): pid=4152 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4153 suid=74 rport=55842 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447146783.906:703666): pid=4152 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447146783.907:703667): pid=4152 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447146783.907:703668): pid=4152 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23180 res=1
type=USER_ROLE_CHANGE msg=audit(1447146783.970:703669): pid=4152 uid=0 auid=0 ses=23180 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447146783.998:703670): pid=4152 uid=0 auid=0 ses=23180 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447146784.002:703671): pid=4152 uid=0 auid=0 ses=23180 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447146784.002:703672): pid=4152 uid=0 auid=0 ses=23180 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447146784.004:703673): pid=4155 uid=0 auid=0 ses=23180 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=4155 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447146784.004:703674): pid=4155 uid=0 auid=0 ses=23180 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=4155 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447146784.004:703675): pid=4155 uid=0 auid=0 ses=23180 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=4155 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447146784.004:703676): pid=4155 uid=0 auid=0 ses=23180 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447146785.282:703677): pid=4152 uid=0 auid=0 ses=23180 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447146785.282:703678): pid=4152 uid=0 auid=0 ses=23180 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447146785.286:703679): pid=4152 uid=0 auid=0 ses=23180 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447146785.286:703680): pid=4152 uid=0 auid=0 ses=23180 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447146785.287:703681): pid=4152 uid=0 auid=0 ses=23180 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4152 suid=0 rport=55842 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447146785.287:703682): pid=4152 uid=0 auid=0 ses=23180 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=4152 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447146785.287:703683): pid=4152 uid=0 auid=0 ses=23180 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=4152 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447146785.287:703684): pid=4152 uid=0 auid=0 ses=23180 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=4152 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447146785.320:703685): pid=4205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=4205 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447146785.321:703686): pid=4205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=4205 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447146785.321:703687): pid=4205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=4205 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447146785.366:703688): pid=4204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=4205 suid=74 rport=55844 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447146785.366:703689): pid=4204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=4205 suid=74 rport=55844 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447146785.487:703690): pid=4204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=55844 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447146785.487:703691): pid=4204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=55844 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447146785.493:703692): pid=4204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447146785.494:703693): pid=4204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4205 suid=74 rport=55844 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447146785.495:703694): pid=4204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447146785.496:703695): pid=4204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447146785.496:703696): pid=4204 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23181 res=1
type=USER_ROLE_CHANGE msg=audit(1447146785.561:703697): pid=4204 uid=0 auid=0 ses=23181 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447146785.583:703698): pid=4204 uid=0 auid=0 ses=23181 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447146785.586:703699): pid=4204 uid=0 auid=0 ses=23181 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447146785.586:703700): pid=4204 uid=0 auid=0 ses=23181 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447146785.587:703701): pid=4207 uid=0 auid=0 ses=23181 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=4207 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447146785.587:703702): pid=4207 uid=0 auid=0 ses=23181 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=4207 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447146785.587:703703): pid=4207 uid=0 auid=0 ses=23181 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=4207 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447146785.589:703704): pid=4207 uid=0 auid=0 ses=23181 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447146785.604:703705): pid=4204 uid=0 auid=0 ses=23181 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447146785.604:703706): pid=4204 uid=0 auid=0 ses=23181 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447146785.607:703707): pid=4204 uid=0 auid=0 ses=23181 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447146785.608:703708): pid=4204 uid=0 auid=0 ses=23181 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447146785.608:703709): pid=4204 uid=0 auid=0 ses=23181 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4204 suid=0 rport=55844 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447146785.608:703710): pid=4204 uid=0 auid=0 ses=23181 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=4204 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447146785.609:703711): pid=4204 uid=0 auid=0 ses=23181 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=4204 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447146785.609:703712): pid=4204 uid=0 auid=0 ses=23181 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=4204 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447147201.530:703713): pid=5496 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447147201.529:703714): pid=5495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447147201.530:703715): pid=5495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447147201.530:703716): pid=5496 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447147201.531:703717): pid=5495 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23182 res=1
type=LOGIN msg=audit(1447147201.531:703718): pid=5496 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23183 res=1
type=USER_START msg=audit(1447147201.547:703719): pid=5496 uid=0 auid=0 ses=23183 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447147201.548:703720): pid=5496 uid=0 auid=0 ses=23183 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447147201.549:703721): pid=5495 uid=0 auid=0 ses=23182 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447147201.549:703722): pid=5495 uid=0 auid=0 ses=23182 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447147201.556:703723): pid=5496 uid=0 auid=0 ses=23183 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447147201.561:703724): pid=5496 uid=0 auid=0 ses=23183 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447147201.566:703725): pid=5495 uid=0 auid=0 ses=23182 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447147226.593:703726): pid=5495 uid=0 auid=0 ses=23182 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=USER_ACCT msg=audit(1447147801.606:703727): pid=7341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447147801.606:703728): pid=7340 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447147801.606:703729): pid=7341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447147801.606:703730): pid=7340 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447147801.607:703731): pid=7341 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23184 res=1
type=LOGIN msg=audit(1447147801.607:703732): pid=7340 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23185 res=1
type=USER_START msg=audit(1447147801.623:703733): pid=7341 uid=0 auid=0 ses=23184 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447147801.624:703734): pid=7341 uid=0 auid=0 ses=23184 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447147801.625:703735): pid=7340 uid=0 auid=0 ses=23185 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447147801.625:703736): pid=7340 uid=0 auid=0 ses=23185 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447147801.632:703737): pid=7341 uid=0 auid=0 ses=23184 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447147801.635:703738): pid=7341 uid=0 auid=0 ses=23184 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447147801.640:703739): pid=7340 uid=0 auid=0 ses=23185 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447147801.645:703740): pid=7340 uid=0 auid=0 ses=23185 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447147982.722:703741): pid=7907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=7907 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447147982.722:703742): pid=7907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=7907 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447147982.722:703743): pid=7907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=7907 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447147982.743:703744): pid=7906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=7907 suid=74 rport=57822 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447147982.743:703745): pid=7906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=7907 suid=74 rport=57822 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447147982.856:703746): pid=7906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=57822 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447147982.856:703747): pid=7906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=57822 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447147982.866:703748): pid=7906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447147982.866:703749): pid=7906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7907 suid=74 rport=57822 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447147982.867:703750): pid=7906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447147982.868:703751): pid=7906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447147982.868:703752): pid=7906 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23186 res=1
type=USER_ROLE_CHANGE msg=audit(1447147982.942:703753): pid=7906 uid=0 auid=0 ses=23186 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447147982.970:703754): pid=7906 uid=0 auid=0 ses=23186 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447147982.973:703755): pid=7906 uid=0 auid=0 ses=23186 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447147982.973:703756): pid=7906 uid=0 auid=0 ses=23186 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447147982.975:703757): pid=7909 uid=0 auid=0 ses=23186 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=7909 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447147982.975:703758): pid=7909 uid=0 auid=0 ses=23186 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=7909 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447147982.975:703759): pid=7909 uid=0 auid=0 ses=23186 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=7909 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447147982.976:703760): pid=7909 uid=0 auid=0 ses=23186 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447147982.994:703761): pid=7906 uid=0 auid=0 ses=23186 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447147982.994:703762): pid=7906 uid=0 auid=0 ses=23186 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447147982.997:703763): pid=7906 uid=0 auid=0 ses=23186 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447147982.997:703764): pid=7906 uid=0 auid=0 ses=23186 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447147982.998:703765): pid=7906 uid=0 auid=0 ses=23186 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7906 suid=0 rport=57822 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447147982.998:703766): pid=7906 uid=0 auid=0 ses=23186 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=7906 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447147982.998:703767): pid=7906 uid=0 auid=0 ses=23186 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=7906 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447147982.998:703768): pid=7906 uid=0 auid=0 ses=23186 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=7906 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447147983.019:703769): pid=7917 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=7917 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447147983.019:703770): pid=7917 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=7917 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447147983.019:703771): pid=7917 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=7917 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447147983.064:703772): pid=7916 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=7917 suid=74 rport=57823 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447147983.064:703773): pid=7916 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=7917 suid=74 rport=57823 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447147983.195:703774): pid=7916 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=57823 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447147983.195:703775): pid=7916 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=57823 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447147983.204:703776): pid=7916 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447147983.205:703777): pid=7916 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7917 suid=74 rport=57823 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447147983.207:703778): pid=7916 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447147983.207:703779): pid=7916 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447147983.207:703780): pid=7916 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23187 res=1
type=USER_ROLE_CHANGE msg=audit(1447147983.274:703781): pid=7916 uid=0 auid=0 ses=23187 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447147983.299:703782): pid=7916 uid=0 auid=0 ses=23187 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447147983.303:703783): pid=7916 uid=0 auid=0 ses=23187 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447147983.303:703784): pid=7916 uid=0 auid=0 ses=23187 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447147983.305:703785): pid=7919 uid=0 auid=0 ses=23187 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=7919 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447147983.305:703786): pid=7919 uid=0 auid=0 ses=23187 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=7919 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447147983.305:703787): pid=7919 uid=0 auid=0 ses=23187 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=7919 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447147983.306:703788): pid=7919 uid=0 auid=0 ses=23187 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447147984.600:703789): pid=7916 uid=0 auid=0 ses=23187 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447147984.600:703790): pid=7916 uid=0 auid=0 ses=23187 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447147984.604:703791): pid=7916 uid=0 auid=0 ses=23187 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447147984.604:703792): pid=7916 uid=0 auid=0 ses=23187 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447147984.604:703793): pid=7916 uid=0 auid=0 ses=23187 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7916 suid=0 rport=57823 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447147984.604:703794): pid=7916 uid=0 auid=0 ses=23187 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=7916 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447147984.605:703795): pid=7916 uid=0 auid=0 ses=23187 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=7916 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447147984.605:703796): pid=7916 uid=0 auid=0 ses=23187 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=7916 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447147984.627:703797): pid=7970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=7970 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447147984.627:703798): pid=7970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=7970 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447147984.627:703799): pid=7970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=7970 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447147984.664:703800): pid=7969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=7970 suid=74 rport=57824 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447147984.665:703801): pid=7969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=7970 suid=74 rport=57824 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447147984.768:703802): pid=7969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=57824 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447147984.768:703803): pid=7969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=57824 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447147984.773:703804): pid=7969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447147984.774:703805): pid=7969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7970 suid=74 rport=57824 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447147984.776:703806): pid=7969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447147984.776:703807): pid=7969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447147984.776:703808): pid=7969 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23188 res=1
type=USER_ROLE_CHANGE msg=audit(1447147984.844:703809): pid=7969 uid=0 auid=0 ses=23188 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447147984.867:703810): pid=7969 uid=0 auid=0 ses=23188 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447147984.869:703811): pid=7969 uid=0 auid=0 ses=23188 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447147984.869:703812): pid=7969 uid=0 auid=0 ses=23188 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447147984.871:703813): pid=7972 uid=0 auid=0 ses=23188 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=7972 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447147984.871:703814): pid=7972 uid=0 auid=0 ses=23188 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=7972 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447147984.871:703815): pid=7972 uid=0 auid=0 ses=23188 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=7972 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447147984.872:703816): pid=7972 uid=0 auid=0 ses=23188 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447147984.888:703817): pid=7969 uid=0 auid=0 ses=23188 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447147984.888:703818): pid=7969 uid=0 auid=0 ses=23188 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447147984.892:703819): pid=7969 uid=0 auid=0 ses=23188 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447147984.892:703820): pid=7969 uid=0 auid=0 ses=23188 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447147984.892:703821): pid=7969 uid=0 auid=0 ses=23188 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7969 suid=0 rport=57824 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447147984.893:703822): pid=7969 uid=0 auid=0 ses=23188 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=7969 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447147984.893:703823): pid=7969 uid=0 auid=0 ses=23188 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=7969 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447147984.893:703824): pid=7969 uid=0 auid=0 ses=23188 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=7969 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=SYSCALL msg=audit(1447148207.741:703825): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447148401.666:703826): pid=9260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447148401.666:703827): pid=9259 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447148401.666:703829): pid=9260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447148401.666:703828): pid=9259 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447148401.667:703830): pid=9260 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23189 res=1
type=LOGIN msg=audit(1447148401.667:703831): pid=9259 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23190 res=1
type=USER_START msg=audit(1447148401.685:703832): pid=9260 uid=0 auid=0 ses=23189 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447148401.686:703833): pid=9260 uid=0 auid=0 ses=23189 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447148401.686:703834): pid=9259 uid=0 auid=0 ses=23190 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447148401.687:703835): pid=9259 uid=0 auid=0 ses=23190 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447148401.697:703836): pid=9260 uid=0 auid=0 ses=23189 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447148401.698:703837): pid=9260 uid=0 auid=0 ses=23189 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447148401.700:703838): pid=9259 uid=0 auid=0 ses=23190 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447148401.703:703839): pid=9259 uid=0 auid=0 ses=23190 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447149001.723:703841): pid=11105 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447149001.723:703840): pid=11104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447149001.723:703842): pid=11105 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447149001.723:703843): pid=11104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447149001.723:703844): pid=11105 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23191 res=1
type=LOGIN msg=audit(1447149001.723:703845): pid=11104 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23192 res=1
type=USER_START msg=audit(1447149001.741:703846): pid=11104 uid=0 auid=0 ses=23192 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447149001.742:703847): pid=11104 uid=0 auid=0 ses=23192 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447149001.743:703848): pid=11105 uid=0 auid=0 ses=23191 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447149001.743:703849): pid=11105 uid=0 auid=0 ses=23191 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447149001.749:703850): pid=11105 uid=0 auid=0 ses=23191 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447149001.751:703851): pid=11105 uid=0 auid=0 ses=23191 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447149001.755:703852): pid=11104 uid=0 auid=0 ses=23192 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447149001.760:703853): pid=11104 uid=0 auid=0 ses=23192 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447149182.441:703854): pid=11669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=11669 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447149182.441:703855): pid=11669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=11669 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447149182.441:703856): pid=11669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=11669 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447149182.486:703857): pid=11668 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=11669 suid=74 rport=59801 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447149182.486:703858): pid=11668 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=11669 suid=74 rport=59801 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447149182.617:703859): pid=11668 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59801 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447149182.617:703860): pid=11668 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=59801 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447149182.626:703861): pid=11668 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447149182.629:703862): pid=11668 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11669 suid=74 rport=59801 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447149182.632:703863): pid=11668 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447149182.633:703864): pid=11668 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447149182.633:703865): pid=11668 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23193 res=1
type=USER_ROLE_CHANGE msg=audit(1447149182.701:703866): pid=11668 uid=0 auid=0 ses=23193 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447149182.726:703867): pid=11668 uid=0 auid=0 ses=23193 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447149182.728:703868): pid=11668 uid=0 auid=0 ses=23193 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447149182.728:703869): pid=11668 uid=0 auid=0 ses=23193 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447149182.730:703870): pid=11671 uid=0 auid=0 ses=23193 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=11671 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447149182.731:703871): pid=11671 uid=0 auid=0 ses=23193 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=11671 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447149182.731:703872): pid=11671 uid=0 auid=0 ses=23193 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=11671 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447149182.732:703873): pid=11671 uid=0 auid=0 ses=23193 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447149182.753:703874): pid=11668 uid=0 auid=0 ses=23193 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447149182.753:703875): pid=11668 uid=0 auid=0 ses=23193 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447149182.759:703876): pid=11668 uid=0 auid=0 ses=23193 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447149182.759:703877): pid=11668 uid=0 auid=0 ses=23193 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447149182.760:703878): pid=11668 uid=0 auid=0 ses=23193 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11668 suid=0 rport=59801 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447149182.760:703879): pid=11668 uid=0 auid=0 ses=23193 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=11668 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447149182.760:703880): pid=11668 uid=0 auid=0 ses=23193 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=11668 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447149182.760:703881): pid=11668 uid=0 auid=0 ses=23193 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=11668 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447149182.779:703882): pid=11679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=11679 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447149182.780:703883): pid=11679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=11679 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447149182.780:703884): pid=11679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=11679 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447149182.824:703885): pid=11678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=11679 suid=74 rport=59802 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447149182.824:703886): pid=11678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=11679 suid=74 rport=59802 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447149182.953:703887): pid=11678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59802 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447149182.953:703888): pid=11678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=59802 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447149182.962:703889): pid=11678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447149182.963:703890): pid=11678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11679 suid=74 rport=59802 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447149182.965:703891): pid=11678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447149182.965:703892): pid=11678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447149182.965:703893): pid=11678 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23194 res=1
type=USER_ROLE_CHANGE msg=audit(1447149183.034:703894): pid=11678 uid=0 auid=0 ses=23194 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447149183.058:703895): pid=11678 uid=0 auid=0 ses=23194 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447149183.061:703896): pid=11678 uid=0 auid=0 ses=23194 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447149183.061:703897): pid=11678 uid=0 auid=0 ses=23194 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447149183.062:703898): pid=11681 uid=0 auid=0 ses=23194 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=11681 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447149183.063:703899): pid=11681 uid=0 auid=0 ses=23194 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=11681 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447149183.063:703900): pid=11681 uid=0 auid=0 ses=23194 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=11681 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447149183.064:703901): pid=11681 uid=0 auid=0 ses=23194 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447149184.314:703902): pid=11678 uid=0 auid=0 ses=23194 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447149184.314:703903): pid=11678 uid=0 auid=0 ses=23194 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447149184.319:703904): pid=11678 uid=0 auid=0 ses=23194 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447149184.320:703905): pid=11678 uid=0 auid=0 ses=23194 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447149184.320:703906): pid=11678 uid=0 auid=0 ses=23194 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11678 suid=0 rport=59802 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447149184.320:703907): pid=11678 uid=0 auid=0 ses=23194 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=11678 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447149184.321:703908): pid=11678 uid=0 auid=0 ses=23194 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=11678 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447149184.321:703909): pid=11678 uid=0 auid=0 ses=23194 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=11678 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447149184.354:703910): pid=11731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=11731 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447149184.354:703911): pid=11731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=11731 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447149184.354:703912): pid=11731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=11731 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447149184.400:703913): pid=11730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=11731 suid=74 rport=59804 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447149184.400:703914): pid=11730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=11731 suid=74 rport=59804 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447149184.529:703915): pid=11730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59804 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447149184.529:703916): pid=11730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=59804 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447149184.538:703917): pid=11730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447149184.540:703918): pid=11730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11731 suid=74 rport=59804 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447149184.541:703919): pid=11730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447149184.541:703920): pid=11730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447149184.541:703921): pid=11730 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23195 res=1
type=USER_ROLE_CHANGE msg=audit(1447149184.606:703922): pid=11730 uid=0 auid=0 ses=23195 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447149184.633:703923): pid=11730 uid=0 auid=0 ses=23195 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447149184.635:703924): pid=11730 uid=0 auid=0 ses=23195 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447149184.635:703925): pid=11730 uid=0 auid=0 ses=23195 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447149184.637:703926): pid=11733 uid=0 auid=0 ses=23195 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=11733 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447149184.637:703927): pid=11733 uid=0 auid=0 ses=23195 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=11733 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447149184.637:703928): pid=11733 uid=0 auid=0 ses=23195 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=11733 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447149184.638:703929): pid=11733 uid=0 auid=0 ses=23195 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447149184.655:703930): pid=11730 uid=0 auid=0 ses=23195 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447149184.655:703931): pid=11730 uid=0 auid=0 ses=23195 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447149184.658:703932): pid=11730 uid=0 auid=0 ses=23195 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447149184.658:703933): pid=11730 uid=0 auid=0 ses=23195 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447149184.659:703934): pid=11730 uid=0 auid=0 ses=23195 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11730 suid=0 rport=59804 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447149184.659:703935): pid=11730 uid=0 auid=0 ses=23195 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=11730 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447149184.659:703936): pid=11730 uid=0 auid=0 ses=23195 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=11730 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447149184.660:703937): pid=11730 uid=0 auid=0 ses=23195 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=11730 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447149601.782:703938): pid=13026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447149601.782:703939): pid=13025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447149601.782:703940): pid=13026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447149601.782:703941): pid=13025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447149601.783:703942): pid=13025 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23196 res=1
type=LOGIN msg=audit(1447149601.784:703943): pid=13026 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23197 res=1
type=USER_START msg=audit(1447149601.802:703944): pid=13026 uid=0 auid=0 ses=23197 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447149601.802:703945): pid=13025 uid=0 auid=0 ses=23196 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447149601.802:703946): pid=13026 uid=0 auid=0 ses=23197 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447149601.802:703947): pid=13025 uid=0 auid=0 ses=23196 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447149601.811:703948): pid=13026 uid=0 auid=0 ses=23197 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447149601.813:703949): pid=13026 uid=0 auid=0 ses=23197 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447149601.822:703950): pid=13025 uid=0 auid=0 ses=23196 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447149601.823:703951): pid=13025 uid=0 auid=0 ses=23196 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447149661.836:703952): pid=13260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447149661.836:703953): pid=13260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447149661.836:703954): pid=13260 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23198 res=1
type=USER_START msg=audit(1447149661.850:703955): pid=13260 uid=0 auid=0 ses=23198 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447149661.850:703956): pid=13260 uid=0 auid=0 ses=23198 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447149661.875:703957): pid=13260 uid=0 auid=0 ses=23198 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447149661.876:703958): pid=13260 uid=0 auid=0 ses=23198 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447150201.889:703959): pid=15046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447150201.889:703960): pid=15045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447150201.890:703961): pid=15046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447150201.890:703962): pid=15045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447150201.890:703963): pid=15046 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23199 res=1
type=LOGIN msg=audit(1447150201.890:703964): pid=15045 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23200 res=1
type=USER_START msg=audit(1447150201.909:703965): pid=15046 uid=0 auid=0 ses=23199 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447150201.909:703966): pid=15045 uid=0 auid=0 ses=23200 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447150201.909:703967): pid=15045 uid=0 auid=0 ses=23200 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447150201.909:703968): pid=15046 uid=0 auid=0 ses=23199 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447150201.916:703969): pid=15046 uid=0 auid=0 ses=23199 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447150201.917:703970): pid=15046 uid=0 auid=0 ses=23199 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447150201.924:703971): pid=15045 uid=0 auid=0 ses=23200 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447150201.925:703972): pid=15045 uid=0 auid=0 ses=23200 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1447150316.759:703973): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=CRYPTO_KEY_USER msg=audit(1447150382.423:703974): pid=15616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=15616 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447150382.423:703975): pid=15616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=15616 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447150382.423:703976): pid=15616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=15616 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447150382.467:703977): pid=15615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=15616 suid=74 rport=61781 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447150382.467:703978): pid=15615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=15616 suid=74 rport=61781 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447150382.595:703979): pid=15615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=61781 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447150382.595:703980): pid=15615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=61781 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447150382.603:703981): pid=15615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447150382.605:703982): pid=15615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15616 suid=74 rport=61781 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447150382.606:703983): pid=15615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447150382.606:703984): pid=15615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447150382.606:703985): pid=15615 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23201 res=1
type=USER_ROLE_CHANGE msg=audit(1447150382.674:703986): pid=15615 uid=0 auid=0 ses=23201 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447150382.695:703987): pid=15615 uid=0 auid=0 ses=23201 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447150382.699:703988): pid=15615 uid=0 auid=0 ses=23201 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447150382.699:703989): pid=15615 uid=0 auid=0 ses=23201 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447150382.700:703990): pid=15618 uid=0 auid=0 ses=23201 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=15618 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447150382.700:703991): pid=15618 uid=0 auid=0 ses=23201 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=15618 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447150382.700:703992): pid=15618 uid=0 auid=0 ses=23201 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=15618 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447150382.701:703993): pid=15618 uid=0 auid=0 ses=23201 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447150382.717:703994): pid=15615 uid=0 auid=0 ses=23201 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447150382.717:703995): pid=15615 uid=0 auid=0 ses=23201 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447150382.721:703996): pid=15615 uid=0 auid=0 ses=23201 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447150382.721:703997): pid=15615 uid=0 auid=0 ses=23201 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447150382.721:703998): pid=15615 uid=0 auid=0 ses=23201 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15615 suid=0 rport=61781 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447150382.721:703999): pid=15615 uid=0 auid=0 ses=23201 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=15615 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447150382.721:704000): pid=15615 uid=0 auid=0 ses=23201 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=15615 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447150382.722:704001): pid=15615 uid=0 auid=0 ses=23201 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=15615 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447150382.743:704002): pid=15626 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=15626 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447150382.743:704003): pid=15626 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=15626 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447150382.743:704004): pid=15626 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=15626 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447150382.788:704005): pid=15625 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=15626 suid=74 rport=61783 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447150382.788:704006): pid=15625 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=15626 suid=74 rport=61783 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447150382.917:704007): pid=15625 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=61783 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447150382.918:704008): pid=15625 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=61783 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447150382.925:704009): pid=15625 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447150382.926:704010): pid=15625 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15626 suid=74 rport=61783 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447150382.928:704011): pid=15625 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447150382.928:704012): pid=15625 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447150382.929:704013): pid=15625 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23202 res=1
type=USER_ROLE_CHANGE msg=audit(1447150382.995:704014): pid=15625 uid=0 auid=0 ses=23202 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447150383.017:704015): pid=15625 uid=0 auid=0 ses=23202 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447150383.020:704016): pid=15625 uid=0 auid=0 ses=23202 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447150383.020:704017): pid=15625 uid=0 auid=0 ses=23202 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447150383.022:704018): pid=15628 uid=0 auid=0 ses=23202 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=15628 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447150383.022:704019): pid=15628 uid=0 auid=0 ses=23202 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=15628 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447150383.022:704020): pid=15628 uid=0 auid=0 ses=23202 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=15628 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447150383.023:704021): pid=15628 uid=0 auid=0 ses=23202 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447150384.283:704022): pid=15625 uid=0 auid=0 ses=23202 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447150384.283:704023): pid=15625 uid=0 auid=0 ses=23202 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447150384.287:704024): pid=15625 uid=0 auid=0 ses=23202 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447150384.287:704025): pid=15625 uid=0 auid=0 ses=23202 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447150384.288:704026): pid=15625 uid=0 auid=0 ses=23202 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15625 suid=0 rport=61783 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447150384.288:704027): pid=15625 uid=0 auid=0 ses=23202 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=15625 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447150384.288:704028): pid=15625 uid=0 auid=0 ses=23202 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=15625 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447150384.288:704029): pid=15625 uid=0 auid=0 ses=23202 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=15625 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447150384.321:704030): pid=15678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=15678 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447150384.322:704031): pid=15678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=15678 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447150384.322:704032): pid=15678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=15678 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447150384.367:704033): pid=15677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=15678 suid=74 rport=61785 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447150384.367:704034): pid=15677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=15678 suid=74 rport=61785 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447150384.493:704035): pid=15677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=61785 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447150384.494:704036): pid=15677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=61785 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447150384.504:704037): pid=15677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447150384.504:704038): pid=15677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15678 suid=74 rport=61785 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447150384.506:704039): pid=15677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447150384.506:704040): pid=15677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447150384.506:704041): pid=15677 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23203 res=1
type=USER_ROLE_CHANGE msg=audit(1447150384.571:704042): pid=15677 uid=0 auid=0 ses=23203 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447150384.598:704043): pid=15677 uid=0 auid=0 ses=23203 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447150384.601:704044): pid=15677 uid=0 auid=0 ses=23203 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447150384.601:704045): pid=15677 uid=0 auid=0 ses=23203 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447150384.603:704046): pid=15680 uid=0 auid=0 ses=23203 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=15680 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447150384.603:704047): pid=15680 uid=0 auid=0 ses=23203 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=15680 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447150384.603:704048): pid=15680 uid=0 auid=0 ses=23203 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=15680 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447150384.603:704049): pid=15680 uid=0 auid=0 ses=23203 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447150384.624:704050): pid=15677 uid=0 auid=0 ses=23203 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447150384.625:704051): pid=15677 uid=0 auid=0 ses=23203 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447150384.630:704052): pid=15677 uid=0 auid=0 ses=23203 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447150384.630:704053): pid=15677 uid=0 auid=0 ses=23203 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447150384.631:704054): pid=15677 uid=0 auid=0 ses=23203 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15677 suid=0 rport=61785 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447150384.631:704055): pid=15677 uid=0 auid=0 ses=23203 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=15677 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447150384.631:704056): pid=15677 uid=0 auid=0 ses=23203 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=15677 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447150384.631:704057): pid=15677 uid=0 auid=0 ses=23203 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=15677 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447150801.946:704059): pid=16969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447150801.946:704058): pid=16970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447150801.946:704060): pid=16970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447150801.946:704061): pid=16969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447150801.948:704062): pid=16970 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23204 res=1
type=LOGIN msg=audit(1447150801.948:704063): pid=16969 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23205 res=1
type=USER_START msg=audit(1447150801.968:704064): pid=16969 uid=0 auid=0 ses=23205 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447150801.968:704065): pid=16970 uid=0 auid=0 ses=23204 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447150801.968:704066): pid=16970 uid=0 auid=0 ses=23204 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447150801.968:704067): pid=16969 uid=0 auid=0 ses=23205 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447150801.978:704068): pid=16970 uid=0 auid=0 ses=23204 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447150801.980:704069): pid=16970 uid=0 auid=0 ses=23204 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447150801.984:704070): pid=16969 uid=0 auid=0 ses=23205 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447150801.985:704071): pid=16969 uid=0 auid=0 ses=23205 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447151402.003:704072): pid=18807 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447151402.003:704073): pid=18806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447151402.003:704074): pid=18807 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447151402.003:704075): pid=18806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447151402.003:704076): pid=18807 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23206 res=1
type=LOGIN msg=audit(1447151402.003:704077): pid=18806 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23207 res=1
type=USER_START msg=audit(1447151402.019:704078): pid=18807 uid=0 auid=0 ses=23206 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447151402.020:704079): pid=18807 uid=0 auid=0 ses=23206 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447151402.020:704080): pid=18806 uid=0 auid=0 ses=23207 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447151402.020:704081): pid=18806 uid=0 auid=0 ses=23207 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447151402.026:704082): pid=18807 uid=0 auid=0 ses=23206 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447151402.028:704083): pid=18807 uid=0 auid=0 ses=23206 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447151402.035:704084): pid=18806 uid=0 auid=0 ses=23207 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447151402.036:704085): pid=18806 uid=0 auid=0 ses=23207 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447151582.621:704086): pid=19370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=19370 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447151582.621:704087): pid=19370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=19370 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447151582.621:704088): pid=19370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=19370 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447151582.667:704089): pid=19369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=19370 suid=74 rport=63760 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447151582.667:704090): pid=19369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=19370 suid=74 rport=63760 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447151582.796:704091): pid=19369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=63760 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447151582.796:704092): pid=19369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=63760 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447151582.802:704093): pid=19369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447151582.803:704094): pid=19369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19370 suid=74 rport=63760 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447151582.804:704095): pid=19369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447151582.804:704096): pid=19369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447151582.804:704097): pid=19369 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23208 res=1
type=USER_ROLE_CHANGE msg=audit(1447151582.875:704098): pid=19369 uid=0 auid=0 ses=23208 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447151582.895:704099): pid=19369 uid=0 auid=0 ses=23208 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447151582.898:704100): pid=19369 uid=0 auid=0 ses=23208 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447151582.898:704101): pid=19369 uid=0 auid=0 ses=23208 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447151582.899:704102): pid=19372 uid=0 auid=0 ses=23208 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=19372 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447151582.899:704103): pid=19372 uid=0 auid=0 ses=23208 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=19372 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447151582.899:704104): pid=19372 uid=0 auid=0 ses=23208 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=19372 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447151582.900:704105): pid=19372 uid=0 auid=0 ses=23208 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447151582.918:704106): pid=19369 uid=0 auid=0 ses=23208 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447151582.918:704107): pid=19369 uid=0 auid=0 ses=23208 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447151582.922:704108): pid=19369 uid=0 auid=0 ses=23208 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447151582.922:704109): pid=19369 uid=0 auid=0 ses=23208 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447151582.923:704110): pid=19369 uid=0 auid=0 ses=23208 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19369 suid=0 rport=63760 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447151582.923:704111): pid=19369 uid=0 auid=0 ses=23208 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=19369 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447151582.923:704112): pid=19369 uid=0 auid=0 ses=23208 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=19369 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447151582.923:704113): pid=19369 uid=0 auid=0 ses=23208 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=19369 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447151582.952:704114): pid=19380 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=19380 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447151582.952:704115): pid=19380 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=19380 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447151582.952:704116): pid=19380 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=19380 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447151582.997:704117): pid=19379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=19380 suid=74 rport=63764 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447151582.997:704118): pid=19379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=19380 suid=74 rport=63764 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447151583.122:704119): pid=19379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=63764 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447151583.123:704120): pid=19379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=63764 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447151583.129:704121): pid=19379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447151583.129:704122): pid=19379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19380 suid=74 rport=63764 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447151583.132:704123): pid=19379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447151583.132:704124): pid=19379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447151583.133:704125): pid=19379 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23209 res=1
type=USER_ROLE_CHANGE msg=audit(1447151583.203:704126): pid=19379 uid=0 auid=0 ses=23209 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447151583.223:704127): pid=19379 uid=0 auid=0 ses=23209 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447151583.225:704128): pid=19379 uid=0 auid=0 ses=23209 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447151583.225:704129): pid=19379 uid=0 auid=0 ses=23209 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447151583.227:704130): pid=19392 uid=0 auid=0 ses=23209 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=19392 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447151583.227:704131): pid=19392 uid=0 auid=0 ses=23209 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=19392 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447151583.227:704132): pid=19392 uid=0 auid=0 ses=23209 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=19392 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447151583.228:704133): pid=19392 uid=0 auid=0 ses=23209 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447151584.515:704134): pid=19379 uid=0 auid=0 ses=23209 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447151584.515:704135): pid=19379 uid=0 auid=0 ses=23209 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447151584.521:704136): pid=19379 uid=0 auid=0 ses=23209 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447151584.522:704137): pid=19379 uid=0 auid=0 ses=23209 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447151584.522:704138): pid=19379 uid=0 auid=0 ses=23209 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19379 suid=0 rport=63764 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447151584.523:704139): pid=19379 uid=0 auid=0 ses=23209 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=19379 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447151584.523:704140): pid=19379 uid=0 auid=0 ses=23209 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=19379 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447151584.523:704141): pid=19379 uid=0 auid=0 ses=23209 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=19379 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447151584.553:704142): pid=19442 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=19442 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447151584.553:704143): pid=19442 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=19442 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447151584.553:704144): pid=19442 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=19442 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447151584.599:704145): pid=19441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=19442 suid=74 rport=63767 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447151584.599:704146): pid=19441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=19442 suid=74 rport=63767 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447151584.723:704147): pid=19441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=63767 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447151584.723:704148): pid=19441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=63767 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447151584.728:704149): pid=19441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447151584.728:704150): pid=19441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19442 suid=74 rport=63767 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447151584.729:704151): pid=19441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447151584.730:704152): pid=19441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447151584.730:704153): pid=19441 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23210 res=1
type=USER_ROLE_CHANGE msg=audit(1447151584.796:704154): pid=19441 uid=0 auid=0 ses=23210 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447151584.816:704155): pid=19441 uid=0 auid=0 ses=23210 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447151584.819:704156): pid=19441 uid=0 auid=0 ses=23210 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447151584.820:704157): pid=19441 uid=0 auid=0 ses=23210 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447151584.821:704158): pid=19444 uid=0 auid=0 ses=23210 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=19444 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447151584.821:704159): pid=19444 uid=0 auid=0 ses=23210 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=19444 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447151584.821:704160): pid=19444 uid=0 auid=0 ses=23210 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=19444 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447151584.822:704161): pid=19444 uid=0 auid=0 ses=23210 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447151584.838:704162): pid=19441 uid=0 auid=0 ses=23210 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447151584.838:704163): pid=19441 uid=0 auid=0 ses=23210 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447151584.841:704164): pid=19441 uid=0 auid=0 ses=23210 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447151584.841:704165): pid=19441 uid=0 auid=0 ses=23210 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447151584.841:704166): pid=19441 uid=0 auid=0 ses=23210 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19441 suid=0 rport=63767 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447151584.841:704167): pid=19441 uid=0 auid=0 ses=23210 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=19441 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447151584.841:704168): pid=19441 uid=0 auid=0 ses=23210 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=19441 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447151584.841:704169): pid=19441 uid=0 auid=0 ses=23210 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=19441 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447152001.070:704171): pid=20668 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447152001.070:704170): pid=20669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447152001.071:704172): pid=20669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447152001.071:704173): pid=20668 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447152001.072:704174): pid=20669 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23211 res=1
type=LOGIN msg=audit(1447152001.072:704175): pid=20668 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23212 res=1
type=USER_START msg=audit(1447152001.093:704176): pid=20668 uid=0 auid=0 ses=23212 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447152001.094:704177): pid=20669 uid=0 auid=0 ses=23211 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447152001.094:704178): pid=20668 uid=0 auid=0 ses=23212 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447152001.094:704179): pid=20669 uid=0 auid=0 ses=23211 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447152001.103:704180): pid=20669 uid=0 auid=0 ses=23211 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447152001.105:704181): pid=20669 uid=0 auid=0 ses=23211 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447152001.115:704182): pid=20668 uid=0 auid=0 ses=23212 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447152001.116:704183): pid=20668 uid=0 auid=0 ses=23212 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1447152464.759:704184): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447152601.134:704185): pid=22514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447152601.135:704186): pid=22514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447152601.135:704187): pid=22514 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23213 res=1
type=USER_ACCT msg=audit(1447152601.135:704188): pid=22513 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447152601.135:704189): pid=22513 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447152601.136:704190): pid=22513 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23214 res=1
type=USER_START msg=audit(1447152601.150:704191): pid=22514 uid=0 auid=0 ses=23213 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447152601.150:704192): pid=22514 uid=0 auid=0 ses=23213 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447152601.151:704193): pid=22513 uid=0 auid=0 ses=23214 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447152601.152:704194): pid=22513 uid=0 auid=0 ses=23214 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447152601.155:704195): pid=22514 uid=0 auid=0 ses=23213 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447152601.159:704196): pid=22514 uid=0 auid=0 ses=23213 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447152601.165:704197): pid=22513 uid=0 auid=0 ses=23214 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447152601.166:704198): pid=22513 uid=0 auid=0 ses=23214 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447152783.052:704199): pid=23077 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=23077 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447152783.053:704200): pid=23077 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=23077 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447152783.053:704201): pid=23077 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=23077 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447152783.098:704202): pid=23076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=23077 suid=74 rport=32977 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447152783.098:704203): pid=23076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=23077 suid=74 rport=32977 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447152783.228:704204): pid=23076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=32977 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447152783.228:704205): pid=23076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=32977 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447152783.235:704206): pid=23076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447152783.236:704207): pid=23076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23077 suid=74 rport=32977 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447152783.238:704208): pid=23076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447152783.238:704209): pid=23076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447152783.238:704210): pid=23076 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23215 res=1
type=USER_ROLE_CHANGE msg=audit(1447152783.309:704211): pid=23076 uid=0 auid=0 ses=23215 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447152783.338:704212): pid=23076 uid=0 auid=0 ses=23215 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447152783.341:704213): pid=23076 uid=0 auid=0 ses=23215 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447152783.341:704214): pid=23076 uid=0 auid=0 ses=23215 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447152783.342:704215): pid=23079 uid=0 auid=0 ses=23215 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=23079 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447152783.342:704216): pid=23079 uid=0 auid=0 ses=23215 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=23079 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447152783.342:704217): pid=23079 uid=0 auid=0 ses=23215 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=23079 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447152783.343:704218): pid=23079 uid=0 auid=0 ses=23215 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447152783.362:704219): pid=23076 uid=0 auid=0 ses=23215 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447152783.362:704220): pid=23076 uid=0 auid=0 ses=23215 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447152783.366:704221): pid=23076 uid=0 auid=0 ses=23215 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447152783.366:704222): pid=23076 uid=0 auid=0 ses=23215 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447152783.367:704223): pid=23076 uid=0 auid=0 ses=23215 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23076 suid=0 rport=32977 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447152783.367:704224): pid=23076 uid=0 auid=0 ses=23215 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=23076 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447152783.367:704225): pid=23076 uid=0 auid=0 ses=23215 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=23076 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447152783.367:704226): pid=23076 uid=0 auid=0 ses=23215 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=23076 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447152783.390:704227): pid=23087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=23087 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447152783.390:704228): pid=23087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=23087 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447152783.390:704229): pid=23087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=23087 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447152783.434:704230): pid=23086 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=23087 suid=74 rport=32981 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447152783.435:704231): pid=23086 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=23087 suid=74 rport=32981 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447152783.564:704232): pid=23086 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=32981 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447152783.564:704233): pid=23086 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=32981 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447152783.572:704234): pid=23086 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447152783.573:704235): pid=23086 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23087 suid=74 rport=32981 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447152783.576:704236): pid=23086 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447152783.576:704237): pid=23086 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447152783.576:704238): pid=23086 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23216 res=1
type=USER_ROLE_CHANGE msg=audit(1447152783.640:704239): pid=23086 uid=0 auid=0 ses=23216 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447152783.662:704240): pid=23086 uid=0 auid=0 ses=23216 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447152783.665:704241): pid=23086 uid=0 auid=0 ses=23216 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447152783.665:704242): pid=23086 uid=0 auid=0 ses=23216 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447152783.666:704243): pid=23089 uid=0 auid=0 ses=23216 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=23089 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447152783.667:704244): pid=23089 uid=0 auid=0 ses=23216 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=23089 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447152783.667:704245): pid=23089 uid=0 auid=0 ses=23216 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=23089 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447152783.667:704246): pid=23089 uid=0 auid=0 ses=23216 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447152784.954:704247): pid=23086 uid=0 auid=0 ses=23216 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447152784.954:704248): pid=23086 uid=0 auid=0 ses=23216 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447152784.958:704249): pid=23086 uid=0 auid=0 ses=23216 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447152784.958:704250): pid=23086 uid=0 auid=0 ses=23216 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447152784.959:704251): pid=23086 uid=0 auid=0 ses=23216 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23086 suid=0 rport=32981 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447152784.959:704252): pid=23086 uid=0 auid=0 ses=23216 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=23086 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447152784.959:704253): pid=23086 uid=0 auid=0 ses=23216 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=23086 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447152784.959:704254): pid=23086 uid=0 auid=0 ses=23216 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=23086 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447152784.991:704255): pid=23139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=23139 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447152784.991:704256): pid=23139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=23139 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447152784.991:704257): pid=23139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=23139 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447152785.036:704258): pid=23138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=23139 suid=74 rport=32984 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447152785.036:704259): pid=23138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=23139 suid=74 rport=32984 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447152785.157:704260): pid=23138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=32984 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447152785.157:704261): pid=23138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=32984 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447152785.162:704262): pid=23138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447152785.163:704263): pid=23138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23139 suid=74 rport=32984 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447152785.164:704264): pid=23138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447152785.165:704265): pid=23138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447152785.165:704266): pid=23138 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23217 res=1
type=USER_ROLE_CHANGE msg=audit(1447152785.231:704267): pid=23138 uid=0 auid=0 ses=23217 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447152785.249:704268): pid=23138 uid=0 auid=0 ses=23217 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447152785.252:704269): pid=23138 uid=0 auid=0 ses=23217 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447152785.252:704270): pid=23138 uid=0 auid=0 ses=23217 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447152785.253:704271): pid=23141 uid=0 auid=0 ses=23217 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=23141 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447152785.254:704272): pid=23141 uid=0 auid=0 ses=23217 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=23141 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447152785.254:704273): pid=23141 uid=0 auid=0 ses=23217 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=23141 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447152785.254:704274): pid=23141 uid=0 auid=0 ses=23217 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447152785.270:704275): pid=23138 uid=0 auid=0 ses=23217 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447152785.271:704276): pid=23138 uid=0 auid=0 ses=23217 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447152785.274:704277): pid=23138 uid=0 auid=0 ses=23217 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447152785.274:704278): pid=23138 uid=0 auid=0 ses=23217 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447152785.275:704279): pid=23138 uid=0 auid=0 ses=23217 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23138 suid=0 rport=32984 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447152785.275:704280): pid=23138 uid=0 auid=0 ses=23217 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=23138 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447152785.275:704281): pid=23138 uid=0 auid=0 ses=23217 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=23138 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447152785.275:704282): pid=23138 uid=0 auid=0 ses=23217 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=23138 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447153201.189:704283): pid=24430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447153201.189:704284): pid=24430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447153201.189:704285): pid=24429 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447153201.190:704286): pid=24429 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447153201.190:704287): pid=24430 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23218 res=1
type=LOGIN msg=audit(1447153201.190:704288): pid=24429 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23219 res=1
type=USER_START msg=audit(1447153201.209:704289): pid=24429 uid=0 auid=0 ses=23219 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447153201.209:704290): pid=24429 uid=0 auid=0 ses=23219 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447153201.211:704291): pid=24430 uid=0 auid=0 ses=23218 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447153201.211:704292): pid=24430 uid=0 auid=0 ses=23218 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447153201.219:704293): pid=24430 uid=0 auid=0 ses=23218 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447153201.224:704294): pid=24430 uid=0 auid=0 ses=23218 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447153201.226:704295): pid=24429 uid=0 auid=0 ses=23219 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447153201.231:704296): pid=24429 uid=0 auid=0 ses=23219 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447153261.237:704297): pid=24666 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447153261.237:704298): pid=24666 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447153261.237:704299): pid=24666 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23220 res=1
type=USER_START msg=audit(1447153261.252:704300): pid=24666 uid=0 auid=0 ses=23220 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447153261.252:704301): pid=24666 uid=0 auid=0 ses=23220 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447153261.275:704302): pid=24666 uid=0 auid=0 ses=23220 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447153261.276:704303): pid=24666 uid=0 auid=0 ses=23220 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447153801.290:704304): pid=26334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447153801.290:704305): pid=26335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447153801.290:704306): pid=26334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447153801.290:704307): pid=26335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447153801.291:704308): pid=26334 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23221 res=1
type=LOGIN msg=audit(1447153801.291:704309): pid=26335 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23222 res=1
type=USER_START msg=audit(1447153801.305:704310): pid=26335 uid=0 auid=0 ses=23222 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447153801.306:704311): pid=26335 uid=0 auid=0 ses=23222 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447153801.306:704312): pid=26334 uid=0 auid=0 ses=23221 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447153801.306:704313): pid=26334 uid=0 auid=0 ses=23221 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447153801.313:704314): pid=26335 uid=0 auid=0 ses=23222 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447153801.318:704315): pid=26334 uid=0 auid=0 ses=23221 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447153801.319:704316): pid=26335 uid=0 auid=0 ses=23222 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447153801.320:704317): pid=26334 uid=0 auid=0 ses=23221 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447153982.699:704318): pid=26904 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=26904 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447153982.700:704319): pid=26904 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=26904 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447153982.700:704320): pid=26904 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=26904 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447153982.744:704321): pid=26903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=26904 suid=74 rport=34956 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447153982.745:704322): pid=26903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=26904 suid=74 rport=34956 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447153982.875:704323): pid=26903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34956 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447153982.875:704324): pid=26903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=34956 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447153982.885:704325): pid=26903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447153982.887:704326): pid=26903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26904 suid=74 rport=34956 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447153982.890:704327): pid=26903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447153982.890:704328): pid=26903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447153982.890:704329): pid=26903 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23223 res=1
type=USER_ROLE_CHANGE msg=audit(1447153982.958:704330): pid=26903 uid=0 auid=0 ses=23223 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447153982.980:704331): pid=26903 uid=0 auid=0 ses=23223 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447153982.983:704332): pid=26903 uid=0 auid=0 ses=23223 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447153982.983:704333): pid=26903 uid=0 auid=0 ses=23223 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447153982.985:704334): pid=26906 uid=0 auid=0 ses=23223 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=26906 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447153982.985:704335): pid=26906 uid=0 auid=0 ses=23223 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=26906 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447153982.985:704336): pid=26906 uid=0 auid=0 ses=23223 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=26906 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447153982.986:704337): pid=26906 uid=0 auid=0 ses=23223 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447153983.004:704338): pid=26903 uid=0 auid=0 ses=23223 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447153983.004:704339): pid=26903 uid=0 auid=0 ses=23223 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447153983.007:704340): pid=26903 uid=0 auid=0 ses=23223 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447153983.008:704341): pid=26903 uid=0 auid=0 ses=23223 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447153983.008:704342): pid=26903 uid=0 auid=0 ses=23223 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26903 suid=0 rport=34956 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447153983.008:704343): pid=26903 uid=0 auid=0 ses=23223 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=26903 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447153983.008:704344): pid=26903 uid=0 auid=0 ses=23223 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=26903 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447153983.008:704345): pid=26903 uid=0 auid=0 ses=23223 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=26903 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447153983.030:704346): pid=26914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=26914 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447153983.030:704347): pid=26914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=26914 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447153983.031:704348): pid=26914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=26914 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447153983.075:704349): pid=26913 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=26914 suid=74 rport=34958 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447153983.076:704350): pid=26913 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=26914 suid=74 rport=34958 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447153983.204:704351): pid=26913 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34958 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447153983.204:704352): pid=26913 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=34958 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447153983.214:704353): pid=26913 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447153983.216:704354): pid=26913 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26914 suid=74 rport=34958 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447153983.218:704355): pid=26913 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447153983.218:704356): pid=26913 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447153983.218:704357): pid=26913 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23224 res=1
type=USER_ROLE_CHANGE msg=audit(1447153983.285:704358): pid=26913 uid=0 auid=0 ses=23224 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447153983.310:704359): pid=26913 uid=0 auid=0 ses=23224 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447153983.313:704360): pid=26913 uid=0 auid=0 ses=23224 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447153983.313:704361): pid=26913 uid=0 auid=0 ses=23224 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447153983.314:704362): pid=26916 uid=0 auid=0 ses=23224 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=26916 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447153983.314:704363): pid=26916 uid=0 auid=0 ses=23224 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=26916 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447153983.314:704364): pid=26916 uid=0 auid=0 ses=23224 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=26916 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447153983.315:704365): pid=26916 uid=0 auid=0 ses=23224 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447153984.601:704366): pid=26913 uid=0 auid=0 ses=23224 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447153984.601:704367): pid=26913 uid=0 auid=0 ses=23224 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447153984.604:704368): pid=26913 uid=0 auid=0 ses=23224 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447153984.605:704369): pid=26913 uid=0 auid=0 ses=23224 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447153984.605:704370): pid=26913 uid=0 auid=0 ses=23224 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26913 suid=0 rport=34958 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447153984.606:704371): pid=26913 uid=0 auid=0 ses=23224 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=26913 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447153984.606:704372): pid=26913 uid=0 auid=0 ses=23224 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=26913 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447153984.606:704373): pid=26913 uid=0 auid=0 ses=23224 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=26913 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447153984.638:704374): pid=26966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=26966 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447153984.638:704375): pid=26966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=26966 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447153984.638:704376): pid=26966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=26966 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447153984.683:704377): pid=26965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=26966 suid=74 rport=34964 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447153984.683:704378): pid=26965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=26966 suid=74 rport=34964 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447153984.803:704379): pid=26965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34964 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447153984.803:704380): pid=26965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=34964 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447153984.807:704381): pid=26965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447153984.808:704382): pid=26965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26966 suid=74 rport=34964 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447153984.810:704383): pid=26965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447153984.810:704384): pid=26965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447153984.810:704385): pid=26965 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23225 res=1
type=USER_ROLE_CHANGE msg=audit(1447153984.877:704386): pid=26965 uid=0 auid=0 ses=23225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447153984.901:704387): pid=26965 uid=0 auid=0 ses=23225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447153984.906:704388): pid=26965 uid=0 auid=0 ses=23225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447153984.906:704389): pid=26965 uid=0 auid=0 ses=23225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447153984.907:704390): pid=26968 uid=0 auid=0 ses=23225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=26968 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447153984.907:704391): pid=26968 uid=0 auid=0 ses=23225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=26968 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447153984.908:704392): pid=26968 uid=0 auid=0 ses=23225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=26968 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447153984.908:704393): pid=26968 uid=0 auid=0 ses=23225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447153984.924:704394): pid=26965 uid=0 auid=0 ses=23225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447153984.924:704395): pid=26965 uid=0 auid=0 ses=23225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447153984.927:704396): pid=26965 uid=0 auid=0 ses=23225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447153984.928:704397): pid=26965 uid=0 auid=0 ses=23225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447153984.928:704398): pid=26965 uid=0 auid=0 ses=23225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26965 suid=0 rport=34964 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447153984.928:704399): pid=26965 uid=0 auid=0 ses=23225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=26965 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447153984.929:704400): pid=26965 uid=0 auid=0 ses=23225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=26965 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447153984.929:704401): pid=26965 uid=0 auid=0 ses=23225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=26965 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447154401.339:704402): pid=28256 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447154401.339:704403): pid=28257 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447154401.339:704404): pid=28256 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447154401.339:704405): pid=28257 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447154401.340:704406): pid=28256 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23226 res=1
type=LOGIN msg=audit(1447154401.340:704407): pid=28257 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23227 res=1
type=USER_START msg=audit(1447154401.359:704408): pid=28257 uid=0 auid=0 ses=23227 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447154401.359:704409): pid=28257 uid=0 auid=0 ses=23227 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447154401.360:704410): pid=28256 uid=0 auid=0 ses=23226 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447154401.360:704411): pid=28256 uid=0 auid=0 ses=23226 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447154401.369:704412): pid=28257 uid=0 auid=0 ses=23227 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447154401.371:704413): pid=28257 uid=0 auid=0 ses=23227 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447154401.376:704414): pid=28256 uid=0 auid=0 ses=23226 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447154401.378:704415): pid=28256 uid=0 auid=0 ses=23226 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1447154585.759:704416): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447155001.390:704417): pid=30100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447155001.390:704418): pid=30099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447155001.390:704419): pid=30100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447155001.390:704420): pid=30099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447155001.391:704421): pid=30100 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23228 res=1
type=LOGIN msg=audit(1447155001.391:704422): pid=30099 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23229 res=1
type=USER_START msg=audit(1447155001.411:704423): pid=30100 uid=0 auid=0 ses=23228 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447155001.411:704424): pid=30099 uid=0 auid=0 ses=23229 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447155001.412:704425): pid=30099 uid=0 auid=0 ses=23229 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447155001.412:704426): pid=30100 uid=0 auid=0 ses=23228 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447155001.419:704427): pid=30100 uid=0 auid=0 ses=23228 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447155001.420:704428): pid=30100 uid=0 auid=0 ses=23228 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447155001.425:704429): pid=30099 uid=0 auid=0 ses=23229 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447155001.426:704430): pid=30099 uid=0 auid=0 ses=23229 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447155182.619:704431): pid=30666 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=30666 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447155182.619:704432): pid=30666 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=30666 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447155182.619:704433): pid=30666 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=30666 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447155182.663:704434): pid=30665 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=30666 suid=74 rport=36936 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447155182.663:704435): pid=30665 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=30666 suid=74 rport=36936 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447155182.790:704436): pid=30665 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=36936 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447155182.791:704437): pid=30665 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=36936 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447155182.799:704438): pid=30665 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447155182.801:704439): pid=30665 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=30666 suid=74 rport=36936 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447155182.802:704440): pid=30665 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447155182.803:704441): pid=30665 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447155182.803:704442): pid=30665 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23230 res=1
type=USER_ROLE_CHANGE msg=audit(1447155182.875:704443): pid=30665 uid=0 auid=0 ses=23230 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447155182.893:704444): pid=30665 uid=0 auid=0 ses=23230 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447155182.896:704445): pid=30665 uid=0 auid=0 ses=23230 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447155182.896:704446): pid=30665 uid=0 auid=0 ses=23230 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447155182.898:704447): pid=30668 uid=0 auid=0 ses=23230 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=30668 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447155182.898:704448): pid=30668 uid=0 auid=0 ses=23230 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=30668 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447155182.898:704449): pid=30668 uid=0 auid=0 ses=23230 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=30668 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447155182.900:704450): pid=30668 uid=0 auid=0 ses=23230 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447155182.922:704451): pid=30665 uid=0 auid=0 ses=23230 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447155182.922:704452): pid=30665 uid=0 auid=0 ses=23230 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447155182.926:704453): pid=30665 uid=0 auid=0 ses=23230 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447155182.926:704454): pid=30665 uid=0 auid=0 ses=23230 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447155182.926:704455): pid=30665 uid=0 auid=0 ses=23230 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=30665 suid=0 rport=36936 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447155182.926:704456): pid=30665 uid=0 auid=0 ses=23230 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=30665 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447155182.926:704457): pid=30665 uid=0 auid=0 ses=23230 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=30665 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447155182.926:704458): pid=30665 uid=0 auid=0 ses=23230 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=30665 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447155182.948:704459): pid=30676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=30676 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447155182.948:704460): pid=30676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=30676 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447155182.948:704461): pid=30676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=30676 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447155182.992:704462): pid=30675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=30676 suid=74 rport=36937 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447155182.993:704463): pid=30675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=30676 suid=74 rport=36937 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447155183.116:704464): pid=30675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=36937 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447155183.116:704465): pid=30675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=36937 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447155183.122:704466): pid=30675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447155183.122:704467): pid=30675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=30676 suid=74 rport=36937 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447155183.124:704468): pid=30675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447155183.125:704469): pid=30675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447155183.125:704470): pid=30675 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23231 res=1
type=USER_ROLE_CHANGE msg=audit(1447155183.218:704471): pid=30675 uid=0 auid=0 ses=23231 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447155183.242:704472): pid=30675 uid=0 auid=0 ses=23231 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447155183.244:704473): pid=30675 uid=0 auid=0 ses=23231 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447155183.244:704474): pid=30675 uid=0 auid=0 ses=23231 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447155183.246:704475): pid=30678 uid=0 auid=0 ses=23231 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=30678 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447155183.246:704476): pid=30678 uid=0 auid=0 ses=23231 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=30678 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447155183.246:704477): pid=30678 uid=0 auid=0 ses=23231 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=30678 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447155183.247:704478): pid=30678 uid=0 auid=0 ses=23231 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447155184.576:704479): pid=30675 uid=0 auid=0 ses=23231 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447155184.576:704480): pid=30675 uid=0 auid=0 ses=23231 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447155184.584:704481): pid=30675 uid=0 auid=0 ses=23231 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447155184.584:704482): pid=30675 uid=0 auid=0 ses=23231 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447155184.584:704483): pid=30675 uid=0 auid=0 ses=23231 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=30675 suid=0 rport=36937 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447155184.584:704484): pid=30675 uid=0 auid=0 ses=23231 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=30675 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447155184.584:704485): pid=30675 uid=0 auid=0 ses=23231 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=30675 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447155184.585:704486): pid=30675 uid=0 auid=0 ses=23231 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=30675 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447155184.616:704487): pid=30728 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=30728 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447155184.616:704488): pid=30728 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=30728 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447155184.617:704489): pid=30728 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=30728 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447155184.660:704490): pid=30727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=30728 suid=74 rport=36944 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447155184.661:704491): pid=30727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=30728 suid=74 rport=36944 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447155184.788:704492): pid=30727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=36944 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447155184.788:704493): pid=30727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=36944 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447155184.798:704494): pid=30727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447155184.799:704495): pid=30727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=30728 suid=74 rport=36944 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447155184.800:704496): pid=30727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447155184.801:704497): pid=30727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447155184.801:704498): pid=30727 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23232 res=1
type=USER_ROLE_CHANGE msg=audit(1447155184.867:704499): pid=30727 uid=0 auid=0 ses=23232 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447155184.893:704500): pid=30727 uid=0 auid=0 ses=23232 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447155184.896:704501): pid=30727 uid=0 auid=0 ses=23232 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447155184.896:704502): pid=30727 uid=0 auid=0 ses=23232 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447155184.897:704503): pid=30730 uid=0 auid=0 ses=23232 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=30730 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447155184.897:704504): pid=30730 uid=0 auid=0 ses=23232 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=30730 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447155184.897:704505): pid=30730 uid=0 auid=0 ses=23232 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=30730 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447155184.898:704506): pid=30730 uid=0 auid=0 ses=23232 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447155184.915:704507): pid=30727 uid=0 auid=0 ses=23232 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447155184.915:704508): pid=30727 uid=0 auid=0 ses=23232 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447155184.919:704509): pid=30727 uid=0 auid=0 ses=23232 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447155184.919:704510): pid=30727 uid=0 auid=0 ses=23232 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447155184.920:704511): pid=30727 uid=0 auid=0 ses=23232 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=30727 suid=0 rport=36944 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447155184.920:704512): pid=30727 uid=0 auid=0 ses=23232 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=30727 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447155184.920:704513): pid=30727 uid=0 auid=0 ses=23232 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=30727 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447155184.920:704514): pid=30727 uid=0 auid=0 ses=23232 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=30727 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447155601.445:704515): pid=32018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447155601.445:704516): pid=32018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447155601.445:704517): pid=32017 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447155601.445:704518): pid=32017 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447155601.446:704519): pid=32018 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23233 res=1
type=LOGIN msg=audit(1447155601.446:704520): pid=32017 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23234 res=1
type=USER_START msg=audit(1447155601.467:704521): pid=32018 uid=0 auid=0 ses=23233 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447155601.468:704522): pid=32018 uid=0 auid=0 ses=23233 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447155601.468:704523): pid=32017 uid=0 auid=0 ses=23234 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447155601.468:704524): pid=32017 uid=0 auid=0 ses=23234 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447155601.478:704525): pid=32018 uid=0 auid=0 ses=23233 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447155601.480:704526): pid=32018 uid=0 auid=0 ses=23233 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447155601.489:704527): pid=32017 uid=0 auid=0 ses=23234 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447155601.491:704528): pid=32017 uid=0 auid=0 ses=23234 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1447155640.757:704529): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447156201.502:704530): pid=1519 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447156201.502:704531): pid=1519 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447156201.503:704532): pid=1519 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23235 res=1
type=USER_ACCT msg=audit(1447156201.505:704533): pid=1518 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447156201.505:704534): pid=1518 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447156201.505:704535): pid=1518 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23236 res=1
type=USER_START msg=audit(1447156201.518:704536): pid=1519 uid=0 auid=0 ses=23235 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447156201.518:704537): pid=1518 uid=0 auid=0 ses=23236 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447156201.518:704538): pid=1519 uid=0 auid=0 ses=23235 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447156201.519:704539): pid=1518 uid=0 auid=0 ses=23236 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447156201.525:704540): pid=1519 uid=0 auid=0 ses=23235 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447156201.531:704541): pid=1519 uid=0 auid=0 ses=23235 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447156201.531:704542): pid=1518 uid=0 auid=0 ses=23236 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447156201.535:704543): pid=1518 uid=0 auid=0 ses=23236 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447156382.952:704544): pid=2083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=2083 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447156382.952:704545): pid=2083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=2083 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447156382.952:704546): pid=2083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=2083 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447156382.996:704547): pid=2082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=2083 suid=74 rport=38920 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447156382.997:704548): pid=2082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=2083 suid=74 rport=38920 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447156383.126:704549): pid=2082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38920 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447156383.126:704550): pid=2082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=38920 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447156383.134:704551): pid=2082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447156383.136:704552): pid=2082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2083 suid=74 rport=38920 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447156383.138:704553): pid=2082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447156383.138:704554): pid=2082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447156383.138:704555): pid=2082 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23237 res=1
type=USER_ROLE_CHANGE msg=audit(1447156383.207:704556): pid=2082 uid=0 auid=0 ses=23237 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447156383.229:704557): pid=2082 uid=0 auid=0 ses=23237 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447156383.231:704558): pid=2082 uid=0 auid=0 ses=23237 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447156383.231:704559): pid=2082 uid=0 auid=0 ses=23237 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447156383.233:704560): pid=2085 uid=0 auid=0 ses=23237 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=2085 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447156383.233:704561): pid=2085 uid=0 auid=0 ses=23237 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=2085 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447156383.233:704562): pid=2085 uid=0 auid=0 ses=23237 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=2085 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447156383.234:704563): pid=2085 uid=0 auid=0 ses=23237 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447156383.255:704564): pid=2082 uid=0 auid=0 ses=23237 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447156383.255:704565): pid=2082 uid=0 auid=0 ses=23237 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447156383.260:704566): pid=2082 uid=0 auid=0 ses=23237 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447156383.260:704567): pid=2082 uid=0 auid=0 ses=23237 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447156383.261:704568): pid=2082 uid=0 auid=0 ses=23237 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2082 suid=0 rport=38920 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447156383.261:704569): pid=2082 uid=0 auid=0 ses=23237 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=2082 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447156383.261:704570): pid=2082 uid=0 auid=0 ses=23237 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=2082 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447156383.261:704571): pid=2082 uid=0 auid=0 ses=23237 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=2082 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447156383.284:704572): pid=2093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=2093 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447156383.284:704573): pid=2093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=2093 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447156383.284:704574): pid=2093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=2093 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447156383.328:704575): pid=2092 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=2093 suid=74 rport=38921 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447156383.329:704576): pid=2092 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=2093 suid=74 rport=38921 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447156383.455:704577): pid=2092 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38921 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447156383.455:704578): pid=2092 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=38921 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447156383.460:704579): pid=2092 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447156383.461:704580): pid=2092 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2093 suid=74 rport=38921 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447156383.462:704581): pid=2092 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447156383.463:704582): pid=2092 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447156383.463:704583): pid=2092 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23238 res=1
type=USER_ROLE_CHANGE msg=audit(1447156383.526:704584): pid=2092 uid=0 auid=0 ses=23238 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447156383.543:704585): pid=2092 uid=0 auid=0 ses=23238 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447156383.546:704586): pid=2092 uid=0 auid=0 ses=23238 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447156383.546:704587): pid=2092 uid=0 auid=0 ses=23238 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447156383.547:704588): pid=2095 uid=0 auid=0 ses=23238 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=2095 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447156383.547:704589): pid=2095 uid=0 auid=0 ses=23238 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=2095 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447156383.547:704590): pid=2095 uid=0 auid=0 ses=23238 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=2095 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447156383.548:704591): pid=2095 uid=0 auid=0 ses=23238 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447156384.831:704592): pid=2092 uid=0 auid=0 ses=23238 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447156384.832:704593): pid=2092 uid=0 auid=0 ses=23238 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447156384.836:704594): pid=2092 uid=0 auid=0 ses=23238 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447156384.836:704595): pid=2092 uid=0 auid=0 ses=23238 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447156384.837:704596): pid=2092 uid=0 auid=0 ses=23238 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2092 suid=0 rport=38921 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447156384.837:704597): pid=2092 uid=0 auid=0 ses=23238 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=2092 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447156384.837:704598): pid=2092 uid=0 auid=0 ses=23238 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=2092 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447156384.837:704599): pid=2092 uid=0 auid=0 ses=23238 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=2092 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447156384.867:704600): pid=2145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=2145 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447156384.867:704601): pid=2145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=2145 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447156384.867:704602): pid=2145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=2145 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447156384.911:704603): pid=2144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=2145 suid=74 rport=38927 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447156384.912:704604): pid=2144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=2145 suid=74 rport=38927 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447156385.040:704605): pid=2144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38927 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447156385.040:704606): pid=2144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=38927 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447156385.050:704607): pid=2144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447156385.051:704608): pid=2144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2145 suid=74 rport=38927 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447156385.052:704609): pid=2144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447156385.052:704610): pid=2144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447156385.053:704611): pid=2144 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23239 res=1
type=USER_ROLE_CHANGE msg=audit(1447156385.117:704612): pid=2144 uid=0 auid=0 ses=23239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447156385.139:704613): pid=2144 uid=0 auid=0 ses=23239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447156385.142:704614): pid=2144 uid=0 auid=0 ses=23239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447156385.142:704615): pid=2144 uid=0 auid=0 ses=23239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447156385.144:704616): pid=2147 uid=0 auid=0 ses=23239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=2147 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447156385.144:704617): pid=2147 uid=0 auid=0 ses=23239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=2147 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447156385.144:704618): pid=2147 uid=0 auid=0 ses=23239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=2147 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447156385.145:704619): pid=2147 uid=0 auid=0 ses=23239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447156385.163:704620): pid=2144 uid=0 auid=0 ses=23239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447156385.163:704621): pid=2144 uid=0 auid=0 ses=23239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447156385.167:704622): pid=2144 uid=0 auid=0 ses=23239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447156385.167:704623): pid=2144 uid=0 auid=0 ses=23239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447156385.167:704624): pid=2144 uid=0 auid=0 ses=23239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2144 suid=0 rport=38927 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447156385.167:704625): pid=2144 uid=0 auid=0 ses=23239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=2144 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447156385.167:704626): pid=2144 uid=0 auid=0 ses=23239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=2144 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447156385.167:704627): pid=2144 uid=0 auid=0 ses=23239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=2144 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=SYSCALL msg=audit(1447156721.758:704628): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447156801.555:704630): pid=3435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447156801.554:704629): pid=3436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447156801.555:704631): pid=3436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447156801.555:704632): pid=3435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447156801.556:704633): pid=3436 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23240 res=1
type=LOGIN msg=audit(1447156801.556:704634): pid=3435 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23241 res=1
type=USER_START msg=audit(1447156801.575:704635): pid=3436 uid=0 auid=0 ses=23240 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447156801.576:704636): pid=3436 uid=0 auid=0 ses=23240 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447156801.576:704637): pid=3435 uid=0 auid=0 ses=23241 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447156801.576:704638): pid=3435 uid=0 auid=0 ses=23241 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447156801.584:704639): pid=3436 uid=0 auid=0 ses=23240 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447156801.586:704640): pid=3436 uid=0 auid=0 ses=23240 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447156801.592:704641): pid=3435 uid=0 auid=0 ses=23241 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447156801.593:704642): pid=3435 uid=0 auid=0 ses=23241 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447156861.602:704643): pid=3671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447156861.602:704644): pid=3671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447156861.602:704645): pid=3671 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23242 res=1
type=USER_START msg=audit(1447156861.612:704646): pid=3671 uid=0 auid=0 ses=23242 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447156861.612:704647): pid=3671 uid=0 auid=0 ses=23242 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447156861.638:704648): pid=3671 uid=0 auid=0 ses=23242 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447156861.639:704649): pid=3671 uid=0 auid=0 ses=23242 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447157401.652:704650): pid=5340 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447157401.652:704651): pid=5340 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447157401.652:704652): pid=5339 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447157401.652:704653): pid=5340 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23243 res=1
type=CRED_ACQ msg=audit(1447157401.652:704654): pid=5339 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447157401.652:704655): pid=5339 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23244 res=1
type=USER_START msg=audit(1447157401.666:704656): pid=5340 uid=0 auid=0 ses=23243 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447157401.667:704657): pid=5340 uid=0 auid=0 ses=23243 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447157401.667:704658): pid=5339 uid=0 auid=0 ses=23244 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447157401.667:704659): pid=5339 uid=0 auid=0 ses=23244 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447157401.675:704660): pid=5340 uid=0 auid=0 ses=23243 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447157401.676:704661): pid=5340 uid=0 auid=0 ses=23243 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447157401.678:704662): pid=5339 uid=0 auid=0 ses=23244 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447157426.706:704663): pid=5339 uid=0 auid=0 ses=23244 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=CRYPTO_KEY_USER msg=audit(1447157582.973:704664): pid=5910 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=5910 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447157582.973:704665): pid=5910 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=5910 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447157582.974:704666): pid=5910 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=5910 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447157583.018:704667): pid=5909 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=5910 suid=74 rport=40905 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447157583.018:704668): pid=5909 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=5910 suid=74 rport=40905 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447157583.147:704669): pid=5909 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=40905 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447157583.147:704670): pid=5909 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=40905 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447157583.156:704671): pid=5909 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447157583.158:704672): pid=5909 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5910 suid=74 rport=40905 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447157583.159:704673): pid=5909 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447157583.159:704674): pid=5909 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447157583.159:704675): pid=5909 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23245 res=1
type=USER_ROLE_CHANGE msg=audit(1447157583.230:704676): pid=5909 uid=0 auid=0 ses=23245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447157583.248:704677): pid=5909 uid=0 auid=0 ses=23245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447157583.251:704678): pid=5909 uid=0 auid=0 ses=23245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447157583.251:704679): pid=5909 uid=0 auid=0 ses=23245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447157583.252:704680): pid=5912 uid=0 auid=0 ses=23245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=5912 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447157583.253:704681): pid=5912 uid=0 auid=0 ses=23245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=5912 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447157583.253:704682): pid=5912 uid=0 auid=0 ses=23245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=5912 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447157583.253:704683): pid=5912 uid=0 auid=0 ses=23245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447157583.270:704684): pid=5909 uid=0 auid=0 ses=23245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447157583.270:704685): pid=5909 uid=0 auid=0 ses=23245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447157583.273:704686): pid=5909 uid=0 auid=0 ses=23245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447157583.273:704687): pid=5909 uid=0 auid=0 ses=23245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447157583.274:704688): pid=5909 uid=0 auid=0 ses=23245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5909 suid=0 rport=40905 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447157583.274:704689): pid=5909 uid=0 auid=0 ses=23245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=5909 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447157583.274:704690): pid=5909 uid=0 auid=0 ses=23245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=5909 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447157583.274:704691): pid=5909 uid=0 auid=0 ses=23245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=5909 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447157583.299:704692): pid=5920 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=5920 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447157583.299:704693): pid=5920 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=5920 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447157583.299:704694): pid=5920 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=5920 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447157583.344:704695): pid=5919 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=5920 suid=74 rport=40906 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447157583.344:704696): pid=5919 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=5920 suid=74 rport=40906 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447157583.473:704697): pid=5919 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=40906 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447157583.473:704698): pid=5919 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=40906 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447157583.482:704699): pid=5919 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447157583.483:704700): pid=5919 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5920 suid=74 rport=40906 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447157583.484:704701): pid=5919 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447157583.484:704702): pid=5919 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447157583.484:704703): pid=5919 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23246 res=1
type=USER_ROLE_CHANGE msg=audit(1447157583.550:704704): pid=5919 uid=0 auid=0 ses=23246 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447157583.570:704705): pid=5919 uid=0 auid=0 ses=23246 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447157583.573:704706): pid=5919 uid=0 auid=0 ses=23246 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447157583.573:704707): pid=5919 uid=0 auid=0 ses=23246 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447157583.575:704708): pid=5922 uid=0 auid=0 ses=23246 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=5922 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447157583.575:704709): pid=5922 uid=0 auid=0 ses=23246 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=5922 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447157583.575:704710): pid=5922 uid=0 auid=0 ses=23246 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=5922 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447157583.575:704711): pid=5922 uid=0 auid=0 ses=23246 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447157584.864:704712): pid=5919 uid=0 auid=0 ses=23246 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447157584.864:704713): pid=5919 uid=0 auid=0 ses=23246 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447157584.868:704714): pid=5919 uid=0 auid=0 ses=23246 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447157584.868:704715): pid=5919 uid=0 auid=0 ses=23246 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447157584.869:704716): pid=5919 uid=0 auid=0 ses=23246 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5919 suid=0 rport=40906 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447157584.869:704717): pid=5919 uid=0 auid=0 ses=23246 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=5919 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447157584.869:704718): pid=5919 uid=0 auid=0 ses=23246 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=5919 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447157584.869:704719): pid=5919 uid=0 auid=0 ses=23246 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=5919 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447157584.901:704720): pid=5972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=5972 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447157584.901:704721): pid=5972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=5972 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447157584.901:704722): pid=5972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=5972 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447157584.945:704723): pid=5971 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=5972 suid=74 rport=40909 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447157584.946:704724): pid=5971 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=5972 suid=74 rport=40909 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447157585.069:704725): pid=5971 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=40909 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447157585.069:704726): pid=5971 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=40909 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447157585.075:704727): pid=5971 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447157585.077:704728): pid=5971 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5972 suid=74 rport=40909 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447157585.079:704729): pid=5971 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447157585.079:704730): pid=5971 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447157585.079:704731): pid=5971 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23247 res=1
type=USER_ROLE_CHANGE msg=audit(1447157585.141:704732): pid=5971 uid=0 auid=0 ses=23247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447157585.165:704733): pid=5971 uid=0 auid=0 ses=23247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447157585.167:704734): pid=5971 uid=0 auid=0 ses=23247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447157585.167:704735): pid=5971 uid=0 auid=0 ses=23247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447157585.169:704736): pid=5974 uid=0 auid=0 ses=23247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=5974 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447157585.169:704737): pid=5974 uid=0 auid=0 ses=23247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=5974 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447157585.169:704738): pid=5974 uid=0 auid=0 ses=23247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=5974 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447157585.170:704739): pid=5974 uid=0 auid=0 ses=23247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447157585.184:704740): pid=5971 uid=0 auid=0 ses=23247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447157585.184:704741): pid=5971 uid=0 auid=0 ses=23247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447157585.187:704742): pid=5971 uid=0 auid=0 ses=23247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447157585.187:704743): pid=5971 uid=0 auid=0 ses=23247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447157585.188:704744): pid=5971 uid=0 auid=0 ses=23247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5971 suid=0 rport=40909 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447157585.188:704745): pid=5971 uid=0 auid=0 ses=23247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=5971 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447157585.188:704746): pid=5971 uid=0 auid=0 ses=23247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=5971 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447157585.188:704747): pid=5971 uid=0 auid=0 ses=23247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=5971 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=SYSCALL msg=audit(1447157745.747:704748): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447158001.727:704749): pid=7263 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447158001.727:704750): pid=7263 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447158001.728:704751): pid=7263 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23248 res=1
type=USER_ACCT msg=audit(1447158001.730:704752): pid=7264 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447158001.730:704753): pid=7264 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447158001.731:704754): pid=7264 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23249 res=1
type=USER_START msg=audit(1447158001.750:704755): pid=7263 uid=0 auid=0 ses=23248 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447158001.750:704756): pid=7264 uid=0 auid=0 ses=23249 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447158001.751:704758): pid=7264 uid=0 auid=0 ses=23249 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447158001.751:704757): pid=7263 uid=0 auid=0 ses=23248 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447158001.762:704759): pid=7264 uid=0 auid=0 ses=23249 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447158001.764:704760): pid=7264 uid=0 auid=0 ses=23249 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447158001.766:704761): pid=7263 uid=0 auid=0 ses=23248 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447158001.768:704762): pid=7263 uid=0 auid=0 ses=23248 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447158601.784:704763): pid=9088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447158601.785:704764): pid=9088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447158601.785:704765): pid=9088 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23250 res=1
type=USER_ACCT msg=audit(1447158601.786:704766): pid=9089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447158601.786:704767): pid=9089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447158601.786:704768): pid=9089 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23251 res=1
type=USER_START msg=audit(1447158601.802:704769): pid=9089 uid=0 auid=0 ses=23251 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447158601.802:704770): pid=9088 uid=0 auid=0 ses=23250 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447158601.802:704771): pid=9089 uid=0 auid=0 ses=23251 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447158601.802:704772): pid=9088 uid=0 auid=0 ses=23250 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447158601.807:704773): pid=9089 uid=0 auid=0 ses=23251 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447158601.809:704774): pid=9089 uid=0 auid=0 ses=23251 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447158601.813:704775): pid=9088 uid=0 auid=0 ses=23250 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447158601.816:704776): pid=9088 uid=0 auid=0 ses=23250 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447158782.425:704777): pid=9652 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=9652 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447158782.425:704778): pid=9652 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=9652 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447158782.426:704779): pid=9652 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=9652 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447158782.470:704780): pid=9651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=9652 suid=74 rport=42891 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447158782.470:704781): pid=9651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=9652 suid=74 rport=42891 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447158782.600:704782): pid=9651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42891 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447158782.600:704783): pid=9651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=42891 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447158782.606:704784): pid=9651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447158782.608:704785): pid=9651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9652 suid=74 rport=42891 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447158782.612:704786): pid=9651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447158782.612:704787): pid=9651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447158782.612:704788): pid=9651 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23252 res=1
type=USER_ROLE_CHANGE msg=audit(1447158782.681:704789): pid=9651 uid=0 auid=0 ses=23252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447158782.707:704790): pid=9651 uid=0 auid=0 ses=23252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447158782.710:704791): pid=9651 uid=0 auid=0 ses=23252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447158782.710:704792): pid=9651 uid=0 auid=0 ses=23252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447158782.711:704793): pid=9654 uid=0 auid=0 ses=23252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=9654 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447158782.711:704794): pid=9654 uid=0 auid=0 ses=23252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=9654 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447158782.711:704795): pid=9654 uid=0 auid=0 ses=23252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=9654 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447158782.712:704796): pid=9654 uid=0 auid=0 ses=23252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447158782.736:704797): pid=9651 uid=0 auid=0 ses=23252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447158782.736:704798): pid=9651 uid=0 auid=0 ses=23252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447158782.741:704799): pid=9651 uid=0 auid=0 ses=23252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447158782.741:704800): pid=9651 uid=0 auid=0 ses=23252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447158782.741:704801): pid=9651 uid=0 auid=0 ses=23252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9651 suid=0 rport=42891 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447158782.741:704802): pid=9651 uid=0 auid=0 ses=23252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=9651 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447158782.742:704803): pid=9651 uid=0 auid=0 ses=23252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=9651 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447158782.742:704804): pid=9651 uid=0 auid=0 ses=23252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=9651 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447158782.760:704805): pid=9662 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=9662 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447158782.760:704806): pid=9662 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=9662 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447158782.761:704807): pid=9662 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=9662 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447158782.806:704808): pid=9661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=9662 suid=74 rport=42893 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447158782.806:704809): pid=9661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=9662 suid=74 rport=42893 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447158782.935:704810): pid=9661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42893 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447158782.935:704811): pid=9661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=42893 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447158782.945:704812): pid=9661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447158782.946:704813): pid=9661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9662 suid=74 rport=42893 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447158782.947:704814): pid=9661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447158782.947:704815): pid=9661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447158782.947:704816): pid=9661 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23253 res=1
type=USER_ROLE_CHANGE msg=audit(1447158783.017:704817): pid=9661 uid=0 auid=0 ses=23253 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447158783.037:704818): pid=9661 uid=0 auid=0 ses=23253 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447158783.039:704819): pid=9661 uid=0 auid=0 ses=23253 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447158783.039:704820): pid=9661 uid=0 auid=0 ses=23253 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447158783.041:704821): pid=9664 uid=0 auid=0 ses=23253 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=9664 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447158783.041:704822): pid=9664 uid=0 auid=0 ses=23253 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=9664 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447158783.041:704823): pid=9664 uid=0 auid=0 ses=23253 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=9664 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447158783.042:704824): pid=9664 uid=0 auid=0 ses=23253 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447158784.306:704825): pid=9661 uid=0 auid=0 ses=23253 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447158784.306:704826): pid=9661 uid=0 auid=0 ses=23253 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447158784.310:704827): pid=9661 uid=0 auid=0 ses=23253 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447158784.311:704828): pid=9661 uid=0 auid=0 ses=23253 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447158784.311:704829): pid=9661 uid=0 auid=0 ses=23253 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9661 suid=0 rport=42893 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447158784.311:704830): pid=9661 uid=0 auid=0 ses=23253 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=9661 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447158784.311:704831): pid=9661 uid=0 auid=0 ses=23253 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=9661 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447158784.311:704832): pid=9661 uid=0 auid=0 ses=23253 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=9661 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447158784.346:704833): pid=9736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=9736 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447158784.346:704834): pid=9736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=9736 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447158784.346:704835): pid=9736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=9736 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447158784.391:704836): pid=9735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=9736 suid=74 rport=42900 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447158784.391:704837): pid=9735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=9736 suid=74 rport=42900 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447158784.520:704838): pid=9735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42900 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447158784.520:704839): pid=9735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=42900 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447158784.531:704840): pid=9735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447158784.532:704841): pid=9735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9736 suid=74 rport=42900 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447158784.533:704842): pid=9735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447158784.534:704843): pid=9735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447158784.534:704844): pid=9735 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23254 res=1
type=USER_ROLE_CHANGE msg=audit(1447158784.601:704845): pid=9735 uid=0 auid=0 ses=23254 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447158784.624:704846): pid=9735 uid=0 auid=0 ses=23254 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447158784.627:704847): pid=9735 uid=0 auid=0 ses=23254 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447158784.627:704848): pid=9735 uid=0 auid=0 ses=23254 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447158784.628:704849): pid=9738 uid=0 auid=0 ses=23254 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=9738 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447158784.628:704850): pid=9738 uid=0 auid=0 ses=23254 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=9738 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447158784.628:704851): pid=9738 uid=0 auid=0 ses=23254 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=9738 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447158784.629:704852): pid=9738 uid=0 auid=0 ses=23254 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447158784.647:704853): pid=9735 uid=0 auid=0 ses=23254 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447158784.647:704854): pid=9735 uid=0 auid=0 ses=23254 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447158784.652:704855): pid=9735 uid=0 auid=0 ses=23254 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447158784.652:704856): pid=9735 uid=0 auid=0 ses=23254 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447158784.653:704857): pid=9735 uid=0 auid=0 ses=23254 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9735 suid=0 rport=42900 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447158784.653:704858): pid=9735 uid=0 auid=0 ses=23254 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=9735 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447158784.653:704859): pid=9735 uid=0 auid=0 ses=23254 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=9735 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447158784.653:704860): pid=9735 uid=0 auid=0 ses=23254 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=9735 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447159201.835:704861): pid=10963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447159201.835:704862): pid=10963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447159201.835:704863): pid=10962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447159201.835:704864): pid=10962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447159201.836:704865): pid=10963 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23255 res=1
type=LOGIN msg=audit(1447159201.836:704866): pid=10962 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23256 res=1
type=USER_START msg=audit(1447159201.852:704867): pid=10963 uid=0 auid=0 ses=23255 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447159201.852:704868): pid=10962 uid=0 auid=0 ses=23256 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447159201.853:704869): pid=10962 uid=0 auid=0 ses=23256 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447159201.853:704870): pid=10963 uid=0 auid=0 ses=23255 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447159201.860:704871): pid=10963 uid=0 auid=0 ses=23255 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447159201.863:704872): pid=10963 uid=0 auid=0 ses=23255 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447159201.871:704873): pid=10962 uid=0 auid=0 ses=23256 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447159201.873:704874): pid=10962 uid=0 auid=0 ses=23256 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447159801.885:704875): pid=12809 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447159801.885:704876): pid=12810 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447159801.885:704877): pid=12809 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447159801.885:704878): pid=12810 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447159801.886:704879): pid=12810 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23257 res=1
type=LOGIN msg=audit(1447159801.886:704880): pid=12809 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23258 res=1
type=USER_START msg=audit(1447159801.904:704881): pid=12810 uid=0 auid=0 ses=23257 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447159801.904:704882): pid=12809 uid=0 auid=0 ses=23258 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447159801.904:704883): pid=12809 uid=0 auid=0 ses=23258 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447159801.904:704884): pid=12810 uid=0 auid=0 ses=23257 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447159801.912:704885): pid=12810 uid=0 auid=0 ses=23257 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447159801.913:704886): pid=12810 uid=0 auid=0 ses=23257 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447159801.919:704887): pid=12809 uid=0 auid=0 ses=23258 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447159801.920:704888): pid=12809 uid=0 auid=0 ses=23258 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1447159871.759:704889): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=CRYPTO_KEY_USER msg=audit(1447159982.516:704890): pid=13374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=13374 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447159982.516:704891): pid=13374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=13374 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447159982.516:704892): pid=13374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=13374 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447159982.561:704893): pid=13373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=13374 suid=74 rport=44871 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447159982.561:704894): pid=13373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=13374 suid=74 rport=44871 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447159982.691:704895): pid=13373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=44871 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447159982.691:704896): pid=13373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=44871 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447159982.697:704897): pid=13373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447159982.699:704898): pid=13373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13374 suid=74 rport=44871 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447159982.700:704899): pid=13373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447159982.702:704900): pid=13373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447159982.702:704901): pid=13373 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23259 res=1
type=USER_ROLE_CHANGE msg=audit(1447159982.772:704902): pid=13373 uid=0 auid=0 ses=23259 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447159982.799:704903): pid=13373 uid=0 auid=0 ses=23259 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447159982.803:704904): pid=13373 uid=0 auid=0 ses=23259 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447159982.803:704905): pid=13373 uid=0 auid=0 ses=23259 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447159982.805:704906): pid=13376 uid=0 auid=0 ses=23259 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=13376 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447159982.805:704907): pid=13376 uid=0 auid=0 ses=23259 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=13376 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447159982.805:704908): pid=13376 uid=0 auid=0 ses=23259 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=13376 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447159982.806:704909): pid=13376 uid=0 auid=0 ses=23259 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447159982.827:704910): pid=13373 uid=0 auid=0 ses=23259 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447159982.827:704911): pid=13373 uid=0 auid=0 ses=23259 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447159982.833:704912): pid=13373 uid=0 auid=0 ses=23259 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447159982.833:704913): pid=13373 uid=0 auid=0 ses=23259 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447159982.834:704914): pid=13373 uid=0 auid=0 ses=23259 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13373 suid=0 rport=44871 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447159982.834:704915): pid=13373 uid=0 auid=0 ses=23259 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=13373 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447159982.834:704916): pid=13373 uid=0 auid=0 ses=23259 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=13373 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447159982.834:704917): pid=13373 uid=0 auid=0 ses=23259 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=13373 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447159982.854:704918): pid=13384 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=13384 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447159982.855:704919): pid=13384 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=13384 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447159982.855:704920): pid=13384 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=13384 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447159982.899:704921): pid=13383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=13384 suid=74 rport=44873 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447159982.899:704922): pid=13383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=13384 suid=74 rport=44873 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447159983.028:704923): pid=13383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=44873 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447159983.028:704924): pid=13383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=44873 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447159983.037:704925): pid=13383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447159983.038:704926): pid=13383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13384 suid=74 rport=44873 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447159983.040:704927): pid=13383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447159983.040:704928): pid=13383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447159983.041:704929): pid=13383 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23260 res=1
type=USER_ROLE_CHANGE msg=audit(1447159983.105:704930): pid=13383 uid=0 auid=0 ses=23260 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447159983.129:704931): pid=13383 uid=0 auid=0 ses=23260 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447159983.131:704932): pid=13383 uid=0 auid=0 ses=23260 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447159983.131:704933): pid=13383 uid=0 auid=0 ses=23260 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447159983.133:704934): pid=13386 uid=0 auid=0 ses=23260 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=13386 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447159983.133:704935): pid=13386 uid=0 auid=0 ses=23260 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=13386 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447159983.133:704936): pid=13386 uid=0 auid=0 ses=23260 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=13386 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447159983.134:704937): pid=13386 uid=0 auid=0 ses=23260 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447159984.411:704938): pid=13383 uid=0 auid=0 ses=23260 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447159984.411:704939): pid=13383 uid=0 auid=0 ses=23260 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447159984.415:704940): pid=13383 uid=0 auid=0 ses=23260 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447159984.415:704941): pid=13383 uid=0 auid=0 ses=23260 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447159984.416:704942): pid=13383 uid=0 auid=0 ses=23260 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13383 suid=0 rport=44873 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447159984.416:704943): pid=13383 uid=0 auid=0 ses=23260 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=13383 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447159984.416:704944): pid=13383 uid=0 auid=0 ses=23260 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=13383 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447159984.416:704945): pid=13383 uid=0 auid=0 ses=23260 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=13383 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447159984.449:704946): pid=13436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=13436 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447159984.449:704947): pid=13436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=13436 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447159984.449:704948): pid=13436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=13436 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447159984.493:704949): pid=13435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=13436 suid=74 rport=44880 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447159984.493:704950): pid=13435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=13436 suid=74 rport=44880 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447159984.617:704951): pid=13435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=44880 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447159984.617:704952): pid=13435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=44880 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447159984.623:704953): pid=13435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447159984.624:704954): pid=13435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13436 suid=74 rport=44880 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447159984.625:704955): pid=13435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447159984.625:704956): pid=13435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447159984.625:704957): pid=13435 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23261 res=1
type=USER_ROLE_CHANGE msg=audit(1447159984.689:704958): pid=13435 uid=0 auid=0 ses=23261 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447159984.710:704959): pid=13435 uid=0 auid=0 ses=23261 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447159984.712:704960): pid=13435 uid=0 auid=0 ses=23261 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447159984.712:704961): pid=13435 uid=0 auid=0 ses=23261 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447159984.714:704962): pid=13438 uid=0 auid=0 ses=23261 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=13438 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447159984.714:704963): pid=13438 uid=0 auid=0 ses=23261 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=13438 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447159984.714:704964): pid=13438 uid=0 auid=0 ses=23261 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=13438 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447159984.714:704965): pid=13438 uid=0 auid=0 ses=23261 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447159984.732:704966): pid=13435 uid=0 auid=0 ses=23261 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447159984.732:704967): pid=13435 uid=0 auid=0 ses=23261 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447159984.735:704968): pid=13435 uid=0 auid=0 ses=23261 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447159984.735:704969): pid=13435 uid=0 auid=0 ses=23261 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447159984.736:704970): pid=13435 uid=0 auid=0 ses=23261 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13435 suid=0 rport=44880 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447159984.736:704971): pid=13435 uid=0 auid=0 ses=23261 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=13435 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447159984.736:704972): pid=13435 uid=0 auid=0 ses=23261 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=13435 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447159984.736:704973): pid=13435 uid=0 auid=0 ses=23261 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=13435 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447160401.939:704975): pid=14844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447160401.939:704974): pid=14845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447160401.939:704976): pid=14844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447160401.939:704977): pid=14845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447160401.940:704978): pid=14844 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23262 res=1
type=LOGIN msg=audit(1447160401.940:704979): pid=14845 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23263 res=1
type=USER_START msg=audit(1447160401.959:704980): pid=14844 uid=0 auid=0 ses=23262 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447160401.960:704981): pid=14844 uid=0 auid=0 ses=23262 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447160401.961:704982): pid=14845 uid=0 auid=0 ses=23263 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447160401.961:704983): pid=14845 uid=0 auid=0 ses=23263 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447160401.969:704984): pid=14845 uid=0 auid=0 ses=23263 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447160401.971:704985): pid=14845 uid=0 auid=0 ses=23263 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447160401.976:704986): pid=14844 uid=0 auid=0 ses=23262 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447160401.978:704987): pid=14844 uid=0 auid=0 ses=23262 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447160461.985:704988): pid=15082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447160461.985:704989): pid=15082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447160461.986:704990): pid=15082 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23264 res=1
type=USER_START msg=audit(1447160461.996:704991): pid=15082 uid=0 auid=0 ses=23264 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447160461.996:704992): pid=15082 uid=0 auid=0 ses=23264 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447160462.021:704993): pid=15082 uid=0 auid=0 ses=23264 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447160462.023:704994): pid=15082 uid=0 auid=0 ses=23264 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1447160898.758:704995): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447161001.041:704996): pid=16751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447161001.041:704997): pid=16751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447161001.041:704998): pid=16750 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447161001.041:704999): pid=16751 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23265 res=1
type=CRED_ACQ msg=audit(1447161001.041:705000): pid=16750 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447161001.041:705001): pid=16750 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23266 res=1
type=USER_START msg=audit(1447161001.055:705002): pid=16750 uid=0 auid=0 ses=23266 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447161001.056:705003): pid=16750 uid=0 auid=0 ses=23266 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447161001.057:705004): pid=16751 uid=0 auid=0 ses=23265 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447161001.057:705005): pid=16751 uid=0 auid=0 ses=23265 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447161001.066:705006): pid=16751 uid=0 auid=0 ses=23265 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447161001.067:705007): pid=16750 uid=0 auid=0 ses=23266 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447161001.068:705008): pid=16751 uid=0 auid=0 ses=23265 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447161001.071:705009): pid=16750 uid=0 auid=0 ses=23266 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447161182.929:705010): pid=17320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=17320 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447161182.930:705011): pid=17320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=17320 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447161182.930:705012): pid=17320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=17320 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447161182.973:705013): pid=17319 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=17320 suid=74 rport=46852 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447161182.973:705014): pid=17319 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=17320 suid=74 rport=46852 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447161183.102:705015): pid=17319 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=46852 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447161183.102:705016): pid=17319 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=46852 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447161183.107:705017): pid=17319 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447161183.108:705018): pid=17319 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=17320 suid=74 rport=46852 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447161183.109:705019): pid=17319 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447161183.109:705020): pid=17319 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447161183.109:705021): pid=17319 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23267 res=1
type=USER_ROLE_CHANGE msg=audit(1447161183.178:705022): pid=17319 uid=0 auid=0 ses=23267 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447161183.198:705023): pid=17319 uid=0 auid=0 ses=23267 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447161183.201:705024): pid=17319 uid=0 auid=0 ses=23267 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447161183.201:705025): pid=17319 uid=0 auid=0 ses=23267 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447161183.203:705026): pid=17322 uid=0 auid=0 ses=23267 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=17322 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447161183.203:705027): pid=17322 uid=0 auid=0 ses=23267 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=17322 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447161183.203:705028): pid=17322 uid=0 auid=0 ses=23267 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=17322 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447161183.204:705029): pid=17322 uid=0 auid=0 ses=23267 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447161183.222:705030): pid=17319 uid=0 auid=0 ses=23267 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447161183.222:705031): pid=17319 uid=0 auid=0 ses=23267 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447161183.226:705032): pid=17319 uid=0 auid=0 ses=23267 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447161183.226:705033): pid=17319 uid=0 auid=0 ses=23267 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447161183.226:705034): pid=17319 uid=0 auid=0 ses=23267 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=17319 suid=0 rport=46852 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447161183.226:705035): pid=17319 uid=0 auid=0 ses=23267 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=17319 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447161183.226:705036): pid=17319 uid=0 auid=0 ses=23267 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=17319 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447161183.226:705037): pid=17319 uid=0 auid=0 ses=23267 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=17319 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447161183.250:705038): pid=17330 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=17330 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447161183.250:705039): pid=17330 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=17330 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447161183.250:705040): pid=17330 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=17330 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447161183.295:705041): pid=17329 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=17330 suid=74 rport=46853 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447161183.295:705042): pid=17329 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=17330 suid=74 rport=46853 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447161183.421:705043): pid=17329 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=46853 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447161183.421:705044): pid=17329 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=46853 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447161183.425:705045): pid=17329 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447161183.426:705046): pid=17329 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=17330 suid=74 rport=46853 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447161183.427:705047): pid=17329 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447161183.427:705048): pid=17329 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447161183.427:705049): pid=17329 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23268 res=1
type=USER_ROLE_CHANGE msg=audit(1447161183.490:705050): pid=17329 uid=0 auid=0 ses=23268 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447161183.512:705051): pid=17329 uid=0 auid=0 ses=23268 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447161183.515:705052): pid=17329 uid=0 auid=0 ses=23268 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447161183.516:705053): pid=17329 uid=0 auid=0 ses=23268 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447161183.517:705054): pid=17332 uid=0 auid=0 ses=23268 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=17332 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447161183.517:705055): pid=17332 uid=0 auid=0 ses=23268 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=17332 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447161183.517:705056): pid=17332 uid=0 auid=0 ses=23268 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=17332 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447161183.518:705057): pid=17332 uid=0 auid=0 ses=23268 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447161184.787:705058): pid=17329 uid=0 auid=0 ses=23268 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447161184.787:705059): pid=17329 uid=0 auid=0 ses=23268 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447161184.791:705060): pid=17329 uid=0 auid=0 ses=23268 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447161184.791:705061): pid=17329 uid=0 auid=0 ses=23268 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447161184.792:705062): pid=17329 uid=0 auid=0 ses=23268 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=17329 suid=0 rport=46853 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447161184.792:705063): pid=17329 uid=0 auid=0 ses=23268 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=17329 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447161184.792:705064): pid=17329 uid=0 auid=0 ses=23268 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=17329 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447161184.792:705065): pid=17329 uid=0 auid=0 ses=23268 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=17329 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447161184.828:705066): pid=17382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=17382 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447161184.828:705067): pid=17382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=17382 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447161184.828:705068): pid=17382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=17382 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447161184.872:705069): pid=17381 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=17382 suid=74 rport=46861 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447161184.873:705070): pid=17381 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=17382 suid=74 rport=46861 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447161185.002:705071): pid=17381 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=46861 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447161185.002:705072): pid=17381 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=46861 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447161185.011:705073): pid=17381 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447161185.012:705074): pid=17381 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=17382 suid=74 rport=46861 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447161185.014:705075): pid=17381 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447161185.014:705076): pid=17381 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447161185.014:705077): pid=17381 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23269 res=1
type=USER_ROLE_CHANGE msg=audit(1447161185.077:705078): pid=17381 uid=0 auid=0 ses=23269 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447161185.099:705079): pid=17381 uid=0 auid=0 ses=23269 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447161185.102:705080): pid=17381 uid=0 auid=0 ses=23269 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447161185.102:705081): pid=17381 uid=0 auid=0 ses=23269 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447161185.103:705082): pid=17384 uid=0 auid=0 ses=23269 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=17384 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447161185.104:705083): pid=17384 uid=0 auid=0 ses=23269 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=17384 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447161185.104:705084): pid=17384 uid=0 auid=0 ses=23269 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=17384 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447161185.104:705085): pid=17384 uid=0 auid=0 ses=23269 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447161185.122:705086): pid=17381 uid=0 auid=0 ses=23269 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447161185.122:705087): pid=17381 uid=0 auid=0 ses=23269 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447161185.127:705088): pid=17381 uid=0 auid=0 ses=23269 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447161185.127:705089): pid=17381 uid=0 auid=0 ses=23269 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447161185.128:705090): pid=17381 uid=0 auid=0 ses=23269 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=17381 suid=0 rport=46861 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447161185.128:705091): pid=17381 uid=0 auid=0 ses=23269 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=17381 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447161185.128:705092): pid=17381 uid=0 auid=0 ses=23269 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=17381 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447161185.128:705093): pid=17381 uid=0 auid=0 ses=23269 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=17381 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447161601.090:705094): pid=18673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447161601.090:705095): pid=18674 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447161601.090:705096): pid=18673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447161601.090:705097): pid=18674 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447161601.091:705098): pid=18674 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23270 res=1
type=LOGIN msg=audit(1447161601.091:705099): pid=18673 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23271 res=1
type=USER_START msg=audit(1447161601.112:705100): pid=18674 uid=0 auid=0 ses=23270 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447161601.112:705101): pid=18673 uid=0 auid=0 ses=23271 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447161601.112:705102): pid=18673 uid=0 auid=0 ses=23271 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447161601.112:705103): pid=18674 uid=0 auid=0 ses=23270 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447161601.121:705104): pid=18674 uid=0 auid=0 ses=23270 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447161601.123:705105): pid=18674 uid=0 auid=0 ses=23270 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447161601.134:705106): pid=18673 uid=0 auid=0 ses=23271 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447161601.135:705107): pid=18673 uid=0 auid=0 ses=23271 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447162201.155:705108): pid=20518 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447162201.155:705109): pid=20517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447162201.155:705111): pid=20517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447162201.155:705110): pid=20518 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447162201.155:705112): pid=20518 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23272 res=1
type=LOGIN msg=audit(1447162201.155:705113): pid=20517 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23273 res=1
type=USER_START msg=audit(1447162201.171:705114): pid=20517 uid=0 auid=0 ses=23273 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447162201.171:705115): pid=20517 uid=0 auid=0 ses=23273 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447162201.172:705116): pid=20518 uid=0 auid=0 ses=23272 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447162201.172:705117): pid=20518 uid=0 auid=0 ses=23272 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447162201.179:705118): pid=20518 uid=0 auid=0 ses=23272 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447162201.180:705119): pid=20518 uid=0 auid=0 ses=23272 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447162201.183:705120): pid=20517 uid=0 auid=0 ses=23273 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447162226.209:705121): pid=20517 uid=0 auid=0 ses=23273 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=CRYPTO_KEY_USER msg=audit(1447162382.774:705122): pid=21084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=21084 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447162382.774:705123): pid=21084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=21084 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447162382.774:705124): pid=21084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=21084 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447162382.820:705125): pid=21083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=21084 suid=74 rport=48833 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447162382.820:705126): pid=21083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=21084 suid=74 rport=48833 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447162382.950:705127): pid=21083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=48833 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447162382.950:705128): pid=21083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=48833 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447162382.956:705129): pid=21083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447162382.958:705130): pid=21083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21084 suid=74 rport=48833 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447162382.961:705131): pid=21083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447162382.961:705132): pid=21083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447162382.961:705133): pid=21083 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23274 res=1
type=USER_ROLE_CHANGE msg=audit(1447162383.031:705134): pid=21083 uid=0 auid=0 ses=23274 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447162383.058:705135): pid=21083 uid=0 auid=0 ses=23274 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447162383.060:705136): pid=21083 uid=0 auid=0 ses=23274 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447162383.060:705137): pid=21083 uid=0 auid=0 ses=23274 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447162383.062:705138): pid=21086 uid=0 auid=0 ses=23274 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=21086 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447162383.062:705139): pid=21086 uid=0 auid=0 ses=23274 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=21086 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447162383.062:705140): pid=21086 uid=0 auid=0 ses=23274 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=21086 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447162383.063:705141): pid=21086 uid=0 auid=0 ses=23274 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447162383.084:705142): pid=21083 uid=0 auid=0 ses=23274 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447162383.084:705143): pid=21083 uid=0 auid=0 ses=23274 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447162383.090:705144): pid=21083 uid=0 auid=0 ses=23274 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447162383.090:705145): pid=21083 uid=0 auid=0 ses=23274 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447162383.090:705146): pid=21083 uid=0 auid=0 ses=23274 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21083 suid=0 rport=48833 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447162383.091:705147): pid=21083 uid=0 auid=0 ses=23274 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=21083 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447162383.091:705148): pid=21083 uid=0 auid=0 ses=23274 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=21083 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447162383.091:705149): pid=21083 uid=0 auid=0 ses=23274 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=21083 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447162383.110:705150): pid=21094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=21094 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447162383.111:705151): pid=21094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=21094 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447162383.111:705152): pid=21094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=21094 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447162383.155:705153): pid=21093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=21094 suid=74 rport=48834 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447162383.155:705154): pid=21093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=21094 suid=74 rport=48834 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447162383.284:705155): pid=21093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=48834 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447162383.284:705156): pid=21093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=48834 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447162383.293:705157): pid=21093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447162383.295:705158): pid=21093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21094 suid=74 rport=48834 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447162383.296:705159): pid=21093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447162383.298:705160): pid=21093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447162383.298:705161): pid=21093 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23275 res=1
type=USER_ROLE_CHANGE msg=audit(1447162383.360:705162): pid=21093 uid=0 auid=0 ses=23275 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447162383.383:705163): pid=21093 uid=0 auid=0 ses=23275 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447162383.387:705164): pid=21093 uid=0 auid=0 ses=23275 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447162383.387:705165): pid=21093 uid=0 auid=0 ses=23275 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447162383.388:705166): pid=21096 uid=0 auid=0 ses=23275 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=21096 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447162383.388:705167): pid=21096 uid=0 auid=0 ses=23275 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=21096 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447162383.388:705168): pid=21096 uid=0 auid=0 ses=23275 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=21096 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447162383.389:705169): pid=21096 uid=0 auid=0 ses=23275 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447162384.657:705170): pid=21093 uid=0 auid=0 ses=23275 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447162384.657:705171): pid=21093 uid=0 auid=0 ses=23275 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447162384.662:705172): pid=21093 uid=0 auid=0 ses=23275 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447162384.662:705173): pid=21093 uid=0 auid=0 ses=23275 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447162384.664:705174): pid=21093 uid=0 auid=0 ses=23275 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21093 suid=0 rport=48834 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447162384.664:705175): pid=21093 uid=0 auid=0 ses=23275 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=21093 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447162384.664:705176): pid=21093 uid=0 auid=0 ses=23275 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=21093 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447162384.664:705177): pid=21093 uid=0 auid=0 ses=23275 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=21093 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447162384.698:705178): pid=21146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=21146 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447162384.698:705179): pid=21146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=21146 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447162384.698:705180): pid=21146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=21146 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447162384.743:705181): pid=21145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=21146 suid=74 rport=48842 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447162384.743:705182): pid=21145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=21146 suid=74 rport=48842 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447162384.870:705183): pid=21145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=48842 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447162384.870:705184): pid=21145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=48842 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447162384.879:705185): pid=21145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447162384.880:705186): pid=21145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21146 suid=74 rport=48842 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447162384.882:705187): pid=21145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447162384.882:705188): pid=21145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447162384.882:705189): pid=21145 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23276 res=1
type=USER_ROLE_CHANGE msg=audit(1447162384.951:705190): pid=21145 uid=0 auid=0 ses=23276 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447162384.974:705191): pid=21145 uid=0 auid=0 ses=23276 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447162384.977:705192): pid=21145 uid=0 auid=0 ses=23276 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447162384.977:705193): pid=21145 uid=0 auid=0 ses=23276 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447162384.979:705194): pid=21148 uid=0 auid=0 ses=23276 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=21148 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447162384.979:705195): pid=21148 uid=0 auid=0 ses=23276 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=21148 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447162384.979:705196): pid=21148 uid=0 auid=0 ses=23276 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=21148 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447162384.980:705197): pid=21148 uid=0 auid=0 ses=23276 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447162384.997:705198): pid=21145 uid=0 auid=0 ses=23276 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447162384.997:705199): pid=21145 uid=0 auid=0 ses=23276 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447162385.002:705200): pid=21145 uid=0 auid=0 ses=23276 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447162385.002:705201): pid=21145 uid=0 auid=0 ses=23276 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447162385.002:705202): pid=21145 uid=0 auid=0 ses=23276 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21145 suid=0 rport=48842 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447162385.002:705203): pid=21145 uid=0 auid=0 ses=23276 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=21145 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447162385.002:705204): pid=21145 uid=0 auid=0 ses=23276 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=21145 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447162385.003:705205): pid=21145 uid=0 auid=0 ses=23276 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=21145 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447162801.231:705206): pid=22436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447162801.231:705207): pid=22435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447162801.231:705208): pid=22436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447162801.231:705209): pid=22435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447162801.233:705210): pid=22436 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23277 res=1
type=LOGIN msg=audit(1447162801.233:705211): pid=22435 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23278 res=1
type=USER_START msg=audit(1447162801.253:705212): pid=22436 uid=0 auid=0 ses=23277 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447162801.253:705213): pid=22435 uid=0 auid=0 ses=23278 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447162801.254:705214): pid=22436 uid=0 auid=0 ses=23277 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447162801.254:705215): pid=22435 uid=0 auid=0 ses=23278 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447162801.265:705216): pid=22436 uid=0 auid=0 ses=23277 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447162801.266:705217): pid=22436 uid=0 auid=0 ses=23277 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447162801.268:705218): pid=22435 uid=0 auid=0 ses=23278 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447162801.270:705219): pid=22435 uid=0 auid=0 ses=23278 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1447163008.759:705220): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447163401.286:705221): pid=24282 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447163401.287:705222): pid=24282 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447163401.287:705223): pid=24283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447163401.287:705224): pid=24283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447163401.287:705225): pid=24282 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23279 res=1
type=LOGIN msg=audit(1447163401.287:705226): pid=24283 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23280 res=1
type=USER_START msg=audit(1447163401.302:705227): pid=24283 uid=0 auid=0 ses=23280 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447163401.303:705228): pid=24283 uid=0 auid=0 ses=23280 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447163401.303:705229): pid=24282 uid=0 auid=0 ses=23279 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447163401.303:705230): pid=24282 uid=0 auid=0 ses=23279 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447163401.309:705231): pid=24283 uid=0 auid=0 ses=23280 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447163401.311:705232): pid=24283 uid=0 auid=0 ses=23280 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447163401.315:705233): pid=24282 uid=0 auid=0 ses=23279 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447163401.317:705234): pid=24282 uid=0 auid=0 ses=23279 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447163582.660:705235): pid=24846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=24846 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447163582.660:705236): pid=24846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=24846 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447163582.660:705237): pid=24846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=24846 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447163582.703:705238): pid=24845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=24846 suid=74 rport=50813 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447163582.704:705239): pid=24845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=24846 suid=74 rport=50813 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447163582.826:705240): pid=24845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=50813 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447163582.826:705241): pid=24845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=50813 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447163582.830:705242): pid=24845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447163582.831:705243): pid=24845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24846 suid=74 rport=50813 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447163582.834:705244): pid=24845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447163582.834:705245): pid=24845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447163582.834:705246): pid=24845 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23281 res=1
type=USER_ROLE_CHANGE msg=audit(1447163582.907:705247): pid=24845 uid=0 auid=0 ses=23281 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447163582.927:705248): pid=24845 uid=0 auid=0 ses=23281 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447163582.930:705249): pid=24845 uid=0 auid=0 ses=23281 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447163582.930:705250): pid=24845 uid=0 auid=0 ses=23281 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447163582.932:705251): pid=24848 uid=0 auid=0 ses=23281 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=24848 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447163582.932:705252): pid=24848 uid=0 auid=0 ses=23281 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=24848 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447163582.932:705253): pid=24848 uid=0 auid=0 ses=23281 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=24848 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447163582.933:705254): pid=24848 uid=0 auid=0 ses=23281 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447163582.950:705255): pid=24845 uid=0 auid=0 ses=23281 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447163582.950:705256): pid=24845 uid=0 auid=0 ses=23281 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447163582.954:705257): pid=24845 uid=0 auid=0 ses=23281 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447163582.955:705258): pid=24845 uid=0 auid=0 ses=23281 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447163582.955:705259): pid=24845 uid=0 auid=0 ses=23281 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24845 suid=0 rport=50813 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447163582.955:705260): pid=24845 uid=0 auid=0 ses=23281 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=24845 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447163582.955:705261): pid=24845 uid=0 auid=0 ses=23281 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=24845 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447163582.955:705262): pid=24845 uid=0 auid=0 ses=23281 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=24845 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447163582.977:705263): pid=24856 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=24856 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447163582.977:705264): pid=24856 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=24856 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447163582.977:705265): pid=24856 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=24856 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447163583.021:705266): pid=24855 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=24856 suid=74 rport=50814 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447163583.022:705267): pid=24855 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=24856 suid=74 rport=50814 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447163583.148:705268): pid=24855 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=50814 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447163583.148:705269): pid=24855 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=50814 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447163583.159:705270): pid=24855 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447163583.160:705271): pid=24855 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24856 suid=74 rport=50814 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447163583.161:705272): pid=24855 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447163583.161:705273): pid=24855 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447163583.161:705274): pid=24855 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23282 res=1
type=USER_ROLE_CHANGE msg=audit(1447163583.227:705275): pid=24855 uid=0 auid=0 ses=23282 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447163583.251:705276): pid=24855 uid=0 auid=0 ses=23282 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447163583.254:705277): pid=24855 uid=0 auid=0 ses=23282 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447163583.254:705278): pid=24855 uid=0 auid=0 ses=23282 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447163583.256:705279): pid=24858 uid=0 auid=0 ses=23282 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=24858 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447163583.256:705280): pid=24858 uid=0 auid=0 ses=23282 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=24858 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447163583.256:705281): pid=24858 uid=0 auid=0 ses=23282 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=24858 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447163583.257:705282): pid=24858 uid=0 auid=0 ses=23282 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447163584.558:705283): pid=24855 uid=0 auid=0 ses=23282 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447163584.558:705284): pid=24855 uid=0 auid=0 ses=23282 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447163584.562:705285): pid=24855 uid=0 auid=0 ses=23282 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447163584.562:705286): pid=24855 uid=0 auid=0 ses=23282 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447163584.562:705287): pid=24855 uid=0 auid=0 ses=23282 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24855 suid=0 rport=50814 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447163584.562:705288): pid=24855 uid=0 auid=0 ses=23282 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=24855 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447163584.563:705289): pid=24855 uid=0 auid=0 ses=23282 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=24855 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447163584.563:705290): pid=24855 uid=0 auid=0 ses=23282 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=24855 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447163584.594:705291): pid=24908 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=24908 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447163584.594:705292): pid=24908 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=24908 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447163584.594:705293): pid=24908 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=24908 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447163584.638:705294): pid=24907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=24908 suid=74 rport=50817 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447163584.638:705295): pid=24907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=24908 suid=74 rport=50817 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447163584.759:705296): pid=24907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=50817 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447163584.759:705297): pid=24907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=50817 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447163584.765:705298): pid=24907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447163584.767:705299): pid=24907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24908 suid=74 rport=50817 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447163584.768:705300): pid=24907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447163584.768:705301): pid=24907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447163584.768:705302): pid=24907 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23283 res=1
type=USER_ROLE_CHANGE msg=audit(1447163584.832:705303): pid=24907 uid=0 auid=0 ses=23283 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447163584.856:705304): pid=24907 uid=0 auid=0 ses=23283 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447163584.860:705305): pid=24907 uid=0 auid=0 ses=23283 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447163584.860:705306): pid=24907 uid=0 auid=0 ses=23283 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447163584.861:705307): pid=24910 uid=0 auid=0 ses=23283 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=24910 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447163584.861:705308): pid=24910 uid=0 auid=0 ses=23283 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=24910 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447163584.861:705309): pid=24910 uid=0 auid=0 ses=23283 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=24910 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447163584.862:705310): pid=24910 uid=0 auid=0 ses=23283 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447163584.878:705311): pid=24907 uid=0 auid=0 ses=23283 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447163584.878:705312): pid=24907 uid=0 auid=0 ses=23283 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447163584.882:705313): pid=24907 uid=0 auid=0 ses=23283 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447163584.882:705314): pid=24907 uid=0 auid=0 ses=23283 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447163584.883:705315): pid=24907 uid=0 auid=0 ses=23283 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24907 suid=0 rport=50817 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447163584.883:705316): pid=24907 uid=0 auid=0 ses=23283 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=24907 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447163584.883:705317): pid=24907 uid=0 auid=0 ses=23283 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=24907 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447163584.883:705318): pid=24907 uid=0 auid=0 ses=23283 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=24907 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447164001.336:705319): pid=26198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447164001.336:705320): pid=26197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447164001.337:705321): pid=26198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447164001.337:705322): pid=26197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447164001.338:705323): pid=26198 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23284 res=1
type=LOGIN msg=audit(1447164001.338:705324): pid=26197 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23285 res=1
type=USER_START msg=audit(1447164001.355:705325): pid=26198 uid=0 auid=0 ses=23284 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447164001.356:705326): pid=26198 uid=0 auid=0 ses=23284 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447164001.358:705327): pid=26197 uid=0 auid=0 ses=23285 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447164001.359:705328): pid=26197 uid=0 auid=0 ses=23285 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447164001.364:705329): pid=26198 uid=0 auid=0 ses=23284 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447164001.366:705330): pid=26198 uid=0 auid=0 ses=23284 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447164001.375:705331): pid=26197 uid=0 auid=0 ses=23285 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447164001.377:705332): pid=26197 uid=0 auid=0 ses=23285 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447164061.385:705333): pid=26434 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447164061.386:705334): pid=26434 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447164061.386:705335): pid=26434 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23286 res=1
type=USER_START msg=audit(1447164061.395:705336): pid=26434 uid=0 auid=0 ses=23286 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447164061.395:705337): pid=26434 uid=0 auid=0 ses=23286 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447164061.419:705338): pid=26434 uid=0 auid=0 ses=23286 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447164061.422:705339): pid=26434 uid=0 auid=0 ses=23286 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447164601.432:705341): pid=28102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447164601.432:705340): pid=28101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447164601.432:705342): pid=28102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447164601.432:705343): pid=28101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447164601.432:705344): pid=28102 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23287 res=1
type=LOGIN msg=audit(1447164601.432:705345): pid=28101 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23288 res=1
type=USER_START msg=audit(1447164601.447:705346): pid=28102 uid=0 auid=0 ses=23287 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447164601.447:705347): pid=28102 uid=0 auid=0 ses=23287 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447164601.447:705348): pid=28101 uid=0 auid=0 ses=23288 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447164601.447:705349): pid=28101 uid=0 auid=0 ses=23288 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447164601.454:705350): pid=28102 uid=0 auid=0 ses=23287 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447164601.457:705351): pid=28102 uid=0 auid=0 ses=23287 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447164601.460:705352): pid=28101 uid=0 auid=0 ses=23288 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447164601.462:705353): pid=28101 uid=0 auid=0 ses=23288 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447164783.026:705354): pid=28672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=28672 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447164783.026:705355): pid=28672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=28672 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447164783.026:705356): pid=28672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=28672 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447164783.070:705357): pid=28671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=28672 suid=74 rport=52795 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447164783.070:705358): pid=28671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=28672 suid=74 rport=52795 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447164783.195:705359): pid=28671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52795 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447164783.195:705360): pid=28671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=52795 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447164783.201:705361): pid=28671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447164783.203:705362): pid=28671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=28672 suid=74 rport=52795 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447164783.203:705363): pid=28671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447164783.204:705364): pid=28671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447164783.204:705365): pid=28671 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23289 res=1
type=USER_ROLE_CHANGE msg=audit(1447164783.274:705366): pid=28671 uid=0 auid=0 ses=23289 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447164783.292:705367): pid=28671 uid=0 auid=0 ses=23289 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447164783.294:705368): pid=28671 uid=0 auid=0 ses=23289 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447164783.294:705369): pid=28671 uid=0 auid=0 ses=23289 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447164783.296:705370): pid=28674 uid=0 auid=0 ses=23289 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=28674 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447164783.296:705371): pid=28674 uid=0 auid=0 ses=23289 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=28674 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447164783.296:705372): pid=28674 uid=0 auid=0 ses=23289 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=28674 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447164783.297:705373): pid=28674 uid=0 auid=0 ses=23289 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447164783.317:705374): pid=28671 uid=0 auid=0 ses=23289 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447164783.318:705375): pid=28671 uid=0 auid=0 ses=23289 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447164783.322:705376): pid=28671 uid=0 auid=0 ses=23289 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447164783.322:705377): pid=28671 uid=0 auid=0 ses=23289 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447164783.322:705378): pid=28671 uid=0 auid=0 ses=23289 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=28671 suid=0 rport=52795 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447164783.323:705379): pid=28671 uid=0 auid=0 ses=23289 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=28671 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447164783.323:705380): pid=28671 uid=0 auid=0 ses=23289 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=28671 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447164783.323:705381): pid=28671 uid=0 auid=0 ses=23289 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=28671 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447164783.343:705382): pid=28682 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=28682 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447164783.343:705383): pid=28682 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=28682 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447164783.343:705384): pid=28682 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=28682 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447164783.388:705385): pid=28681 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=28682 suid=74 rport=52796 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447164783.388:705386): pid=28681 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=28682 suid=74 rport=52796 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447164783.517:705387): pid=28681 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52796 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447164783.517:705388): pid=28681 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=52796 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447164783.525:705389): pid=28681 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447164783.526:705390): pid=28681 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=28682 suid=74 rport=52796 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447164783.529:705391): pid=28681 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447164783.530:705392): pid=28681 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447164783.530:705393): pid=28681 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23290 res=1
type=USER_ROLE_CHANGE msg=audit(1447164783.594:705394): pid=28681 uid=0 auid=0 ses=23290 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447164783.615:705395): pid=28681 uid=0 auid=0 ses=23290 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447164783.618:705396): pid=28681 uid=0 auid=0 ses=23290 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447164783.618:705397): pid=28681 uid=0 auid=0 ses=23290 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447164783.620:705398): pid=28684 uid=0 auid=0 ses=23290 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=28684 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447164783.620:705399): pid=28684 uid=0 auid=0 ses=23290 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=28684 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447164783.620:705400): pid=28684 uid=0 auid=0 ses=23290 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=28684 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447164783.621:705401): pid=28684 uid=0 auid=0 ses=23290 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447164784.902:705402): pid=28681 uid=0 auid=0 ses=23290 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447164784.902:705403): pid=28681 uid=0 auid=0 ses=23290 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447164784.906:705404): pid=28681 uid=0 auid=0 ses=23290 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447164784.906:705405): pid=28681 uid=0 auid=0 ses=23290 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447164784.906:705406): pid=28681 uid=0 auid=0 ses=23290 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=28681 suid=0 rport=52796 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447164784.906:705407): pid=28681 uid=0 auid=0 ses=23290 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=28681 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447164784.906:705408): pid=28681 uid=0 auid=0 ses=23290 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=28681 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447164784.906:705409): pid=28681 uid=0 auid=0 ses=23290 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=28681 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447164784.942:705410): pid=28734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=28734 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447164784.943:705411): pid=28734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=28734 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447164784.943:705412): pid=28734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=28734 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447164784.988:705413): pid=28733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=28734 suid=74 rport=52798 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447164784.988:705414): pid=28733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=28734 suid=74 rport=52798 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447164785.118:705415): pid=28733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52798 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447164785.118:705416): pid=28733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=52798 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447164785.128:705417): pid=28733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447164785.129:705418): pid=28733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=28734 suid=74 rport=52798 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447164785.131:705419): pid=28733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447164785.131:705420): pid=28733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447164785.132:705421): pid=28733 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23291 res=1
type=USER_ROLE_CHANGE msg=audit(1447164785.197:705422): pid=28733 uid=0 auid=0 ses=23291 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447164785.218:705423): pid=28733 uid=0 auid=0 ses=23291 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447164785.220:705424): pid=28733 uid=0 auid=0 ses=23291 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447164785.220:705425): pid=28733 uid=0 auid=0 ses=23291 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447164785.222:705426): pid=28736 uid=0 auid=0 ses=23291 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=28736 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447164785.222:705427): pid=28736 uid=0 auid=0 ses=23291 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=28736 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447164785.222:705428): pid=28736 uid=0 auid=0 ses=23291 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=28736 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447164785.223:705429): pid=28736 uid=0 auid=0 ses=23291 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447164785.241:705430): pid=28733 uid=0 auid=0 ses=23291 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447164785.241:705431): pid=28733 uid=0 auid=0 ses=23291 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447164785.248:705432): pid=28733 uid=0 auid=0 ses=23291 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447164785.248:705433): pid=28733 uid=0 auid=0 ses=23291 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447164785.249:705434): pid=28733 uid=0 auid=0 ses=23291 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=28733 suid=0 rport=52798 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447164785.249:705435): pid=28733 uid=0 auid=0 ses=23291 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=28733 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447164785.249:705436): pid=28733 uid=0 auid=0 ses=23291 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=28733 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447164785.249:705437): pid=28733 uid=0 auid=0 ses=23291 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=28733 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=SYSCALL msg=audit(1447165071.758:705438): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447165201.484:705439): pid=30025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447165201.484:705440): pid=30025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447165201.485:705441): pid=30024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447165201.485:705442): pid=30024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447165201.486:705443): pid=30025 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23292 res=1
type=LOGIN msg=audit(1447165201.486:705444): pid=30024 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23293 res=1
type=USER_START msg=audit(1447165201.503:705445): pid=30024 uid=0 auid=0 ses=23293 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447165201.503:705446): pid=30024 uid=0 auid=0 ses=23293 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447165201.504:705447): pid=30025 uid=0 auid=0 ses=23292 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447165201.504:705448): pid=30025 uid=0 auid=0 ses=23292 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447165201.513:705449): pid=30025 uid=0 auid=0 ses=23292 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447165201.515:705450): pid=30025 uid=0 auid=0 ses=23292 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447165201.521:705451): pid=30024 uid=0 auid=0 ses=23293 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447165201.523:705452): pid=30024 uid=0 auid=0 ses=23293 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447165801.536:705453): pid=31850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447165801.536:705454): pid=31849 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447165801.536:705455): pid=31850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447165801.536:705456): pid=31849 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447165801.536:705457): pid=31850 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23294 res=1
type=LOGIN msg=audit(1447165801.536:705458): pid=31849 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23295 res=1
type=USER_START msg=audit(1447165801.556:705459): pid=31849 uid=0 auid=0 ses=23295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447165801.556:705460): pid=31850 uid=0 auid=0 ses=23294 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447165801.557:705461): pid=31849 uid=0 auid=0 ses=23295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447165801.557:705462): pid=31850 uid=0 auid=0 ses=23294 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447165801.564:705463): pid=31850 uid=0 auid=0 ses=23294 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447165801.566:705464): pid=31850 uid=0 auid=0 ses=23294 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447165801.566:705465): pid=31849 uid=0 auid=0 ses=23295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447165801.570:705466): pid=31849 uid=0 auid=0 ses=23295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447165982.895:705467): pid=32413 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=32413 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447165982.895:705468): pid=32413 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=32413 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447165982.895:705469): pid=32413 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=32413 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447165982.938:705470): pid=32412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=32413 suid=74 rport=54777 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447165982.938:705471): pid=32412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=32413 suid=74 rport=54777 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447165983.059:705472): pid=32412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=54777 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447165983.059:705473): pid=32412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=54777 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447165983.063:705474): pid=32412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447165983.064:705475): pid=32412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=32413 suid=74 rport=54777 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447165983.066:705476): pid=32412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447165983.066:705477): pid=32412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447165983.066:705478): pid=32412 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23296 res=1
type=USER_ROLE_CHANGE msg=audit(1447165983.134:705479): pid=32412 uid=0 auid=0 ses=23296 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447165983.162:705480): pid=32412 uid=0 auid=0 ses=23296 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447165983.166:705481): pid=32412 uid=0 auid=0 ses=23296 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447165983.166:705482): pid=32412 uid=0 auid=0 ses=23296 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447165983.167:705483): pid=32427 uid=0 auid=0 ses=23296 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=32427 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447165983.168:705484): pid=32427 uid=0 auid=0 ses=23296 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=32427 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447165983.168:705485): pid=32427 uid=0 auid=0 ses=23296 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=32427 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447165983.169:705486): pid=32427 uid=0 auid=0 ses=23296 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447165983.191:705487): pid=32412 uid=0 auid=0 ses=23296 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447165983.191:705488): pid=32412 uid=0 auid=0 ses=23296 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447165983.194:705489): pid=32412 uid=0 auid=0 ses=23296 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447165983.194:705490): pid=32412 uid=0 auid=0 ses=23296 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447165983.195:705491): pid=32412 uid=0 auid=0 ses=23296 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=32412 suid=0 rport=54777 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447165983.195:705492): pid=32412 uid=0 auid=0 ses=23296 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=32412 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447165983.195:705493): pid=32412 uid=0 auid=0 ses=23296 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=32412 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447165983.195:705494): pid=32412 uid=0 auid=0 ses=23296 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=32412 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447165983.223:705495): pid=32435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=32435 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447165983.223:705496): pid=32435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=32435 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447165983.224:705497): pid=32435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=32435 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447165983.269:705498): pid=32434 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=32435 suid=74 rport=54778 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447165983.269:705499): pid=32434 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=32435 suid=74 rport=54778 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447165983.399:705500): pid=32434 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=54778 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447165983.399:705501): pid=32434 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=54778 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447165983.409:705502): pid=32434 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447165983.410:705503): pid=32434 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=32435 suid=74 rport=54778 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447165983.411:705504): pid=32434 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447165983.411:705505): pid=32434 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447165983.411:705506): pid=32434 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23297 res=1
type=USER_ROLE_CHANGE msg=audit(1447165983.477:705507): pid=32434 uid=0 auid=0 ses=23297 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447165983.495:705508): pid=32434 uid=0 auid=0 ses=23297 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447165983.498:705509): pid=32434 uid=0 auid=0 ses=23297 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447165983.499:705510): pid=32434 uid=0 auid=0 ses=23297 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447165983.500:705511): pid=32437 uid=0 auid=0 ses=23297 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=32437 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447165983.500:705512): pid=32437 uid=0 auid=0 ses=23297 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=32437 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447165983.500:705513): pid=32437 uid=0 auid=0 ses=23297 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=32437 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447165983.501:705514): pid=32437 uid=0 auid=0 ses=23297 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447165984.762:705515): pid=32434 uid=0 auid=0 ses=23297 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447165984.762:705516): pid=32434 uid=0 auid=0 ses=23297 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447165984.766:705517): pid=32434 uid=0 auid=0 ses=23297 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447165984.766:705518): pid=32434 uid=0 auid=0 ses=23297 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447165984.766:705519): pid=32434 uid=0 auid=0 ses=23297 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=32434 suid=0 rport=54778 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447165984.766:705520): pid=32434 uid=0 auid=0 ses=23297 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=32434 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447165984.767:705521): pid=32434 uid=0 auid=0 ses=23297 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=32434 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447165984.767:705522): pid=32434 uid=0 auid=0 ses=23297 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=32434 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447165984.799:705523): pid=32497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=32497 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447165984.800:705524): pid=32497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=32497 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447165984.800:705525): pid=32497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=32497 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447165984.845:705526): pid=32496 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=32497 suid=74 rport=54779 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447165984.845:705527): pid=32496 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=32497 suid=74 rport=54779 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447165984.966:705528): pid=32496 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=54779 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447165984.966:705529): pid=32496 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=54779 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447165984.974:705530): pid=32496 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447165984.974:705531): pid=32496 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=32497 suid=74 rport=54779 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447165984.976:705532): pid=32496 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447165984.977:705533): pid=32496 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447165984.977:705534): pid=32496 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23298 res=1
type=USER_ROLE_CHANGE msg=audit(1447165985.040:705535): pid=32496 uid=0 auid=0 ses=23298 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447165985.062:705536): pid=32496 uid=0 auid=0 ses=23298 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447165985.065:705537): pid=32496 uid=0 auid=0 ses=23298 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447165985.065:705538): pid=32496 uid=0 auid=0 ses=23298 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447165985.067:705539): pid=32499 uid=0 auid=0 ses=23298 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=32499 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447165985.067:705540): pid=32499 uid=0 auid=0 ses=23298 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=32499 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447165985.067:705541): pid=32499 uid=0 auid=0 ses=23298 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=32499 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447165985.067:705542): pid=32499 uid=0 auid=0 ses=23298 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447165985.086:705543): pid=32496 uid=0 auid=0 ses=23298 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447165985.086:705544): pid=32496 uid=0 auid=0 ses=23298 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447165985.090:705545): pid=32496 uid=0 auid=0 ses=23298 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447165985.090:705546): pid=32496 uid=0 auid=0 ses=23298 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447165985.091:705547): pid=32496 uid=0 auid=0 ses=23298 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=32496 suid=0 rport=54779 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447165985.091:705548): pid=32496 uid=0 auid=0 ses=23298 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=32496 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447165985.091:705549): pid=32496 uid=0 auid=0 ses=23298 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=32496 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447165985.091:705550): pid=32496 uid=0 auid=0 ses=23298 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=32496 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=SYSCALL msg=audit(1447166136.758:705551): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447166401.590:705552): pid=1376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447166401.590:705553): pid=1377 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447166401.590:705554): pid=1377 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447166401.590:705555): pid=1376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447166401.591:705556): pid=1377 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23299 res=1
type=LOGIN msg=audit(1447166401.591:705557): pid=1376 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23300 res=1
type=USER_START msg=audit(1447166401.610:705558): pid=1376 uid=0 auid=0 ses=23300 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447166401.610:705559): pid=1376 uid=0 auid=0 ses=23300 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447166401.611:705560): pid=1377 uid=0 auid=0 ses=23299 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447166401.611:705561): pid=1377 uid=0 auid=0 ses=23299 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447166401.621:705562): pid=1377 uid=0 auid=0 ses=23299 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447166401.622:705563): pid=1377 uid=0 auid=0 ses=23299 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447166401.628:705564): pid=1376 uid=0 auid=0 ses=23300 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447166401.630:705565): pid=1376 uid=0 auid=0 ses=23300 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447167001.644:705566): pid=3225 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447167001.644:705567): pid=3224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447167001.644:705568): pid=3225 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447167001.644:705569): pid=3224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447167001.645:705570): pid=3224 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23302 res=1
type=LOGIN msg=audit(1447167001.645:705571): pid=3225 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23301 res=1
type=USER_START msg=audit(1447167001.662:705572): pid=3224 uid=0 auid=0 ses=23302 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447167001.663:705573): pid=3224 uid=0 auid=0 ses=23302 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447167001.663:705574): pid=3225 uid=0 auid=0 ses=23301 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447167001.663:705575): pid=3225 uid=0 auid=0 ses=23301 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447167001.671:705576): pid=3225 uid=0 auid=0 ses=23301 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447167001.672:705577): pid=3225 uid=0 auid=0 ses=23301 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447167001.674:705578): pid=3224 uid=0 auid=0 ses=23302 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447167026.701:705579): pid=3224 uid=0 auid=0 ses=23302 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=CRYPTO_KEY_USER msg=audit(1447167182.447:705580): pid=3789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=3789 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447167182.448:705581): pid=3789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=3789 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447167182.448:705582): pid=3789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=3789 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447167182.492:705583): pid=3788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=3789 suid=74 rport=56757 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447167182.492:705584): pid=3788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=3789 suid=74 rport=56757 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447167182.621:705585): pid=3788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=56757 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447167182.621:705586): pid=3788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=56757 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447167182.630:705587): pid=3788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447167182.632:705588): pid=3788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3789 suid=74 rport=56757 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447167182.634:705589): pid=3788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447167182.634:705590): pid=3788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447167182.635:705591): pid=3788 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23303 res=1
type=USER_ROLE_CHANGE msg=audit(1447167182.705:705592): pid=3788 uid=0 auid=0 ses=23303 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447167182.729:705593): pid=3788 uid=0 auid=0 ses=23303 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447167182.732:705594): pid=3788 uid=0 auid=0 ses=23303 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447167182.732:705595): pid=3788 uid=0 auid=0 ses=23303 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447167182.734:705596): pid=3791 uid=0 auid=0 ses=23303 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=3791 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447167182.734:705597): pid=3791 uid=0 auid=0 ses=23303 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=3791 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447167182.734:705598): pid=3791 uid=0 auid=0 ses=23303 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=3791 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447167182.735:705599): pid=3791 uid=0 auid=0 ses=23303 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447167182.758:705600): pid=3788 uid=0 auid=0 ses=23303 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447167182.758:705601): pid=3788 uid=0 auid=0 ses=23303 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447167182.761:705602): pid=3788 uid=0 auid=0 ses=23303 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447167182.761:705603): pid=3788 uid=0 auid=0 ses=23303 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447167182.762:705604): pid=3788 uid=0 auid=0 ses=23303 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3788 suid=0 rport=56757 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447167182.762:705605): pid=3788 uid=0 auid=0 ses=23303 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=3788 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447167182.762:705606): pid=3788 uid=0 auid=0 ses=23303 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=3788 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447167182.762:705607): pid=3788 uid=0 auid=0 ses=23303 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=3788 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447167182.786:705608): pid=3799 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=3799 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447167182.786:705609): pid=3799 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=3799 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447167182.786:705610): pid=3799 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=3799 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447167182.830:705611): pid=3798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=3799 suid=74 rport=56758 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447167182.830:705612): pid=3798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=3799 suid=74 rport=56758 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447167182.952:705613): pid=3798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=56758 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447167182.952:705614): pid=3798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=56758 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447167182.958:705615): pid=3798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447167182.958:705616): pid=3798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3799 suid=74 rport=56758 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447167182.960:705617): pid=3798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447167182.960:705618): pid=3798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447167182.960:705619): pid=3798 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23304 res=1
type=USER_ROLE_CHANGE msg=audit(1447167183.024:705620): pid=3798 uid=0 auid=0 ses=23304 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447167183.053:705621): pid=3798 uid=0 auid=0 ses=23304 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447167183.056:705622): pid=3798 uid=0 auid=0 ses=23304 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447167183.056:705623): pid=3798 uid=0 auid=0 ses=23304 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447167183.057:705624): pid=3801 uid=0 auid=0 ses=23304 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=3801 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447167183.058:705625): pid=3801 uid=0 auid=0 ses=23304 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=3801 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447167183.058:705626): pid=3801 uid=0 auid=0 ses=23304 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=3801 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447167183.058:705627): pid=3801 uid=0 auid=0 ses=23304 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447167184.339:705628): pid=3798 uid=0 auid=0 ses=23304 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447167184.339:705629): pid=3798 uid=0 auid=0 ses=23304 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447167184.343:705630): pid=3798 uid=0 auid=0 ses=23304 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447167184.343:705631): pid=3798 uid=0 auid=0 ses=23304 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447167184.344:705632): pid=3798 uid=0 auid=0 ses=23304 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3798 suid=0 rport=56758 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447167184.344:705633): pid=3798 uid=0 auid=0 ses=23304 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=3798 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447167184.344:705634): pid=3798 uid=0 auid=0 ses=23304 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=3798 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447167184.344:705635): pid=3798 uid=0 auid=0 ses=23304 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=3798 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447167184.379:705636): pid=3851 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=3851 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447167184.379:705637): pid=3851 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=3851 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447167184.379:705638): pid=3851 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=3851 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447167184.424:705639): pid=3850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=3851 suid=74 rport=56760 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447167184.424:705640): pid=3850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=3851 suid=74 rport=56760 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447167184.554:705641): pid=3850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=56760 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447167184.554:705642): pid=3850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=56760 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447167184.561:705643): pid=3850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447167184.562:705644): pid=3850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3851 suid=74 rport=56760 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447167184.563:705645): pid=3850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447167184.564:705646): pid=3850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447167184.564:705647): pid=3850 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23305 res=1
type=USER_ROLE_CHANGE msg=audit(1447167184.628:705648): pid=3850 uid=0 auid=0 ses=23305 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447167184.650:705649): pid=3850 uid=0 auid=0 ses=23305 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447167184.653:705650): pid=3850 uid=0 auid=0 ses=23305 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447167184.653:705651): pid=3850 uid=0 auid=0 ses=23305 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447167184.654:705652): pid=3853 uid=0 auid=0 ses=23305 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=3853 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447167184.654:705653): pid=3853 uid=0 auid=0 ses=23305 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=3853 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447167184.654:705654): pid=3853 uid=0 auid=0 ses=23305 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=3853 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447167184.655:705655): pid=3853 uid=0 auid=0 ses=23305 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447167184.672:705656): pid=3850 uid=0 auid=0 ses=23305 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447167184.673:705657): pid=3850 uid=0 auid=0 ses=23305 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447167184.679:705658): pid=3850 uid=0 auid=0 ses=23305 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447167184.679:705659): pid=3850 uid=0 auid=0 ses=23305 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447167184.680:705660): pid=3850 uid=0 auid=0 ses=23305 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3850 suid=0 rport=56760 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447167184.681:705661): pid=3850 uid=0 auid=0 ses=23305 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=3850 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447167184.681:705662): pid=3850 uid=0 auid=0 ses=23305 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=3850 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447167184.681:705663): pid=3850 uid=0 auid=0 ses=23305 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=3850 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447167601.729:705664): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447167601.729:705665): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447167601.729:705666): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447167601.729:705667): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447167601.731:705668): pid=5142 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23306 res=1
type=LOGIN msg=audit(1447167601.731:705669): pid=5143 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23307 res=1
type=USER_START msg=audit(1447167601.752:705670): pid=5143 uid=0 auid=0 ses=23307 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447167601.753:705671): pid=5143 uid=0 auid=0 ses=23307 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447167601.753:705672): pid=5142 uid=0 auid=0 ses=23306 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447167601.753:705673): pid=5142 uid=0 auid=0 ses=23306 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447167601.761:705674): pid=5143 uid=0 auid=0 ses=23307 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447167601.762:705675): pid=5143 uid=0 auid=0 ses=23307 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447167601.770:705676): pid=5142 uid=0 auid=0 ses=23306 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447167601.771:705677): pid=5142 uid=0 auid=0 ses=23306 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447167661.781:705678): pid=5378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447167661.781:705679): pid=5378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447167661.781:705680): pid=5378 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23308 res=1
type=USER_START msg=audit(1447167661.793:705681): pid=5378 uid=0 auid=0 ses=23308 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447167661.793:705682): pid=5378 uid=0 auid=0 ses=23308 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447167661.818:705683): pid=5378 uid=0 auid=0 ses=23308 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447167661.819:705684): pid=5378 uid=0 auid=0 ses=23308 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447168201.833:705685): pid=7048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447168201.833:705686): pid=7048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447168201.833:705687): pid=7048 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23309 res=1
type=USER_ACCT msg=audit(1447168201.834:705688): pid=7047 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447168201.834:705689): pid=7047 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447168201.834:705690): pid=7047 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23310 res=1
type=USER_START msg=audit(1447168201.848:705691): pid=7048 uid=0 auid=0 ses=23309 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447168201.849:705692): pid=7047 uid=0 auid=0 ses=23310 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447168201.849:705693): pid=7048 uid=0 auid=0 ses=23309 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447168201.849:705694): pid=7047 uid=0 auid=0 ses=23310 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447168201.855:705695): pid=7048 uid=0 auid=0 ses=23309 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447168201.856:705696): pid=7048 uid=0 auid=0 ses=23309 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447168201.861:705697): pid=7047 uid=0 auid=0 ses=23310 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447168226.888:705698): pid=7047 uid=0 auid=0 ses=23310 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=SYSCALL msg=audit(1447168255.759:705699): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=CRYPTO_KEY_USER msg=audit(1447168383.013:705700): pid=7619 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=7619 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447168383.013:705701): pid=7619 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=7619 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447168383.013:705702): pid=7619 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=7619 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447168383.057:705703): pid=7618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=7619 suid=74 rport=58738 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447168383.058:705704): pid=7618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=7619 suid=74 rport=58738 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447168383.188:705705): pid=7618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=58738 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447168383.188:705706): pid=7618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=58738 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447168383.194:705707): pid=7618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447168383.195:705708): pid=7618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7619 suid=74 rport=58738 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447168383.197:705709): pid=7618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447168383.197:705710): pid=7618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447168383.197:705711): pid=7618 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23311 res=1
type=USER_ROLE_CHANGE msg=audit(1447168383.268:705712): pid=7618 uid=0 auid=0 ses=23311 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447168383.287:705713): pid=7618 uid=0 auid=0 ses=23311 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447168383.290:705714): pid=7618 uid=0 auid=0 ses=23311 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447168383.290:705715): pid=7618 uid=0 auid=0 ses=23311 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447168383.292:705716): pid=7621 uid=0 auid=0 ses=23311 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=7621 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447168383.292:705717): pid=7621 uid=0 auid=0 ses=23311 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=7621 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447168383.292:705718): pid=7621 uid=0 auid=0 ses=23311 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=7621 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447168383.293:705719): pid=7621 uid=0 auid=0 ses=23311 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447168383.314:705720): pid=7618 uid=0 auid=0 ses=23311 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447168383.314:705721): pid=7618 uid=0 auid=0 ses=23311 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447168383.318:705722): pid=7618 uid=0 auid=0 ses=23311 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447168383.318:705723): pid=7618 uid=0 auid=0 ses=23311 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447168383.319:705724): pid=7618 uid=0 auid=0 ses=23311 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7618 suid=0 rport=58738 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447168383.319:705725): pid=7618 uid=0 auid=0 ses=23311 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=7618 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447168383.319:705726): pid=7618 uid=0 auid=0 ses=23311 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=7618 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447168383.319:705727): pid=7618 uid=0 auid=0 ses=23311 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=7618 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447168383.343:705728): pid=7629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=7629 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447168383.343:705729): pid=7629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=7629 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447168383.343:705730): pid=7629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=7629 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447168383.387:705731): pid=7628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=7629 suid=74 rport=58739 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447168383.388:705732): pid=7628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=7629 suid=74 rport=58739 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447168383.515:705733): pid=7628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=58739 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447168383.515:705734): pid=7628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=58739 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447168383.523:705735): pid=7628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447168383.524:705736): pid=7628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7629 suid=74 rport=58739 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447168383.526:705737): pid=7628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447168383.526:705738): pid=7628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447168383.526:705739): pid=7628 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23312 res=1
type=USER_ROLE_CHANGE msg=audit(1447168383.589:705740): pid=7628 uid=0 auid=0 ses=23312 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447168383.614:705741): pid=7628 uid=0 auid=0 ses=23312 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447168383.617:705742): pid=7628 uid=0 auid=0 ses=23312 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447168383.617:705743): pid=7628 uid=0 auid=0 ses=23312 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447168383.618:705744): pid=7631 uid=0 auid=0 ses=23312 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=7631 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447168383.618:705745): pid=7631 uid=0 auid=0 ses=23312 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=7631 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447168383.618:705746): pid=7631 uid=0 auid=0 ses=23312 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=7631 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447168383.619:705747): pid=7631 uid=0 auid=0 ses=23312 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447168384.909:705748): pid=7628 uid=0 auid=0 ses=23312 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447168384.909:705749): pid=7628 uid=0 auid=0 ses=23312 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447168384.916:705750): pid=7628 uid=0 auid=0 ses=23312 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447168384.916:705751): pid=7628 uid=0 auid=0 ses=23312 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447168384.916:705752): pid=7628 uid=0 auid=0 ses=23312 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7628 suid=0 rport=58739 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447168384.917:705753): pid=7628 uid=0 auid=0 ses=23312 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=7628 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447168384.917:705754): pid=7628 uid=0 auid=0 ses=23312 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=7628 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447168384.917:705755): pid=7628 uid=0 auid=0 ses=23312 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=7628 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447168384.950:705756): pid=7681 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=7681 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447168384.950:705757): pid=7681 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=7681 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447168384.950:705758): pid=7681 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=7681 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447168384.994:705759): pid=7680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=7681 suid=74 rport=58741 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447168384.995:705760): pid=7680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=7681 suid=74 rport=58741 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447168385.125:705761): pid=7680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=58741 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447168385.125:705762): pid=7680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=58741 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447168385.133:705763): pid=7680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447168385.134:705764): pid=7680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7681 suid=74 rport=58741 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447168385.137:705765): pid=7680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447168385.137:705766): pid=7680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447168385.138:705767): pid=7680 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23313 res=1
type=USER_ROLE_CHANGE msg=audit(1447168385.201:705768): pid=7680 uid=0 auid=0 ses=23313 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447168385.225:705769): pid=7680 uid=0 auid=0 ses=23313 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447168385.228:705770): pid=7680 uid=0 auid=0 ses=23313 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447168385.228:705771): pid=7680 uid=0 auid=0 ses=23313 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447168385.229:705772): pid=7683 uid=0 auid=0 ses=23313 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=7683 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447168385.230:705773): pid=7683 uid=0 auid=0 ses=23313 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=7683 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447168385.230:705774): pid=7683 uid=0 auid=0 ses=23313 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=7683 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447168385.231:705775): pid=7683 uid=0 auid=0 ses=23313 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447168385.248:705776): pid=7680 uid=0 auid=0 ses=23313 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447168385.248:705777): pid=7680 uid=0 auid=0 ses=23313 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447168385.252:705778): pid=7680 uid=0 auid=0 ses=23313 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447168385.252:705779): pid=7680 uid=0 auid=0 ses=23313 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447168385.252:705780): pid=7680 uid=0 auid=0 ses=23313 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7680 suid=0 rport=58741 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447168385.253:705781): pid=7680 uid=0 auid=0 ses=23313 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=7680 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447168385.253:705782): pid=7680 uid=0 auid=0 ses=23313 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=7680 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447168385.253:705783): pid=7680 uid=0 auid=0 ses=23313 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=7680 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447168801.913:705784): pid=8973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447168801.913:705785): pid=8974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447168801.913:705786): pid=8973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447168801.913:705787): pid=8974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447168801.914:705788): pid=8974 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23315 res=1
type=LOGIN msg=audit(1447168801.914:705789): pid=8973 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23314 res=1
type=USER_START msg=audit(1447168801.934:705790): pid=8973 uid=0 auid=0 ses=23314 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447168801.934:705791): pid=8974 uid=0 auid=0 ses=23315 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447168801.935:705792): pid=8973 uid=0 auid=0 ses=23314 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447168801.935:705793): pid=8974 uid=0 auid=0 ses=23315 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447168801.944:705794): pid=8974 uid=0 auid=0 ses=23315 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447168801.946:705795): pid=8974 uid=0 auid=0 ses=23315 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447168801.957:705796): pid=8973 uid=0 auid=0 ses=23314 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447168801.959:705797): pid=8973 uid=0 auid=0 ses=23314 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1447169337.672:705798): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447169401.974:705799): pid=10816 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447169401.974:705800): pid=10817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447169401.974:705801): pid=10816 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447169401.974:705802): pid=10817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447169401.974:705803): pid=10817 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23316 res=1
type=LOGIN msg=audit(1447169401.974:705804): pid=10816 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23317 res=1
type=USER_START msg=audit(1447169401.989:705805): pid=10816 uid=0 auid=0 ses=23317 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447169401.990:705806): pid=10816 uid=0 auid=0 ses=23317 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447169401.991:705807): pid=10817 uid=0 auid=0 ses=23316 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447169401.991:705808): pid=10817 uid=0 auid=0 ses=23316 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447169401.998:705809): pid=10817 uid=0 auid=0 ses=23316 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447169402.000:705810): pid=10817 uid=0 auid=0 ses=23316 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447169402.002:705811): pid=10816 uid=0 auid=0 ses=23317 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447169402.005:705812): pid=10816 uid=0 auid=0 ses=23317 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447169582.766:705813): pid=11384 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=11384 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447169582.767:705814): pid=11384 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=11384 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447169582.767:705815): pid=11384 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=11384 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447169582.810:705816): pid=11383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=11384 suid=74 rport=60723 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447169582.810:705817): pid=11383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=11384 suid=74 rport=60723 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447169582.931:705818): pid=11383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60723 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447169582.931:705819): pid=11383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=60723 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447169582.938:705820): pid=11383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447169582.940:705821): pid=11383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11384 suid=74 rport=60723 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447169582.941:705822): pid=11383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447169582.941:705823): pid=11383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447169582.941:705824): pid=11383 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23318 res=1
type=USER_ROLE_CHANGE msg=audit(1447169583.011:705825): pid=11383 uid=0 auid=0 ses=23318 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447169583.031:705826): pid=11383 uid=0 auid=0 ses=23318 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447169583.034:705827): pid=11383 uid=0 auid=0 ses=23318 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447169583.034:705828): pid=11383 uid=0 auid=0 ses=23318 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447169583.035:705829): pid=11386 uid=0 auid=0 ses=23318 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=11386 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447169583.036:705830): pid=11386 uid=0 auid=0 ses=23318 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=11386 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447169583.036:705831): pid=11386 uid=0 auid=0 ses=23318 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=11386 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447169583.037:705832): pid=11386 uid=0 auid=0 ses=23318 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447169583.057:705833): pid=11383 uid=0 auid=0 ses=23318 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447169583.057:705834): pid=11383 uid=0 auid=0 ses=23318 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447169583.061:705835): pid=11383 uid=0 auid=0 ses=23318 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447169583.061:705836): pid=11383 uid=0 auid=0 ses=23318 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447169583.062:705837): pid=11383 uid=0 auid=0 ses=23318 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11383 suid=0 rport=60723 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447169583.062:705838): pid=11383 uid=0 auid=0 ses=23318 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=11383 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447169583.062:705839): pid=11383 uid=0 auid=0 ses=23318 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=11383 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447169583.062:705840): pid=11383 uid=0 auid=0 ses=23318 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=11383 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447169583.083:705841): pid=11394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=11394 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447169583.083:705842): pid=11394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=11394 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447169583.083:705843): pid=11394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=11394 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447169583.128:705844): pid=11393 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=11394 suid=74 rport=60725 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447169583.128:705845): pid=11393 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=11394 suid=74 rport=60725 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447169583.258:705846): pid=11393 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60725 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447169583.259:705847): pid=11393 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=60725 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447169583.268:705848): pid=11393 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447169583.269:705849): pid=11393 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11394 suid=74 rport=60725 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447169583.270:705850): pid=11393 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447169583.271:705851): pid=11393 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447169583.271:705852): pid=11393 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23319 res=1
type=USER_ROLE_CHANGE msg=audit(1447169583.340:705853): pid=11393 uid=0 auid=0 ses=23319 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447169583.363:705854): pid=11393 uid=0 auid=0 ses=23319 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447169583.366:705855): pid=11393 uid=0 auid=0 ses=23319 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447169583.366:705856): pid=11393 uid=0 auid=0 ses=23319 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447169583.367:705857): pid=11396 uid=0 auid=0 ses=23319 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=11396 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447169583.368:705858): pid=11396 uid=0 auid=0 ses=23319 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=11396 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447169583.368:705859): pid=11396 uid=0 auid=0 ses=23319 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=11396 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447169583.368:705860): pid=11396 uid=0 auid=0 ses=23319 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447169584.635:705861): pid=11393 uid=0 auid=0 ses=23319 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447169584.635:705862): pid=11393 uid=0 auid=0 ses=23319 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447169584.639:705863): pid=11393 uid=0 auid=0 ses=23319 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447169584.639:705864): pid=11393 uid=0 auid=0 ses=23319 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447169584.640:705865): pid=11393 uid=0 auid=0 ses=23319 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11393 suid=0 rport=60725 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447169584.640:705866): pid=11393 uid=0 auid=0 ses=23319 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=11393 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447169584.640:705867): pid=11393 uid=0 auid=0 ses=23319 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=11393 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447169584.640:705868): pid=11393 uid=0 auid=0 ses=23319 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=11393 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447169584.677:705869): pid=11446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=11446 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447169584.677:705870): pid=11446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=11446 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447169584.677:705871): pid=11446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=11446 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447169584.722:705872): pid=11445 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=11446 suid=74 rport=60727 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447169584.722:705873): pid=11445 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=11446 suid=74 rport=60727 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447169584.849:705874): pid=11445 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60727 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447169584.849:705875): pid=11445 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=60727 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447169584.854:705876): pid=11445 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447169584.856:705877): pid=11445 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11446 suid=74 rport=60727 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447169584.857:705878): pid=11445 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447169584.858:705879): pid=11445 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447169584.858:705880): pid=11445 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23320 res=1
type=USER_ROLE_CHANGE msg=audit(1447169584.923:705881): pid=11445 uid=0 auid=0 ses=23320 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447169584.944:705882): pid=11445 uid=0 auid=0 ses=23320 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447169584.946:705883): pid=11445 uid=0 auid=0 ses=23320 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447169584.947:705884): pid=11445 uid=0 auid=0 ses=23320 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447169584.948:705885): pid=11448 uid=0 auid=0 ses=23320 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=11448 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447169584.948:705886): pid=11448 uid=0 auid=0 ses=23320 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=11448 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447169584.948:705887): pid=11448 uid=0 auid=0 ses=23320 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=11448 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447169584.949:705888): pid=11448 uid=0 auid=0 ses=23320 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447169584.964:705889): pid=11445 uid=0 auid=0 ses=23320 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447169584.964:705890): pid=11445 uid=0 auid=0 ses=23320 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447169584.968:705891): pid=11445 uid=0 auid=0 ses=23320 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447169584.968:705892): pid=11445 uid=0 auid=0 ses=23320 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447169584.969:705893): pid=11445 uid=0 auid=0 ses=23320 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11445 suid=0 rport=60727 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447169584.969:705894): pid=11445 uid=0 auid=0 ses=23320 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=11445 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447169584.969:705895): pid=11445 uid=0 auid=0 ses=23320 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=11445 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447169584.969:705896): pid=11445 uid=0 auid=0 ses=23320 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=11445 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447170001.025:705897): pid=12735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447170001.025:705898): pid=12735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447170001.026:705899): pid=12736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447170001.026:705900): pid=12736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447170001.026:705901): pid=12735 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23321 res=1
type=LOGIN msg=audit(1447170001.026:705902): pid=12736 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23322 res=1
type=USER_START msg=audit(1447170001.045:705903): pid=12736 uid=0 auid=0 ses=23322 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447170001.046:705904): pid=12736 uid=0 auid=0 ses=23322 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447170001.047:705905): pid=12735 uid=0 auid=0 ses=23321 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447170001.047:705906): pid=12735 uid=0 auid=0 ses=23321 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447170001.058:705907): pid=12736 uid=0 auid=0 ses=23322 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447170001.061:705908): pid=12736 uid=0 auid=0 ses=23322 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447170001.063:705909): pid=12735 uid=0 auid=0 ses=23321 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447170001.068:705910): pid=12735 uid=0 auid=0 ses=23321 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447170601.086:705911): pid=14699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447170601.086:705912): pid=14699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447170601.086:705913): pid=14699 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23323 res=1
type=USER_ACCT msg=audit(1447170601.088:705914): pid=14698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447170601.088:705915): pid=14698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447170601.088:705916): pid=14698 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23324 res=1
type=USER_START msg=audit(1447170601.103:705917): pid=14698 uid=0 auid=0 ses=23324 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447170601.103:705918): pid=14699 uid=0 auid=0 ses=23323 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447170601.103:705919): pid=14698 uid=0 auid=0 ses=23324 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447170601.103:705920): pid=14699 uid=0 auid=0 ses=23323 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447170601.110:705921): pid=14699 uid=0 auid=0 ses=23323 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447170601.111:705922): pid=14699 uid=0 auid=0 ses=23323 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447170601.118:705923): pid=14698 uid=0 auid=0 ses=23324 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447170601.119:705924): pid=14698 uid=0 auid=0 ses=23324 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447170782.635:705925): pid=15263 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=15263 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447170782.635:705926): pid=15263 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=15263 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447170782.635:705927): pid=15263 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=15263 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447170782.680:705928): pid=15262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=15263 suid=74 rport=62701 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447170782.680:705929): pid=15262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=15263 suid=74 rport=62701 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447170782.809:705930): pid=15262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=62701 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447170782.809:705931): pid=15262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=62701 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447170782.816:705932): pid=15262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447170782.817:705933): pid=15262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15263 suid=74 rport=62701 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447170782.819:705934): pid=15262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447170782.820:705935): pid=15262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447170782.821:705936): pid=15262 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23325 res=1
type=USER_ROLE_CHANGE msg=audit(1447170782.889:705937): pid=15262 uid=0 auid=0 ses=23325 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447170782.918:705938): pid=15262 uid=0 auid=0 ses=23325 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447170782.921:705939): pid=15262 uid=0 auid=0 ses=23325 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447170782.922:705940): pid=15262 uid=0 auid=0 ses=23325 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447170782.923:705941): pid=15265 uid=0 auid=0 ses=23325 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=15265 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447170782.923:705942): pid=15265 uid=0 auid=0 ses=23325 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=15265 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447170782.923:705943): pid=15265 uid=0 auid=0 ses=23325 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=15265 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447170782.924:705944): pid=15265 uid=0 auid=0 ses=23325 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447170782.942:705945): pid=15262 uid=0 auid=0 ses=23325 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447170782.943:705946): pid=15262 uid=0 auid=0 ses=23325 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447170782.947:705947): pid=15262 uid=0 auid=0 ses=23325 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447170782.947:705948): pid=15262 uid=0 auid=0 ses=23325 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447170782.947:705949): pid=15262 uid=0 auid=0 ses=23325 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15262 suid=0 rport=62701 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447170782.947:705950): pid=15262 uid=0 auid=0 ses=23325 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=15262 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447170782.947:705951): pid=15262 uid=0 auid=0 ses=23325 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=15262 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447170782.948:705952): pid=15262 uid=0 auid=0 ses=23325 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=15262 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447170782.968:705953): pid=15273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=15273 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447170782.969:705954): pid=15273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=15273 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447170782.969:705955): pid=15273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=15273 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447170783.013:705956): pid=15272 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=15273 suid=74 rport=62705 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447170783.013:705957): pid=15272 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=15273 suid=74 rport=62705 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447170783.144:705958): pid=15272 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=62705 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447170783.144:705959): pid=15272 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=62705 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447170783.153:705960): pid=15272 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447170783.154:705961): pid=15272 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15273 suid=74 rport=62705 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447170783.156:705962): pid=15272 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447170783.157:705963): pid=15272 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447170783.157:705964): pid=15272 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23326 res=1
type=USER_ROLE_CHANGE msg=audit(1447170783.220:705965): pid=15272 uid=0 auid=0 ses=23326 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447170783.240:705966): pid=15272 uid=0 auid=0 ses=23326 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447170783.243:705967): pid=15272 uid=0 auid=0 ses=23326 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447170783.243:705968): pid=15272 uid=0 auid=0 ses=23326 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447170783.245:705969): pid=15275 uid=0 auid=0 ses=23326 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=15275 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447170783.245:705970): pid=15275 uid=0 auid=0 ses=23326 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=15275 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447170783.245:705971): pid=15275 uid=0 auid=0 ses=23326 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=15275 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447170783.246:705972): pid=15275 uid=0 auid=0 ses=23326 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447170784.530:705973): pid=15272 uid=0 auid=0 ses=23326 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447170784.530:705974): pid=15272 uid=0 auid=0 ses=23326 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447170784.536:705975): pid=15272 uid=0 auid=0 ses=23326 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447170784.536:705976): pid=15272 uid=0 auid=0 ses=23326 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447170784.536:705977): pid=15272 uid=0 auid=0 ses=23326 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15272 suid=0 rport=62705 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447170784.536:705978): pid=15272 uid=0 auid=0 ses=23326 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=15272 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447170784.536:705979): pid=15272 uid=0 auid=0 ses=23326 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=15272 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447170784.536:705980): pid=15272 uid=0 auid=0 ses=23326 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=15272 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447170784.570:705981): pid=15325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=15325 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447170784.570:705982): pid=15325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=15325 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447170784.570:705983): pid=15325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=15325 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447170784.615:705984): pid=15324 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=15325 suid=74 rport=62706 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447170784.615:705985): pid=15324 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=15325 suid=74 rport=62706 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447170784.745:705986): pid=15324 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=62706 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447170784.745:705987): pid=15324 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=62706 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447170784.751:705988): pid=15324 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447170784.752:705989): pid=15324 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15325 suid=74 rport=62706 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447170784.754:705990): pid=15324 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447170784.754:705991): pid=15324 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447170784.754:705992): pid=15324 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23327 res=1
type=USER_ROLE_CHANGE msg=audit(1447170784.816:705993): pid=15324 uid=0 auid=0 ses=23327 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447170784.839:705994): pid=15324 uid=0 auid=0 ses=23327 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447170784.841:705995): pid=15324 uid=0 auid=0 ses=23327 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447170784.841:705996): pid=15324 uid=0 auid=0 ses=23327 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447170784.843:705997): pid=15327 uid=0 auid=0 ses=23327 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=15327 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447170784.843:705998): pid=15327 uid=0 auid=0 ses=23327 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=15327 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447170784.843:705999): pid=15327 uid=0 auid=0 ses=23327 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=15327 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447170784.844:706000): pid=15327 uid=0 auid=0 ses=23327 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447170784.860:706001): pid=15324 uid=0 auid=0 ses=23327 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447170784.860:706002): pid=15324 uid=0 auid=0 ses=23327 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447170784.863:706003): pid=15324 uid=0 auid=0 ses=23327 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447170784.863:706004): pid=15324 uid=0 auid=0 ses=23327 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447170784.864:706005): pid=15324 uid=0 auid=0 ses=23327 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15324 suid=0 rport=62706 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447170784.864:706006): pid=15324 uid=0 auid=0 ses=23327 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=15324 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447170784.864:706007): pid=15324 uid=0 auid=0 ses=23327 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=15324 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447170784.864:706008): pid=15324 uid=0 auid=0 ses=23327 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=15324 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447171201.140:706009): pid=16618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447171201.140:706010): pid=16618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447171201.142:706011): pid=16618 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23328 res=1
type=USER_ACCT msg=audit(1447171201.142:706012): pid=16617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447171201.142:706013): pid=16617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447171201.142:706014): pid=16617 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23329 res=1
type=USER_START msg=audit(1447171201.159:706015): pid=16617 uid=0 auid=0 ses=23329 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447171201.159:706016): pid=16618 uid=0 auid=0 ses=23328 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447171201.160:706017): pid=16617 uid=0 auid=0 ses=23329 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447171201.160:706018): pid=16618 uid=0 auid=0 ses=23328 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447171201.170:706019): pid=16618 uid=0 auid=0 ses=23328 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447171201.171:706020): pid=16618 uid=0 auid=0 ses=23328 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447171201.177:706021): pid=16617 uid=0 auid=0 ses=23329 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447171226.203:706022): pid=16617 uid=0 auid=0 ses=23329 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=USER_ACCT msg=audit(1447171261.217:706023): pid=16852 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447171261.217:706024): pid=16852 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447171261.218:706025): pid=16852 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23330 res=1
type=USER_START msg=audit(1447171261.233:706026): pid=16852 uid=0 auid=0 ses=23330 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447171261.234:706027): pid=16852 uid=0 auid=0 ses=23330 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447171261.259:706028): pid=16852 uid=0 auid=0 ses=23330 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447171261.260:706029): pid=16852 uid=0 auid=0 ses=23330 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1447171430.664:706030): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447171801.278:706031): pid=18521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447171801.278:706032): pid=18520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447171801.279:706033): pid=18521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447171801.279:706034): pid=18520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447171801.279:706035): pid=18521 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23331 res=1
type=LOGIN msg=audit(1447171801.279:706036): pid=18520 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23332 res=1
type=USER_START msg=audit(1447171801.293:706037): pid=18521 uid=0 auid=0 ses=23331 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447171801.293:706038): pid=18520 uid=0 auid=0 ses=23332 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447171801.293:706039): pid=18521 uid=0 auid=0 ses=23331 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447171801.293:706040): pid=18520 uid=0 auid=0 ses=23332 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447171801.300:706041): pid=18521 uid=0 auid=0 ses=23331 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447171801.301:706042): pid=18521 uid=0 auid=0 ses=23331 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447171801.309:706043): pid=18520 uid=0 auid=0 ses=23332 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447171801.312:706044): pid=18520 uid=0 auid=0 ses=23332 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447171982.641:706045): pid=19091 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=19091 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447171982.641:706046): pid=19091 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=19091 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447171982.641:706047): pid=19091 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=19091 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447171982.686:706048): pid=19090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=19091 suid=74 rport=64685 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447171982.686:706049): pid=19090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=19091 suid=74 rport=64685 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447171982.816:706050): pid=19090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=64685 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447171982.816:706051): pid=19090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=64685 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447171982.823:706052): pid=19090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447171982.824:706053): pid=19090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19091 suid=74 rport=64685 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447171982.825:706054): pid=19090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447171982.826:706055): pid=19090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447171982.827:706056): pid=19090 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23333 res=1
type=USER_ROLE_CHANGE msg=audit(1447171982.897:706057): pid=19090 uid=0 auid=0 ses=23333 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447171982.922:706058): pid=19090 uid=0 auid=0 ses=23333 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447171982.924:706059): pid=19090 uid=0 auid=0 ses=23333 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447171982.924:706060): pid=19090 uid=0 auid=0 ses=23333 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447171982.926:706061): pid=19093 uid=0 auid=0 ses=23333 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=19093 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447171982.926:706062): pid=19093 uid=0 auid=0 ses=23333 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=19093 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447171982.926:706063): pid=19093 uid=0 auid=0 ses=23333 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=19093 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447171982.927:706064): pid=19093 uid=0 auid=0 ses=23333 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447171982.945:706065): pid=19090 uid=0 auid=0 ses=23333 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447171982.945:706066): pid=19090 uid=0 auid=0 ses=23333 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447171982.949:706067): pid=19090 uid=0 auid=0 ses=23333 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447171982.949:706068): pid=19090 uid=0 auid=0 ses=23333 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447171982.950:706069): pid=19090 uid=0 auid=0 ses=23333 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19090 suid=0 rport=64685 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447171982.950:706070): pid=19090 uid=0 auid=0 ses=23333 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=19090 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447171982.950:706071): pid=19090 uid=0 auid=0 ses=23333 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=19090 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447171982.950:706072): pid=19090 uid=0 auid=0 ses=23333 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=19090 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447171982.972:706073): pid=19101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=19101 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447171982.973:706074): pid=19101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=19101 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447171982.973:706075): pid=19101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=19101 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447171983.018:706076): pid=19100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=19101 suid=74 rport=64686 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447171983.018:706077): pid=19100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=19101 suid=74 rport=64686 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447171983.148:706078): pid=19100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=64686 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447171983.148:706079): pid=19100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=64686 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447171983.158:706080): pid=19100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447171983.159:706081): pid=19100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19101 suid=74 rport=64686 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447171983.160:706082): pid=19100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447171983.161:706083): pid=19100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447171983.161:706084): pid=19100 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23334 res=1
type=USER_ROLE_CHANGE msg=audit(1447171983.226:706085): pid=19100 uid=0 auid=0 ses=23334 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447171983.248:706086): pid=19100 uid=0 auid=0 ses=23334 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447171983.251:706087): pid=19100 uid=0 auid=0 ses=23334 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447171983.251:706088): pid=19100 uid=0 auid=0 ses=23334 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447171983.253:706089): pid=19103 uid=0 auid=0 ses=23334 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=19103 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447171983.253:706090): pid=19103 uid=0 auid=0 ses=23334 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=19103 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447171983.253:706091): pid=19103 uid=0 auid=0 ses=23334 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=19103 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447171983.254:706092): pid=19103 uid=0 auid=0 ses=23334 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447171984.535:706093): pid=19100 uid=0 auid=0 ses=23334 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447171984.535:706094): pid=19100 uid=0 auid=0 ses=23334 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447171984.539:706095): pid=19100 uid=0 auid=0 ses=23334 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447171984.539:706096): pid=19100 uid=0 auid=0 ses=23334 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447171984.540:706097): pid=19100 uid=0 auid=0 ses=23334 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19100 suid=0 rport=64686 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447171984.540:706098): pid=19100 uid=0 auid=0 ses=23334 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=19100 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447171984.540:706099): pid=19100 uid=0 auid=0 ses=23334 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=19100 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447171984.540:706100): pid=19100 uid=0 auid=0 ses=23334 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=19100 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447171984.572:706101): pid=19153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=19153 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447171984.572:706102): pid=19153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=19153 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447171984.572:706103): pid=19153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=19153 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447171984.616:706104): pid=19152 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=19153 suid=74 rport=64690 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447171984.616:706105): pid=19152 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=19153 suid=74 rport=64690 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447171984.739:706106): pid=19152 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=64690 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447171984.739:706107): pid=19152 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=64690 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447171984.745:706108): pid=19152 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447171984.746:706109): pid=19152 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19153 suid=74 rport=64690 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447171984.748:706110): pid=19152 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447171984.748:706111): pid=19152 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447171984.748:706112): pid=19152 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23335 res=1
type=USER_ROLE_CHANGE msg=audit(1447171984.811:706113): pid=19152 uid=0 auid=0 ses=23335 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447171984.834:706114): pid=19152 uid=0 auid=0 ses=23335 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447171984.837:706115): pid=19152 uid=0 auid=0 ses=23335 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447171984.837:706116): pid=19152 uid=0 auid=0 ses=23335 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447171984.839:706117): pid=19155 uid=0 auid=0 ses=23335 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=19155 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447171984.839:706118): pid=19155 uid=0 auid=0 ses=23335 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=19155 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447171984.839:706119): pid=19155 uid=0 auid=0 ses=23335 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=19155 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447171984.839:706120): pid=19155 uid=0 auid=0 ses=23335 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447171984.855:706121): pid=19152 uid=0 auid=0 ses=23335 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447171984.855:706122): pid=19152 uid=0 auid=0 ses=23335 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447171984.858:706123): pid=19152 uid=0 auid=0 ses=23335 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447171984.858:706124): pid=19152 uid=0 auid=0 ses=23335 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447171984.858:706125): pid=19152 uid=0 auid=0 ses=23335 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19152 suid=0 rport=64690 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447171984.858:706126): pid=19152 uid=0 auid=0 ses=23335 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=19152 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447171984.858:706127): pid=19152 uid=0 auid=0 ses=23335 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=19152 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447171984.858:706128): pid=19152 uid=0 auid=0 ses=23335 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=19152 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447172401.335:706129): pid=20450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447172401.335:706130): pid=20449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447172401.335:706131): pid=20450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447172401.335:706132): pid=20449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447172401.336:706133): pid=20450 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23336 res=1
type=LOGIN msg=audit(1447172401.336:706134): pid=20449 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23337 res=1
type=USER_START msg=audit(1447172401.354:706135): pid=20449 uid=0 auid=0 ses=23337 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447172401.355:706136): pid=20449 uid=0 auid=0 ses=23337 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447172401.355:706137): pid=20450 uid=0 auid=0 ses=23336 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447172401.355:706138): pid=20450 uid=0 auid=0 ses=23336 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447172401.362:706139): pid=20450 uid=0 auid=0 ses=23336 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447172401.363:706140): pid=20450 uid=0 auid=0 ses=23336 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447172401.371:706141): pid=20449 uid=0 auid=0 ses=23337 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447172401.372:706142): pid=20449 uid=0 auid=0 ses=23337 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447173001.392:706143): pid=22231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447173001.392:706144): pid=22231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447173001.393:706145): pid=22230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447173001.393:706146): pid=22231 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23338 res=1
type=CRED_ACQ msg=audit(1447173001.393:706147): pid=22230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447173001.393:706148): pid=22230 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23339 res=1
type=USER_START msg=audit(1447173001.417:706149): pid=22231 uid=0 auid=0 ses=23338 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447173001.417:706150): pid=22230 uid=0 auid=0 ses=23339 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447173001.417:706151): pid=22231 uid=0 auid=0 ses=23338 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447173001.417:706152): pid=22230 uid=0 auid=0 ses=23339 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447173001.425:706153): pid=22231 uid=0 auid=0 ses=23338 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447173001.426:706154): pid=22231 uid=0 auid=0 ses=23338 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447173001.443:706155): pid=22230 uid=0 auid=0 ses=23339 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447173001.444:706156): pid=22230 uid=0 auid=0 ses=23339 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447173182.653:706157): pid=22837 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=22837 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447173182.653:706158): pid=22837 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=22837 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447173182.653:706159): pid=22837 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=22837 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447173182.697:706160): pid=22836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=22837 suid=74 rport=33905 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447173182.697:706161): pid=22836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=22837 suid=74 rport=33905 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447173182.827:706162): pid=22836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33905 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447173182.827:706163): pid=22836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=33905 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447173182.836:706164): pid=22836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447173182.837:706165): pid=22836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22837 suid=74 rport=33905 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447173182.840:706166): pid=22836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447173182.840:706167): pid=22836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447173182.840:706168): pid=22836 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23340 res=1
type=USER_ROLE_CHANGE msg=audit(1447173182.909:706169): pid=22836 uid=0 auid=0 ses=23340 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447173182.929:706170): pid=22836 uid=0 auid=0 ses=23340 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447173182.932:706171): pid=22836 uid=0 auid=0 ses=23340 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447173182.932:706172): pid=22836 uid=0 auid=0 ses=23340 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447173182.933:706173): pid=22839 uid=0 auid=0 ses=23340 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=22839 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447173182.933:706174): pid=22839 uid=0 auid=0 ses=23340 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=22839 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447173182.933:706175): pid=22839 uid=0 auid=0 ses=23340 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=22839 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447173182.934:706176): pid=22839 uid=0 auid=0 ses=23340 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447173182.954:706177): pid=22836 uid=0 auid=0 ses=23340 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447173182.954:706178): pid=22836 uid=0 auid=0 ses=23340 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447173182.958:706179): pid=22836 uid=0 auid=0 ses=23340 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447173182.958:706180): pid=22836 uid=0 auid=0 ses=23340 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447173182.958:706181): pid=22836 uid=0 auid=0 ses=23340 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22836 suid=0 rport=33905 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447173182.958:706182): pid=22836 uid=0 auid=0 ses=23340 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=22836 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447173182.959:706183): pid=22836 uid=0 auid=0 ses=23340 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=22836 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447173182.959:706184): pid=22836 uid=0 auid=0 ses=23340 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=22836 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447173182.980:706185): pid=22847 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=22847 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447173182.981:706186): pid=22847 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=22847 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447173182.981:706187): pid=22847 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=22847 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447173183.025:706188): pid=22846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=22847 suid=74 rport=33906 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447173183.025:706189): pid=22846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=22847 suid=74 rport=33906 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447173183.155:706190): pid=22846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33906 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447173183.155:706191): pid=22846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=33906 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447173183.164:706192): pid=22846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447173183.165:706193): pid=22846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22847 suid=74 rport=33906 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447173183.167:706194): pid=22846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447173183.168:706195): pid=22846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447173183.168:706196): pid=22846 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23341 res=1
type=USER_ROLE_CHANGE msg=audit(1447173183.239:706197): pid=22846 uid=0 auid=0 ses=23341 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447173183.266:706198): pid=22846 uid=0 auid=0 ses=23341 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447173183.269:706199): pid=22846 uid=0 auid=0 ses=23341 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447173183.269:706200): pid=22846 uid=0 auid=0 ses=23341 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447173183.270:706201): pid=22849 uid=0 auid=0 ses=23341 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=22849 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447173183.271:706202): pid=22849 uid=0 auid=0 ses=23341 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=22849 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447173183.271:706203): pid=22849 uid=0 auid=0 ses=23341 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=22849 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447173183.271:706204): pid=22849 uid=0 auid=0 ses=23341 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447173184.543:706205): pid=22846 uid=0 auid=0 ses=23341 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447173184.543:706206): pid=22846 uid=0 auid=0 ses=23341 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447173184.546:706207): pid=22846 uid=0 auid=0 ses=23341 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447173184.547:706208): pid=22846 uid=0 auid=0 ses=23341 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447173184.548:706209): pid=22846 uid=0 auid=0 ses=23341 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22846 suid=0 rport=33906 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447173184.548:706210): pid=22846 uid=0 auid=0 ses=23341 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=22846 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447173184.548:706211): pid=22846 uid=0 auid=0 ses=23341 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=22846 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447173184.548:706212): pid=22846 uid=0 auid=0 ses=23341 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=22846 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447173184.582:706213): pid=22921 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=22921 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447173184.582:706214): pid=22921 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=22921 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447173184.583:706215): pid=22921 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=22921 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447173184.627:706216): pid=22920 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=22921 suid=74 rport=33910 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447173184.628:706217): pid=22920 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=22921 suid=74 rport=33910 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447173184.756:706218): pid=22920 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33910 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447173184.756:706219): pid=22920 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=33910 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447173184.764:706220): pid=22920 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447173184.765:706221): pid=22920 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22921 suid=74 rport=33910 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447173184.767:706222): pid=22920 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447173184.768:706223): pid=22920 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447173184.768:706224): pid=22920 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23342 res=1
type=USER_ROLE_CHANGE msg=audit(1447173184.838:706225): pid=22920 uid=0 auid=0 ses=23342 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447173184.857:706226): pid=22920 uid=0 auid=0 ses=23342 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447173184.859:706227): pid=22920 uid=0 auid=0 ses=23342 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447173184.859:706228): pid=22920 uid=0 auid=0 ses=23342 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447173184.861:706229): pid=22923 uid=0 auid=0 ses=23342 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=22923 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447173184.861:706230): pid=22923 uid=0 auid=0 ses=23342 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=22923 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447173184.861:706231): pid=22923 uid=0 auid=0 ses=23342 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=22923 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447173184.862:706232): pid=22923 uid=0 auid=0 ses=23342 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447173184.880:706233): pid=22920 uid=0 auid=0 ses=23342 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447173184.880:706234): pid=22920 uid=0 auid=0 ses=23342 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447173184.884:706235): pid=22920 uid=0 auid=0 ses=23342 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447173184.884:706236): pid=22920 uid=0 auid=0 ses=23342 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447173184.884:706237): pid=22920 uid=0 auid=0 ses=23342 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22920 suid=0 rport=33910 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447173184.884:706238): pid=22920 uid=0 auid=0 ses=23342 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=22920 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447173184.884:706239): pid=22920 uid=0 auid=0 ses=23342 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=22920 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447173184.885:706240): pid=22920 uid=0 auid=0 ses=23342 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=22920 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=SYSCALL msg=audit(1447173532.666:706241): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447173601.470:706242): pid=24149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447173601.470:706243): pid=24149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447173601.470:706244): pid=24148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447173601.470:706245): pid=24148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447173601.471:706246): pid=24149 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23343 res=1
type=LOGIN msg=audit(1447173601.471:706247): pid=24148 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23344 res=1
type=USER_START msg=audit(1447173601.488:706248): pid=24149 uid=0 auid=0 ses=23343 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447173601.488:706249): pid=24149 uid=0 auid=0 ses=23343 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447173601.491:706250): pid=24148 uid=0 auid=0 ses=23344 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447173601.492:706251): pid=24148 uid=0 auid=0 ses=23344 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447173601.496:706252): pid=24149 uid=0 auid=0 ses=23343 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447173601.497:706253): pid=24149 uid=0 auid=0 ses=23343 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447173601.511:706254): pid=24148 uid=0 auid=0 ses=23344 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447173601.512:706255): pid=24148 uid=0 auid=0 ses=23344 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447174201.529:706256): pid=25998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447174201.529:706257): pid=25999 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447174201.529:706258): pid=25999 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447174201.529:706259): pid=25998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447174201.530:706260): pid=25998 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23346 res=1
type=LOGIN msg=audit(1447174201.530:706261): pid=25999 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23345 res=1
type=USER_START msg=audit(1447174201.546:706262): pid=25998 uid=0 auid=0 ses=23346 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447174201.547:706263): pid=25998 uid=0 auid=0 ses=23346 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447174201.548:706264): pid=25999 uid=0 auid=0 ses=23345 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447174201.548:706265): pid=25999 uid=0 auid=0 ses=23345 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447174201.556:706266): pid=25999 uid=0 auid=0 ses=23345 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447174201.559:706267): pid=25999 uid=0 auid=0 ses=23345 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447174201.562:706268): pid=25998 uid=0 auid=0 ses=23346 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447174201.567:706269): pid=25998 uid=0 auid=0 ses=23346 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447174383.263:706270): pid=26563 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=26563 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447174383.263:706271): pid=26563 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=26563 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447174383.263:706272): pid=26563 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=26563 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447174383.308:706273): pid=26562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=26563 suid=74 rport=35886 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447174383.308:706274): pid=26562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=26563 suid=74 rport=35886 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447174383.434:706275): pid=26562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=35886 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447174383.434:706276): pid=26562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=35886 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447174383.440:706277): pid=26562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447174383.442:706278): pid=26562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26563 suid=74 rport=35886 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447174383.443:706279): pid=26562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447174383.445:706280): pid=26562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447174383.445:706281): pid=26562 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23347 res=1
type=USER_ROLE_CHANGE msg=audit(1447174383.516:706282): pid=26562 uid=0 auid=0 ses=23347 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447174383.539:706283): pid=26562 uid=0 auid=0 ses=23347 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447174383.542:706284): pid=26562 uid=0 auid=0 ses=23347 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447174383.542:706285): pid=26562 uid=0 auid=0 ses=23347 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447174383.543:706286): pid=26565 uid=0 auid=0 ses=23347 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=26565 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447174383.543:706287): pid=26565 uid=0 auid=0 ses=23347 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=26565 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447174383.543:706288): pid=26565 uid=0 auid=0 ses=23347 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=26565 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447174383.544:706289): pid=26565 uid=0 auid=0 ses=23347 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447174383.564:706290): pid=26562 uid=0 auid=0 ses=23347 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447174383.565:706291): pid=26562 uid=0 auid=0 ses=23347 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447174383.567:706292): pid=26562 uid=0 auid=0 ses=23347 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447174383.567:706293): pid=26562 uid=0 auid=0 ses=23347 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447174383.568:706294): pid=26562 uid=0 auid=0 ses=23347 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26562 suid=0 rport=35886 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447174383.568:706295): pid=26562 uid=0 auid=0 ses=23347 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=26562 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447174383.568:706296): pid=26562 uid=0 auid=0 ses=23347 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=26562 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447174383.568:706297): pid=26562 uid=0 auid=0 ses=23347 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=26562 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447174383.595:706298): pid=26573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=26573 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447174383.596:706299): pid=26573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=26573 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447174383.596:706300): pid=26573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=26573 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447174383.639:706301): pid=26572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=26573 suid=74 rport=35887 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447174383.639:706302): pid=26572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=26573 suid=74 rport=35887 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447174383.766:706303): pid=26572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=35887 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447174383.766:706304): pid=26572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=35887 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447174383.774:706305): pid=26572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447174383.776:706306): pid=26572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26573 suid=74 rport=35887 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447174383.779:706307): pid=26572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447174383.779:706308): pid=26572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447174383.779:706309): pid=26572 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23348 res=1
type=USER_ROLE_CHANGE msg=audit(1447174383.842:706310): pid=26572 uid=0 auid=0 ses=23348 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447174383.867:706311): pid=26572 uid=0 auid=0 ses=23348 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447174383.870:706312): pid=26572 uid=0 auid=0 ses=23348 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447174383.870:706313): pid=26572 uid=0 auid=0 ses=23348 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447174383.871:706314): pid=26575 uid=0 auid=0 ses=23348 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=26575 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447174383.872:706315): pid=26575 uid=0 auid=0 ses=23348 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=26575 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447174383.872:706316): pid=26575 uid=0 auid=0 ses=23348 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=26575 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447174383.873:706317): pid=26575 uid=0 auid=0 ses=23348 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447174385.156:706318): pid=26572 uid=0 auid=0 ses=23348 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447174385.157:706319): pid=26572 uid=0 auid=0 ses=23348 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447174385.160:706320): pid=26572 uid=0 auid=0 ses=23348 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447174385.161:706321): pid=26572 uid=0 auid=0 ses=23348 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447174385.161:706322): pid=26572 uid=0 auid=0 ses=23348 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26572 suid=0 rport=35887 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447174385.161:706323): pid=26572 uid=0 auid=0 ses=23348 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=26572 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447174385.161:706324): pid=26572 uid=0 auid=0 ses=23348 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=26572 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447174385.161:706325): pid=26572 uid=0 auid=0 ses=23348 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=26572 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447174385.197:706326): pid=26625 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=26625 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447174385.197:706327): pid=26625 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=26625 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447174385.197:706328): pid=26625 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=26625 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447174385.241:706329): pid=26624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=26625 suid=74 rport=35891 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447174385.241:706330): pid=26624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=26625 suid=74 rport=35891 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447174385.363:706331): pid=26624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=35891 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447174385.363:706332): pid=26624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=35891 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447174385.367:706333): pid=26624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447174385.368:706334): pid=26624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26625 suid=74 rport=35891 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447174385.369:706335): pid=26624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447174385.369:706336): pid=26624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447174385.370:706337): pid=26624 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23349 res=1
type=USER_ROLE_CHANGE msg=audit(1447174385.435:706338): pid=26624 uid=0 auid=0 ses=23349 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447174385.457:706339): pid=26624 uid=0 auid=0 ses=23349 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447174385.460:706340): pid=26624 uid=0 auid=0 ses=23349 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447174385.460:706341): pid=26624 uid=0 auid=0 ses=23349 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447174385.461:706342): pid=26627 uid=0 auid=0 ses=23349 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=26627 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447174385.461:706343): pid=26627 uid=0 auid=0 ses=23349 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=26627 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447174385.461:706344): pid=26627 uid=0 auid=0 ses=23349 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=26627 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447174385.462:706345): pid=26627 uid=0 auid=0 ses=23349 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447174385.481:706346): pid=26624 uid=0 auid=0 ses=23349 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447174385.481:706347): pid=26624 uid=0 auid=0 ses=23349 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447174385.487:706348): pid=26624 uid=0 auid=0 ses=23349 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447174385.488:706349): pid=26624 uid=0 auid=0 ses=23349 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447174385.488:706350): pid=26624 uid=0 auid=0 ses=23349 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26624 suid=0 rport=35891 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447174385.488:706351): pid=26624 uid=0 auid=0 ses=23349 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=26624 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447174385.488:706352): pid=26624 uid=0 auid=0 ses=23349 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=26624 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447174385.488:706353): pid=26624 uid=0 auid=0 ses=23349 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=26624 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=SYSCALL msg=audit(1447174595.759:706354): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447174801.593:706355): pid=27916 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447174801.593:706356): pid=27915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447174801.594:706357): pid=27915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447174801.594:706358): pid=27916 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447174801.595:706359): pid=27916 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23350 res=1
type=LOGIN msg=audit(1447174801.595:706360): pid=27915 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23351 res=1
type=USER_START msg=audit(1447174801.617:706361): pid=27915 uid=0 auid=0 ses=23351 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447174801.617:706362): pid=27915 uid=0 auid=0 ses=23351 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447174801.620:706363): pid=27916 uid=0 auid=0 ses=23350 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447174801.620:706364): pid=27916 uid=0 auid=0 ses=23350 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447174801.628:706365): pid=27916 uid=0 auid=0 ses=23350 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447174801.629:706366): pid=27916 uid=0 auid=0 ses=23350 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447174801.634:706367): pid=27915 uid=0 auid=0 ses=23351 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447174801.636:706368): pid=27915 uid=0 auid=0 ses=23351 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447174861.644:706369): pid=28151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447174861.644:706370): pid=28151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447174861.644:706371): pid=28151 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23352 res=1
type=USER_START msg=audit(1447174861.654:706372): pid=28151 uid=0 auid=0 ses=23352 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447174861.654:706373): pid=28151 uid=0 auid=0 ses=23352 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447174861.676:706374): pid=28151 uid=0 auid=0 ses=23352 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447174861.677:706375): pid=28151 uid=0 auid=0 ses=23352 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447175401.688:706377): pid=29819 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447175401.688:706376): pid=29818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447175401.689:706378): pid=29819 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447175401.689:706379): pid=29818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447175401.689:706380): pid=29819 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23353 res=1
type=LOGIN msg=audit(1447175401.689:706381): pid=29818 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23354 res=1
type=USER_START msg=audit(1447175401.703:706382): pid=29818 uid=0 auid=0 ses=23354 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447175401.703:706383): pid=29818 uid=0 auid=0 ses=23354 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447175401.706:706384): pid=29819 uid=0 auid=0 ses=23353 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447175401.707:706385): pid=29819 uid=0 auid=0 ses=23353 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447175401.712:706386): pid=29819 uid=0 auid=0 ses=23353 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447175401.713:706387): pid=29819 uid=0 auid=0 ses=23353 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447175401.718:706388): pid=29818 uid=0 auid=0 ses=23354 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447175426.745:706389): pid=29818 uid=0 auid=0 ses=23354 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=CRYPTO_KEY_USER msg=audit(1447175582.783:706390): pid=30389 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=30389 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447175582.783:706391): pid=30389 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=30389 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447175582.783:706392): pid=30389 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=30389 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447175582.828:706393): pid=30388 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=30389 suid=74 rport=37862 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447175582.828:706394): pid=30388 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=30389 suid=74 rport=37862 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447175582.958:706395): pid=30388 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=37862 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447175582.958:706396): pid=30388 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=37862 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447175582.967:706397): pid=30388 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447175582.968:706398): pid=30388 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=30389 suid=74 rport=37862 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447175582.968:706399): pid=30388 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447175582.969:706400): pid=30388 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447175582.969:706401): pid=30388 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23355 res=1
type=USER_ROLE_CHANGE msg=audit(1447175583.037:706402): pid=30388 uid=0 auid=0 ses=23355 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447175583.056:706403): pid=30388 uid=0 auid=0 ses=23355 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447175583.059:706404): pid=30388 uid=0 auid=0 ses=23355 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447175583.059:706405): pid=30388 uid=0 auid=0 ses=23355 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447175583.060:706406): pid=30391 uid=0 auid=0 ses=23355 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=30391 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447175583.060:706407): pid=30391 uid=0 auid=0 ses=23355 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=30391 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447175583.060:706408): pid=30391 uid=0 auid=0 ses=23355 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=30391 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447175583.061:706409): pid=30391 uid=0 auid=0 ses=23355 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447175583.078:706410): pid=30388 uid=0 auid=0 ses=23355 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447175583.078:706411): pid=30388 uid=0 auid=0 ses=23355 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447175583.081:706412): pid=30388 uid=0 auid=0 ses=23355 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447175583.081:706413): pid=30388 uid=0 auid=0 ses=23355 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447175583.082:706414): pid=30388 uid=0 auid=0 ses=23355 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=30388 suid=0 rport=37862 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447175583.082:706415): pid=30388 uid=0 auid=0 ses=23355 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=30388 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447175583.082:706416): pid=30388 uid=0 auid=0 ses=23355 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=30388 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447175583.082:706417): pid=30388 uid=0 auid=0 ses=23355 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=30388 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447175583.105:706418): pid=30399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=30399 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447175583.105:706419): pid=30399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=30399 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447175583.105:706420): pid=30399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=30399 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447175583.150:706421): pid=30398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=30399 suid=74 rport=37868 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447175583.150:706422): pid=30398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=30399 suid=74 rport=37868 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447175583.279:706423): pid=30398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=37868 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447175583.279:706424): pid=30398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=37868 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447175583.288:706425): pid=30398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447175583.289:706426): pid=30398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=30399 suid=74 rport=37868 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447175583.290:706427): pid=30398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447175583.291:706428): pid=30398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447175583.291:706429): pid=30398 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23356 res=1
type=USER_ROLE_CHANGE msg=audit(1447175583.360:706430): pid=30398 uid=0 auid=0 ses=23356 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447175583.386:706431): pid=30398 uid=0 auid=0 ses=23356 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447175583.389:706432): pid=30398 uid=0 auid=0 ses=23356 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447175583.389:706433): pid=30398 uid=0 auid=0 ses=23356 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447175583.391:706434): pid=30401 uid=0 auid=0 ses=23356 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=30401 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447175583.391:706435): pid=30401 uid=0 auid=0 ses=23356 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=30401 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447175583.391:706436): pid=30401 uid=0 auid=0 ses=23356 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=30401 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447175583.391:706437): pid=30401 uid=0 auid=0 ses=23356 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447175584.681:706438): pid=30398 uid=0 auid=0 ses=23356 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447175584.682:706439): pid=30398 uid=0 auid=0 ses=23356 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447175584.688:706440): pid=30398 uid=0 auid=0 ses=23356 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447175584.688:706441): pid=30398 uid=0 auid=0 ses=23356 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447175584.688:706442): pid=30398 uid=0 auid=0 ses=23356 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=30398 suid=0 rport=37868 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447175584.689:706443): pid=30398 uid=0 auid=0 ses=23356 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=30398 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447175584.689:706444): pid=30398 uid=0 auid=0 ses=23356 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=30398 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447175584.689:706445): pid=30398 uid=0 auid=0 ses=23356 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=30398 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447175584.717:706446): pid=30451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=30451 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447175584.717:706447): pid=30451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=30451 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447175584.718:706448): pid=30451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=30451 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447175584.762:706449): pid=30450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=30451 suid=74 rport=37870 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447175584.762:706450): pid=30450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=30451 suid=74 rport=37870 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447175584.882:706451): pid=30450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=37870 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447175584.882:706452): pid=30450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=37870 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447175584.888:706453): pid=30450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447175584.889:706454): pid=30450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=30451 suid=74 rport=37870 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447175584.890:706455): pid=30450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447175584.890:706456): pid=30450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447175584.890:706457): pid=30450 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23357 res=1
type=USER_ROLE_CHANGE msg=audit(1447175584.955:706458): pid=30450 uid=0 auid=0 ses=23357 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447175584.976:706459): pid=30450 uid=0 auid=0 ses=23357 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447175584.979:706460): pid=30450 uid=0 auid=0 ses=23357 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447175584.979:706461): pid=30450 uid=0 auid=0 ses=23357 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447175584.981:706462): pid=30453 uid=0 auid=0 ses=23357 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=30453 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447175584.981:706463): pid=30453 uid=0 auid=0 ses=23357 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=30453 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447175584.981:706464): pid=30453 uid=0 auid=0 ses=23357 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=30453 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447175584.982:706465): pid=30453 uid=0 auid=0 ses=23357 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447175585.001:706466): pid=30450 uid=0 auid=0 ses=23357 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447175585.001:706467): pid=30450 uid=0 auid=0 ses=23357 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447175585.004:706468): pid=30450 uid=0 auid=0 ses=23357 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447175585.004:706469): pid=30450 uid=0 auid=0 ses=23357 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447175585.005:706470): pid=30450 uid=0 auid=0 ses=23357 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=30450 suid=0 rport=37870 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447175585.005:706471): pid=30450 uid=0 auid=0 ses=23357 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=30450 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447175585.005:706472): pid=30450 uid=0 auid=0 ses=23357 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=30450 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447175585.005:706473): pid=30450 uid=0 auid=0 ses=23357 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=30450 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=SYSCALL msg=audit(1447175646.680:706474): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447176001.769:706475): pid=31740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447176001.769:706476): pid=31740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447176001.769:706477): pid=31741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447176001.769:706478): pid=31741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447176001.770:706479): pid=31740 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23358 res=1
type=LOGIN msg=audit(1447176001.770:706480): pid=31741 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23359 res=1
type=USER_START msg=audit(1447176001.792:706481): pid=31740 uid=0 auid=0 ses=23358 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447176001.792:706482): pid=31740 uid=0 auid=0 ses=23358 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447176001.792:706483): pid=31741 uid=0 auid=0 ses=23359 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447176001.793:706484): pid=31741 uid=0 auid=0 ses=23359 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447176001.803:706485): pid=31741 uid=0 auid=0 ses=23359 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447176001.805:706486): pid=31741 uid=0 auid=0 ses=23359 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447176001.806:706487): pid=31740 uid=0 auid=0 ses=23358 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447176026.837:706488): pid=31740 uid=0 auid=0 ses=23358 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=USER_ACCT msg=audit(1447176601.859:706489): pid=1236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447176601.859:706490): pid=1236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447176601.859:706491): pid=1236 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23360 res=1
type=USER_ACCT msg=audit(1447176601.860:706492): pid=1237 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447176601.860:706493): pid=1237 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447176601.860:706494): pid=1237 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23361 res=1
type=USER_START msg=audit(1447176601.874:706495): pid=1236 uid=0 auid=0 ses=23360 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447176601.874:706496): pid=1236 uid=0 auid=0 ses=23360 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447176601.875:706497): pid=1237 uid=0 auid=0 ses=23361 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447176601.875:706498): pid=1237 uid=0 auid=0 ses=23361 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447176601.882:706499): pid=1237 uid=0 auid=0 ses=23361 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447176601.885:706500): pid=1237 uid=0 auid=0 ses=23361 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447176601.887:706501): pid=1236 uid=0 auid=0 ses=23360 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447176626.914:706502): pid=1236 uid=0 auid=0 ses=23360 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=CRYPTO_KEY_USER msg=audit(1447176782.595:706503): pid=1805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=1805 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447176782.595:706504): pid=1805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=1805 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447176782.595:706505): pid=1805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=1805 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447176782.639:706506): pid=1804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=1805 suid=74 rport=39841 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447176782.639:706507): pid=1804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=1805 suid=74 rport=39841 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447176782.764:706508): pid=1804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=39841 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447176782.764:706509): pid=1804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=39841 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447176782.770:706510): pid=1804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447176782.771:706511): pid=1804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1805 suid=74 rport=39841 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447176782.771:706512): pid=1804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447176782.771:706513): pid=1804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447176782.771:706514): pid=1804 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23362 res=1
type=USER_ROLE_CHANGE msg=audit(1447176782.840:706515): pid=1804 uid=0 auid=0 ses=23362 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447176782.862:706516): pid=1804 uid=0 auid=0 ses=23362 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447176782.864:706517): pid=1804 uid=0 auid=0 ses=23362 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447176782.864:706518): pid=1804 uid=0 auid=0 ses=23362 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447176782.867:706519): pid=1807 uid=0 auid=0 ses=23362 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=1807 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447176782.867:706520): pid=1807 uid=0 auid=0 ses=23362 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=1807 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447176782.867:706521): pid=1807 uid=0 auid=0 ses=23362 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=1807 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447176782.867:706522): pid=1807 uid=0 auid=0 ses=23362 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447176782.885:706523): pid=1804 uid=0 auid=0 ses=23362 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447176782.885:706524): pid=1804 uid=0 auid=0 ses=23362 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447176782.889:706525): pid=1804 uid=0 auid=0 ses=23362 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447176782.889:706526): pid=1804 uid=0 auid=0 ses=23362 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447176782.889:706527): pid=1804 uid=0 auid=0 ses=23362 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1804 suid=0 rport=39841 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447176782.889:706528): pid=1804 uid=0 auid=0 ses=23362 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=1804 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447176782.889:706529): pid=1804 uid=0 auid=0 ses=23362 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=1804 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447176782.889:706530): pid=1804 uid=0 auid=0 ses=23362 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=1804 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447176782.911:706531): pid=1815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=1815 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447176782.911:706532): pid=1815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=1815 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447176782.911:706533): pid=1815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=1815 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447176782.955:706534): pid=1814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=1815 suid=74 rport=39842 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447176782.955:706535): pid=1814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=1815 suid=74 rport=39842 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447176783.085:706536): pid=1814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=39842 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447176783.085:706537): pid=1814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=39842 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447176783.092:706538): pid=1814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447176783.092:706539): pid=1814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1815 suid=74 rport=39842 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447176783.092:706540): pid=1814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447176783.093:706541): pid=1814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447176783.093:706542): pid=1814 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23363 res=1
type=USER_ROLE_CHANGE msg=audit(1447176783.158:706543): pid=1814 uid=0 auid=0 ses=23363 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447176783.179:706544): pid=1814 uid=0 auid=0 ses=23363 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447176783.183:706545): pid=1814 uid=0 auid=0 ses=23363 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447176783.183:706546): pid=1814 uid=0 auid=0 ses=23363 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447176783.183:706547): pid=1817 uid=0 auid=0 ses=23363 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=1817 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447176783.183:706548): pid=1817 uid=0 auid=0 ses=23363 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=1817 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447176783.183:706549): pid=1817 uid=0 auid=0 ses=23363 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=1817 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447176783.184:706550): pid=1817 uid=0 auid=0 ses=23363 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447176784.446:706551): pid=1814 uid=0 auid=0 ses=23363 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447176784.446:706552): pid=1814 uid=0 auid=0 ses=23363 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447176784.452:706553): pid=1814 uid=0 auid=0 ses=23363 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447176784.452:706554): pid=1814 uid=0 auid=0 ses=23363 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447176784.453:706555): pid=1814 uid=0 auid=0 ses=23363 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1814 suid=0 rport=39842 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447176784.454:706556): pid=1814 uid=0 auid=0 ses=23363 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=1814 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447176784.454:706557): pid=1814 uid=0 auid=0 ses=23363 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=1814 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447176784.454:706558): pid=1814 uid=0 auid=0 ses=23363 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=1814 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447176784.484:706559): pid=1867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=1867 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447176784.485:706560): pid=1867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=1867 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447176784.485:706561): pid=1867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=1867 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447176784.529:706562): pid=1866 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=1867 suid=74 rport=39850 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447176784.529:706563): pid=1866 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=1867 suid=74 rport=39850 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447176784.658:706564): pid=1866 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=39850 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447176784.658:706565): pid=1866 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=39850 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447176784.666:706566): pid=1866 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447176784.669:706567): pid=1866 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1867 suid=74 rport=39850 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447176784.669:706568): pid=1866 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447176784.669:706569): pid=1866 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447176784.669:706570): pid=1866 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23364 res=1
type=USER_ROLE_CHANGE msg=audit(1447176784.735:706571): pid=1866 uid=0 auid=0 ses=23364 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447176784.759:706572): pid=1866 uid=0 auid=0 ses=23364 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447176784.762:706573): pid=1866 uid=0 auid=0 ses=23364 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447176784.762:706574): pid=1866 uid=0 auid=0 ses=23364 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447176784.763:706575): pid=1869 uid=0 auid=0 ses=23364 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=1869 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447176784.763:706576): pid=1869 uid=0 auid=0 ses=23364 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=1869 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447176784.763:706577): pid=1869 uid=0 auid=0 ses=23364 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=1869 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447176784.764:706578): pid=1869 uid=0 auid=0 ses=23364 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447176784.783:706579): pid=1866 uid=0 auid=0 ses=23364 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447176784.783:706580): pid=1866 uid=0 auid=0 ses=23364 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447176784.786:706581): pid=1866 uid=0 auid=0 ses=23364 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447176784.786:706582): pid=1866 uid=0 auid=0 ses=23364 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447176784.789:706583): pid=1866 uid=0 auid=0 ses=23364 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1866 suid=0 rport=39850 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447176784.789:706584): pid=1866 uid=0 auid=0 ses=23364 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=1866 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447176784.789:706585): pid=1866 uid=0 auid=0 ses=23364 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=1866 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447176784.789:706586): pid=1866 uid=0 auid=0 ses=23364 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=1866 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447177201.934:706587): pid=3157 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447177201.934:706588): pid=3156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447177201.934:706589): pid=3157 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447177201.934:706590): pid=3156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447177201.935:706591): pid=3157 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23365 res=1
type=LOGIN msg=audit(1447177201.935:706592): pid=3156 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23366 res=1
type=USER_START msg=audit(1447177201.954:706593): pid=3157 uid=0 auid=0 ses=23365 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447177201.955:706594): pid=3157 uid=0 auid=0 ses=23365 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447177201.956:706595): pid=3156 uid=0 auid=0 ses=23366 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447177201.956:706596): pid=3156 uid=0 auid=0 ses=23366 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447177201.964:706597): pid=3157 uid=0 auid=0 ses=23365 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447177201.967:706598): pid=3157 uid=0 auid=0 ses=23365 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447177201.976:706599): pid=3156 uid=0 auid=0 ses=23366 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447177201.978:706600): pid=3156 uid=0 auid=0 ses=23366 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SERVICE_START msg=audit(1447177713.938:706601): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-tmpfiles-clean" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=SERVICE_STOP msg=audit(1447177713.938:706602): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-tmpfiles-clean" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=SYSCALL msg=audit(1447177743.678:706603): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447177801.994:706604): pid=5005 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447177801.995:706605): pid=5004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447177801.995:706606): pid=5005 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447177801.995:706607): pid=5004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447177801.995:706608): pid=5005 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23367 res=1
type=LOGIN msg=audit(1447177801.995:706609): pid=5004 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23368 res=1
type=USER_START msg=audit(1447177802.009:706610): pid=5005 uid=0 auid=0 ses=23367 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447177802.009:706611): pid=5004 uid=0 auid=0 ses=23368 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447177802.009:706612): pid=5004 uid=0 auid=0 ses=23368 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447177802.009:706613): pid=5005 uid=0 auid=0 ses=23367 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447177802.016:706614): pid=5005 uid=0 auid=0 ses=23367 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447177802.017:706615): pid=5005 uid=0 auid=0 ses=23367 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447177802.027:706616): pid=5004 uid=0 auid=0 ses=23368 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447177802.029:706617): pid=5004 uid=0 auid=0 ses=23368 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447177982.501:706618): pid=5569 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=5569 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447177982.501:706619): pid=5569 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=5569 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447177982.501:706620): pid=5569 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=5569 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447177982.547:706621): pid=5568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=5569 suid=74 rport=41822 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447177982.547:706622): pid=5568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=5569 suid=74 rport=41822 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447177982.666:706623): pid=5568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=41822 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447177982.666:706624): pid=5568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=41822 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447177982.671:706625): pid=5568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447177982.671:706626): pid=5568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5569 suid=74 rport=41822 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447177982.672:706627): pid=5568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447177982.672:706628): pid=5568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447177982.672:706629): pid=5568 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23369 res=1
type=USER_ROLE_CHANGE msg=audit(1447177982.740:706630): pid=5568 uid=0 auid=0 ses=23369 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447177982.759:706631): pid=5568 uid=0 auid=0 ses=23369 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447177982.761:706632): pid=5568 uid=0 auid=0 ses=23369 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447177982.761:706633): pid=5568 uid=0 auid=0 ses=23369 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447177982.763:706634): pid=5571 uid=0 auid=0 ses=23369 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=5571 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447177982.763:706635): pid=5571 uid=0 auid=0 ses=23369 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=5571 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447177982.763:706636): pid=5571 uid=0 auid=0 ses=23369 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=5571 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447177982.763:706637): pid=5571 uid=0 auid=0 ses=23369 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447177982.780:706638): pid=5568 uid=0 auid=0 ses=23369 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447177982.780:706639): pid=5568 uid=0 auid=0 ses=23369 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447177982.783:706640): pid=5568 uid=0 auid=0 ses=23369 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447177982.783:706641): pid=5568 uid=0 auid=0 ses=23369 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447177982.784:706642): pid=5568 uid=0 auid=0 ses=23369 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5568 suid=0 rport=41822 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447177982.784:706643): pid=5568 uid=0 auid=0 ses=23369 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=5568 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447177982.784:706644): pid=5568 uid=0 auid=0 ses=23369 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=5568 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447177982.784:706645): pid=5568 uid=0 auid=0 ses=23369 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=5568 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447177982.806:706646): pid=5579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=5579 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447177982.806:706647): pid=5579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=5579 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447177982.806:706648): pid=5579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=5579 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447177982.851:706649): pid=5578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=5579 suid=74 rport=41823 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447177982.851:706650): pid=5578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=5579 suid=74 rport=41823 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447177982.971:706651): pid=5578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=41823 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447177982.971:706652): pid=5578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=41823 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447177982.975:706653): pid=5578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447177982.975:706654): pid=5578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5579 suid=74 rport=41823 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447177982.976:706655): pid=5578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447177982.977:706656): pid=5578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447177982.977:706657): pid=5578 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23370 res=1
type=USER_ROLE_CHANGE msg=audit(1447177983.041:706658): pid=5578 uid=0 auid=0 ses=23370 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447177983.061:706659): pid=5578 uid=0 auid=0 ses=23370 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447177983.064:706660): pid=5578 uid=0 auid=0 ses=23370 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447177983.064:706661): pid=5578 uid=0 auid=0 ses=23370 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447177983.065:706662): pid=5581 uid=0 auid=0 ses=23370 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=5581 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447177983.065:706663): pid=5581 uid=0 auid=0 ses=23370 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=5581 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447177983.065:706664): pid=5581 uid=0 auid=0 ses=23370 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=5581 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447177983.066:706665): pid=5581 uid=0 auid=0 ses=23370 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447177984.331:706666): pid=5578 uid=0 auid=0 ses=23370 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447177984.331:706667): pid=5578 uid=0 auid=0 ses=23370 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447177984.336:706668): pid=5578 uid=0 auid=0 ses=23370 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447177984.336:706669): pid=5578 uid=0 auid=0 ses=23370 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447177984.337:706670): pid=5578 uid=0 auid=0 ses=23370 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5578 suid=0 rport=41823 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447177984.337:706671): pid=5578 uid=0 auid=0 ses=23370 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=5578 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447177984.337:706672): pid=5578 uid=0 auid=0 ses=23370 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=5578 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447177984.337:706673): pid=5578 uid=0 auid=0 ses=23370 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=5578 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447177984.367:706674): pid=5631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=5631 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447177984.368:706675): pid=5631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=5631 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447177984.368:706676): pid=5631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=5631 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447177984.412:706677): pid=5630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=5631 suid=74 rport=41830 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447177984.412:706678): pid=5630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=5631 suid=74 rport=41830 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447177984.543:706679): pid=5630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=41830 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447177984.543:706680): pid=5630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=41830 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447177984.551:706681): pid=5630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447177984.553:706682): pid=5630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5631 suid=74 rport=41830 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447177984.554:706683): pid=5630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447177984.555:706684): pid=5630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447177984.555:706685): pid=5630 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23371 res=1
type=USER_ROLE_CHANGE msg=audit(1447177984.618:706686): pid=5630 uid=0 auid=0 ses=23371 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447177984.642:706687): pid=5630 uid=0 auid=0 ses=23371 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447177984.644:706688): pid=5630 uid=0 auid=0 ses=23371 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447177984.644:706689): pid=5630 uid=0 auid=0 ses=23371 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447177984.646:706690): pid=5633 uid=0 auid=0 ses=23371 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=5633 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447177984.646:706691): pid=5633 uid=0 auid=0 ses=23371 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=5633 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447177984.646:706692): pid=5633 uid=0 auid=0 ses=23371 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=5633 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447177984.647:706693): pid=5633 uid=0 auid=0 ses=23371 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447177984.667:706694): pid=5630 uid=0 auid=0 ses=23371 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447177984.667:706695): pid=5630 uid=0 auid=0 ses=23371 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447177984.673:706696): pid=5630 uid=0 auid=0 ses=23371 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447177984.673:706697): pid=5630 uid=0 auid=0 ses=23371 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447177984.674:706698): pid=5630 uid=0 auid=0 ses=23371 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5630 suid=0 rport=41830 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447177984.674:706699): pid=5630 uid=0 auid=0 ses=23371 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=5630 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447177984.674:706700): pid=5630 uid=0 auid=0 ses=23371 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=5630 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447177984.674:706701): pid=5630 uid=0 auid=0 ses=23371 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=5630 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447178401.046:706702): pid=6922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447178401.047:706703): pid=6922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447178401.047:706704): pid=6921 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447178401.047:706705): pid=6921 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447178401.048:706706): pid=6922 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23372 res=1
type=LOGIN msg=audit(1447178401.048:706707): pid=6921 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23373 res=1
type=USER_START msg=audit(1447178401.065:706708): pid=6922 uid=0 auid=0 ses=23372 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447178401.065:706709): pid=6921 uid=0 auid=0 ses=23373 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447178401.065:706710): pid=6922 uid=0 auid=0 ses=23372 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447178401.065:706711): pid=6921 uid=0 auid=0 ses=23373 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447178401.073:706712): pid=6922 uid=0 auid=0 ses=23372 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447178401.075:706713): pid=6922 uid=0 auid=0 ses=23372 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447178401.082:706714): pid=6921 uid=0 auid=0 ses=23373 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447178401.084:706715): pid=6921 uid=0 auid=0 ses=23373 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447178461.093:706716): pid=7158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447178461.093:706717): pid=7158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447178461.093:706718): pid=7158 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23374 res=1
type=USER_START msg=audit(1447178461.105:706719): pid=7158 uid=0 auid=0 ses=23374 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447178461.105:706720): pid=7158 uid=0 auid=0 ses=23374 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447178461.132:706721): pid=7158 uid=0 auid=0 ses=23374 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447178461.134:706722): pid=7158 uid=0 auid=0 ses=23374 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1447178827.740:706723): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447179001.146:706724): pid=8828 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447179001.146:706725): pid=8827 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447179001.146:706726): pid=8828 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447179001.146:706727): pid=8827 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447179001.146:706728): pid=8828 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23375 res=1
type=LOGIN msg=audit(1447179001.146:706729): pid=8827 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23376 res=1
type=USER_START msg=audit(1447179001.159:706730): pid=8828 uid=0 auid=0 ses=23375 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447179001.159:706731): pid=8828 uid=0 auid=0 ses=23375 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447179001.160:706732): pid=8827 uid=0 auid=0 ses=23376 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447179001.160:706733): pid=8827 uid=0 auid=0 ses=23376 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447179001.168:706734): pid=8828 uid=0 auid=0 ses=23375 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447179001.171:706735): pid=8827 uid=0 auid=0 ses=23376 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447179001.172:706736): pid=8828 uid=0 auid=0 ses=23375 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447179001.175:706737): pid=8827 uid=0 auid=0 ses=23376 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447179182.959:706738): pid=9398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=9398 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447179182.959:706739): pid=9398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=9398 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447179182.959:706740): pid=9398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=9398 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447179183.004:706741): pid=9397 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=9398 suid=74 rport=43803 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447179183.004:706742): pid=9397 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=9398 suid=74 rport=43803 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447179183.129:706743): pid=9397 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=43803 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447179183.129:706744): pid=9397 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=43803 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447179183.135:706745): pid=9397 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447179183.136:706746): pid=9397 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9398 suid=74 rport=43803 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447179183.138:706747): pid=9397 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447179183.138:706748): pid=9397 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447179183.138:706749): pid=9397 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23377 res=1
type=USER_ROLE_CHANGE msg=audit(1447179183.208:706750): pid=9397 uid=0 auid=0 ses=23377 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447179183.230:706751): pid=9397 uid=0 auid=0 ses=23377 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447179183.232:706752): pid=9397 uid=0 auid=0 ses=23377 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447179183.232:706753): pid=9397 uid=0 auid=0 ses=23377 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447179183.234:706754): pid=9400 uid=0 auid=0 ses=23377 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=9400 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447179183.234:706755): pid=9400 uid=0 auid=0 ses=23377 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=9400 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447179183.234:706756): pid=9400 uid=0 auid=0 ses=23377 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=9400 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447179183.235:706757): pid=9400 uid=0 auid=0 ses=23377 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447179183.257:706758): pid=9397 uid=0 auid=0 ses=23377 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447179183.257:706759): pid=9397 uid=0 auid=0 ses=23377 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447179183.262:706760): pid=9397 uid=0 auid=0 ses=23377 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447179183.262:706761): pid=9397 uid=0 auid=0 ses=23377 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447179183.263:706762): pid=9397 uid=0 auid=0 ses=23377 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9397 suid=0 rport=43803 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447179183.263:706763): pid=9397 uid=0 auid=0 ses=23377 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=9397 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447179183.263:706764): pid=9397 uid=0 auid=0 ses=23377 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=9397 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447179183.263:706765): pid=9397 uid=0 auid=0 ses=23377 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=9397 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447179183.282:706766): pid=9408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=9408 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447179183.282:706767): pid=9408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=9408 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447179183.282:706768): pid=9408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=9408 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447179183.328:706769): pid=9407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=9408 suid=74 rport=43804 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447179183.328:706770): pid=9407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=9408 suid=74 rport=43804 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447179183.456:706771): pid=9407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=43804 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447179183.457:706772): pid=9407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=43804 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447179183.464:706773): pid=9407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447179183.466:706774): pid=9407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9408 suid=74 rport=43804 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447179183.467:706775): pid=9407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447179183.468:706776): pid=9407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447179183.468:706777): pid=9407 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23378 res=1
type=USER_ROLE_CHANGE msg=audit(1447179183.536:706778): pid=9407 uid=0 auid=0 ses=23378 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447179183.560:706779): pid=9407 uid=0 auid=0 ses=23378 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447179183.563:706780): pid=9407 uid=0 auid=0 ses=23378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447179183.563:706781): pid=9407 uid=0 auid=0 ses=23378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447179183.565:706782): pid=9410 uid=0 auid=0 ses=23378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=9410 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447179183.565:706783): pid=9410 uid=0 auid=0 ses=23378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=9410 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447179183.565:706784): pid=9410 uid=0 auid=0 ses=23378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=9410 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447179183.565:706785): pid=9410 uid=0 auid=0 ses=23378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447179184.842:706786): pid=9407 uid=0 auid=0 ses=23378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447179184.842:706787): pid=9407 uid=0 auid=0 ses=23378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447179184.847:706788): pid=9407 uid=0 auid=0 ses=23378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447179184.847:706789): pid=9407 uid=0 auid=0 ses=23378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447179184.847:706790): pid=9407 uid=0 auid=0 ses=23378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9407 suid=0 rport=43804 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447179184.847:706791): pid=9407 uid=0 auid=0 ses=23378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=9407 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447179184.848:706792): pid=9407 uid=0 auid=0 ses=23378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=9407 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447179184.848:706793): pid=9407 uid=0 auid=0 ses=23378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=9407 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447179184.877:706794): pid=9460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=9460 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447179184.878:706795): pid=9460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=9460 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447179184.878:706796): pid=9460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=9460 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447179184.924:706797): pid=9459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=9460 suid=74 rport=43811 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447179184.924:706798): pid=9459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=9460 suid=74 rport=43811 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447179185.051:706799): pid=9459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=43811 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447179185.051:706800): pid=9459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=43811 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447179185.055:706801): pid=9459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447179185.056:706802): pid=9459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9460 suid=74 rport=43811 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447179185.057:706803): pid=9459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447179185.057:706804): pid=9459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447179185.057:706805): pid=9459 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23379 res=1
type=USER_ROLE_CHANGE msg=audit(1447179185.124:706806): pid=9459 uid=0 auid=0 ses=23379 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447179185.145:706807): pid=9459 uid=0 auid=0 ses=23379 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447179185.148:706808): pid=9459 uid=0 auid=0 ses=23379 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447179185.148:706809): pid=9459 uid=0 auid=0 ses=23379 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447179185.149:706810): pid=9462 uid=0 auid=0 ses=23379 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=9462 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447179185.149:706811): pid=9462 uid=0 auid=0 ses=23379 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=9462 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447179185.149:706812): pid=9462 uid=0 auid=0 ses=23379 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=9462 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447179185.150:706813): pid=9462 uid=0 auid=0 ses=23379 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447179185.165:706814): pid=9459 uid=0 auid=0 ses=23379 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447179185.166:706815): pid=9459 uid=0 auid=0 ses=23379 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447179185.168:706816): pid=9459 uid=0 auid=0 ses=23379 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447179185.168:706817): pid=9459 uid=0 auid=0 ses=23379 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447179185.169:706818): pid=9459 uid=0 auid=0 ses=23379 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9459 suid=0 rport=43811 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447179185.169:706819): pid=9459 uid=0 auid=0 ses=23379 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=9459 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447179185.169:706820): pid=9459 uid=0 auid=0 ses=23379 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=9459 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447179185.169:706821): pid=9459 uid=0 auid=0 ses=23379 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=9459 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447179601.195:706822): pid=10740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447179601.195:706823): pid=10741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447179601.195:706824): pid=10740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447179601.195:706825): pid=10741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447179601.196:706826): pid=10741 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23380 res=1
type=LOGIN msg=audit(1447179601.196:706827): pid=10740 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23381 res=1
type=USER_START msg=audit(1447179601.214:706828): pid=10741 uid=0 auid=0 ses=23380 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447179601.214:706829): pid=10740 uid=0 auid=0 ses=23381 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447179601.214:706830): pid=10741 uid=0 auid=0 ses=23380 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447179601.214:706831): pid=10740 uid=0 auid=0 ses=23381 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447179601.224:706832): pid=10741 uid=0 auid=0 ses=23380 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447179601.229:706833): pid=10741 uid=0 auid=0 ses=23380 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447179601.229:706834): pid=10740 uid=0 auid=0 ses=23381 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447179601.238:706835): pid=10740 uid=0 auid=0 ses=23381 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447180201.252:706836): pid=12534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447180201.252:706837): pid=12533 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447180201.252:706838): pid=12534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447180201.252:706839): pid=12533 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447180201.253:706840): pid=12534 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23382 res=1
type=LOGIN msg=audit(1447180201.253:706841): pid=12533 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23383 res=1
type=USER_START msg=audit(1447180201.271:706842): pid=12534 uid=0 auid=0 ses=23382 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447180201.271:706843): pid=12533 uid=0 auid=0 ses=23383 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447180201.271:706844): pid=12533 uid=0 auid=0 ses=23383 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447180201.271:706845): pid=12534 uid=0 auid=0 ses=23382 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447180201.278:706846): pid=12534 uid=0 auid=0 ses=23382 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447180201.280:706847): pid=12534 uid=0 auid=0 ses=23382 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447180201.285:706848): pid=12533 uid=0 auid=0 ses=23383 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447180201.288:706849): pid=12533 uid=0 auid=0 ses=23383 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447180383.063:706850): pid=13141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=13141 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447180383.063:706851): pid=13141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=13141 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447180383.063:706852): pid=13141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=13141 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447180383.108:706853): pid=13140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=13141 suid=74 rport=45788 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447180383.108:706854): pid=13140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=13141 suid=74 rport=45788 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447180383.237:706855): pid=13140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=45788 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447180383.237:706856): pid=13140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=45788 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447180383.246:706857): pid=13140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447180383.247:706858): pid=13140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13141 suid=74 rport=45788 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447180383.247:706859): pid=13140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447180383.248:706860): pid=13140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447180383.248:706861): pid=13140 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23384 res=1
type=USER_ROLE_CHANGE msg=audit(1447180383.321:706862): pid=13140 uid=0 auid=0 ses=23384 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447180383.346:706863): pid=13140 uid=0 auid=0 ses=23384 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447180383.350:706864): pid=13140 uid=0 auid=0 ses=23384 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447180383.350:706865): pid=13140 uid=0 auid=0 ses=23384 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447180383.352:706866): pid=13143 uid=0 auid=0 ses=23384 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=13143 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447180383.352:706867): pid=13143 uid=0 auid=0 ses=23384 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=13143 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447180383.352:706868): pid=13143 uid=0 auid=0 ses=23384 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=13143 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447180383.352:706869): pid=13143 uid=0 auid=0 ses=23384 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447180383.373:706870): pid=13140 uid=0 auid=0 ses=23384 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447180383.373:706871): pid=13140 uid=0 auid=0 ses=23384 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447180383.379:706872): pid=13140 uid=0 auid=0 ses=23384 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447180383.379:706873): pid=13140 uid=0 auid=0 ses=23384 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447180383.381:706874): pid=13140 uid=0 auid=0 ses=23384 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13140 suid=0 rport=45788 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447180383.381:706875): pid=13140 uid=0 auid=0 ses=23384 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=13140 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447180383.381:706876): pid=13140 uid=0 auid=0 ses=23384 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=13140 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447180383.381:706877): pid=13140 uid=0 auid=0 ses=23384 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=13140 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447180383.401:706878): pid=13151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=13151 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447180383.401:706879): pid=13151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=13151 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447180383.401:706880): pid=13151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=13151 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447180383.446:706881): pid=13150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=13151 suid=74 rport=45789 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447180383.446:706882): pid=13150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=13151 suid=74 rport=45789 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447180383.573:706883): pid=13150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=45789 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447180383.573:706884): pid=13150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=45789 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447180383.578:706885): pid=13150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447180383.579:706886): pid=13150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13151 suid=74 rport=45789 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447180383.581:706887): pid=13150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447180383.582:706888): pid=13150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447180383.582:706889): pid=13150 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23385 res=1
type=USER_ROLE_CHANGE msg=audit(1447180383.649:706890): pid=13150 uid=0 auid=0 ses=23385 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447180383.666:706891): pid=13150 uid=0 auid=0 ses=23385 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447180383.669:706892): pid=13150 uid=0 auid=0 ses=23385 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447180383.670:706893): pid=13150 uid=0 auid=0 ses=23385 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447180383.671:706894): pid=13153 uid=0 auid=0 ses=23385 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=13153 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447180383.671:706895): pid=13153 uid=0 auid=0 ses=23385 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=13153 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447180383.671:706896): pid=13153 uid=0 auid=0 ses=23385 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=13153 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447180383.672:706897): pid=13153 uid=0 auid=0 ses=23385 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447180384.932:706898): pid=13150 uid=0 auid=0 ses=23385 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447180384.932:706899): pid=13150 uid=0 auid=0 ses=23385 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447180384.938:706900): pid=13150 uid=0 auid=0 ses=23385 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447180384.938:706901): pid=13150 uid=0 auid=0 ses=23385 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447180384.939:706902): pid=13150 uid=0 auid=0 ses=23385 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13150 suid=0 rport=45789 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447180384.939:706903): pid=13150 uid=0 auid=0 ses=23385 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=13150 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447180384.939:706904): pid=13150 uid=0 auid=0 ses=23385 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=13150 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447180384.939:706905): pid=13150 uid=0 auid=0 ses=23385 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=13150 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447180384.969:706906): pid=13225 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=13225 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447180384.969:706907): pid=13225 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=13225 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447180384.970:706908): pid=13225 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=13225 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447180385.014:706909): pid=13224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=13225 suid=74 rport=45796 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447180385.014:706910): pid=13224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=13225 suid=74 rport=45796 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447180385.142:706911): pid=13224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=45796 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447180385.142:706912): pid=13224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=45796 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447180385.151:706913): pid=13224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447180385.152:706914): pid=13224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13225 suid=74 rport=45796 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447180385.154:706915): pid=13224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447180385.154:706916): pid=13224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447180385.155:706917): pid=13224 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23386 res=1
type=USER_ROLE_CHANGE msg=audit(1447180385.220:706918): pid=13224 uid=0 auid=0 ses=23386 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447180385.238:706919): pid=13224 uid=0 auid=0 ses=23386 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447180385.241:706920): pid=13224 uid=0 auid=0 ses=23386 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447180385.241:706921): pid=13224 uid=0 auid=0 ses=23386 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447180385.242:706922): pid=13227 uid=0 auid=0 ses=23386 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=13227 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447180385.242:706923): pid=13227 uid=0 auid=0 ses=23386 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=13227 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447180385.242:706924): pid=13227 uid=0 auid=0 ses=23386 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=13227 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447180385.243:706925): pid=13227 uid=0 auid=0 ses=23386 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447180385.258:706926): pid=13224 uid=0 auid=0 ses=23386 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447180385.258:706927): pid=13224 uid=0 auid=0 ses=23386 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447180385.261:706928): pid=13224 uid=0 auid=0 ses=23386 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447180385.261:706929): pid=13224 uid=0 auid=0 ses=23386 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447180385.262:706930): pid=13224 uid=0 auid=0 ses=23386 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13224 suid=0 rport=45796 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447180385.262:706931): pid=13224 uid=0 auid=0 ses=23386 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=13224 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447180385.262:706932): pid=13224 uid=0 auid=0 ses=23386 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=13224 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447180385.262:706933): pid=13224 uid=0 auid=0 ses=23386 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=13224 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447180801.305:706934): pid=14569 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447180801.306:706935): pid=14568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447180801.306:706936): pid=14569 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447180801.306:706937): pid=14568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447180801.307:706938): pid=14569 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23387 res=1
type=LOGIN msg=audit(1447180801.307:706939): pid=14568 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23388 res=1
type=USER_START msg=audit(1447180801.329:706940): pid=14568 uid=0 auid=0 ses=23388 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447180801.329:706941): pid=14569 uid=0 auid=0 ses=23387 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447180801.329:706943): pid=14569 uid=0 auid=0 ses=23387 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447180801.329:706942): pid=14568 uid=0 auid=0 ses=23388 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447180801.340:706944): pid=14569 uid=0 auid=0 ses=23387 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447180801.341:706945): pid=14569 uid=0 auid=0 ses=23387 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447180801.353:706946): pid=14568 uid=0 auid=0 ses=23388 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447180826.380:706947): pid=14568 uid=0 auid=0 ses=23388 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=SYSCALL msg=audit(1447180949.758:706948): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447181401.395:706949): pid=16416 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447181401.395:706950): pid=16415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447181401.395:706951): pid=16416 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447181401.395:706952): pid=16415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447181401.395:706953): pid=16415 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23389 res=1
type=LOGIN msg=audit(1447181401.395:706954): pid=16416 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23390 res=1
type=USER_START msg=audit(1447181401.410:706955): pid=16415 uid=0 auid=0 ses=23389 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447181401.410:706956): pid=16416 uid=0 auid=0 ses=23390 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447181401.410:706957): pid=16415 uid=0 auid=0 ses=23389 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447181401.410:706958): pid=16416 uid=0 auid=0 ses=23390 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447181401.416:706959): pid=16416 uid=0 auid=0 ses=23390 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447181401.418:706960): pid=16416 uid=0 auid=0 ses=23390 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447181401.427:706961): pid=16415 uid=0 auid=0 ses=23389 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447181401.428:706962): pid=16415 uid=0 auid=0 ses=23389 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447181583.325:706963): pid=16981 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16981 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447181583.326:706964): pid=16981 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16981 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447181583.326:706965): pid=16981 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16981 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447181583.369:706966): pid=16980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=16981 suid=74 rport=47772 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447181583.370:706967): pid=16980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=16981 suid=74 rport=47772 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447181583.497:706968): pid=16980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=47772 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447181583.498:706969): pid=16980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=47772 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447181583.504:706970): pid=16980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447181583.506:706971): pid=16980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16981 suid=74 rport=47772 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447181583.509:706972): pid=16980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447181583.510:706973): pid=16980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447181583.510:706974): pid=16980 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23391 res=1
type=USER_ROLE_CHANGE msg=audit(1447181583.582:706975): pid=16980 uid=0 auid=0 ses=23391 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447181583.604:706976): pid=16980 uid=0 auid=0 ses=23391 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447181583.606:706977): pid=16980 uid=0 auid=0 ses=23391 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447181583.606:706978): pid=16980 uid=0 auid=0 ses=23391 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447181583.607:706979): pid=16983 uid=0 auid=0 ses=23391 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16983 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447181583.608:706980): pid=16983 uid=0 auid=0 ses=23391 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16983 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447181583.608:706981): pid=16983 uid=0 auid=0 ses=23391 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16983 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447181583.609:706982): pid=16983 uid=0 auid=0 ses=23391 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447181583.629:706983): pid=16980 uid=0 auid=0 ses=23391 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447181583.629:706984): pid=16980 uid=0 auid=0 ses=23391 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447181583.633:706985): pid=16980 uid=0 auid=0 ses=23391 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447181583.633:706986): pid=16980 uid=0 auid=0 ses=23391 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447181583.634:706987): pid=16980 uid=0 auid=0 ses=23391 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16980 suid=0 rport=47772 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447181583.634:706988): pid=16980 uid=0 auid=0 ses=23391 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16980 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447181583.634:706989): pid=16980 uid=0 auid=0 ses=23391 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16980 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447181583.634:706990): pid=16980 uid=0 auid=0 ses=23391 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16980 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447181583.655:706991): pid=16991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16991 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447181583.655:706992): pid=16991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16991 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447181583.656:706993): pid=16991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16991 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447181583.702:706994): pid=16990 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=16991 suid=74 rport=47773 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447181583.702:706995): pid=16990 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=16991 suid=74 rport=47773 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447181583.828:706996): pid=16990 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=47773 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447181583.828:706997): pid=16990 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=47773 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447181583.834:706998): pid=16990 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447181583.835:706999): pid=16990 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16991 suid=74 rport=47773 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447181583.837:707000): pid=16990 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447181583.837:707001): pid=16990 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447181583.837:707002): pid=16990 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23392 res=1
type=USER_ROLE_CHANGE msg=audit(1447181583.902:707003): pid=16990 uid=0 auid=0 ses=23392 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447181583.924:707004): pid=16990 uid=0 auid=0 ses=23392 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447181583.927:707005): pid=16990 uid=0 auid=0 ses=23392 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447181583.927:707006): pid=16990 uid=0 auid=0 ses=23392 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447181583.928:707007): pid=16993 uid=0 auid=0 ses=23392 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16993 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447181583.929:707008): pid=16993 uid=0 auid=0 ses=23392 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16993 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447181583.929:707009): pid=16993 uid=0 auid=0 ses=23392 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16993 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447181583.929:707010): pid=16993 uid=0 auid=0 ses=23392 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447181585.205:707011): pid=16990 uid=0 auid=0 ses=23392 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447181585.205:707012): pid=16990 uid=0 auid=0 ses=23392 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447181585.208:707013): pid=16990 uid=0 auid=0 ses=23392 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447181585.209:707014): pid=16990 uid=0 auid=0 ses=23392 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447181585.209:707015): pid=16990 uid=0 auid=0 ses=23392 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16990 suid=0 rport=47773 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447181585.209:707016): pid=16990 uid=0 auid=0 ses=23392 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16990 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447181585.209:707017): pid=16990 uid=0 auid=0 ses=23392 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16990 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447181585.209:707018): pid=16990 uid=0 auid=0 ses=23392 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16990 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447181585.244:707019): pid=17043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=17043 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447181585.244:707020): pid=17043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=17043 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447181585.244:707021): pid=17043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=17043 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447181585.288:707022): pid=17042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=17043 suid=74 rport=47776 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447181585.289:707023): pid=17042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=17043 suid=74 rport=47776 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447181585.416:707024): pid=17042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=47776 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447181585.417:707025): pid=17042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=47776 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447181585.425:707026): pid=17042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447181585.426:707027): pid=17042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=17043 suid=74 rport=47776 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447181585.429:707028): pid=17042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447181585.429:707029): pid=17042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447181585.429:707030): pid=17042 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23393 res=1
type=USER_ROLE_CHANGE msg=audit(1447181585.493:707031): pid=17042 uid=0 auid=0 ses=23393 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447181585.514:707032): pid=17042 uid=0 auid=0 ses=23393 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447181585.517:707033): pid=17042 uid=0 auid=0 ses=23393 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447181585.517:707034): pid=17042 uid=0 auid=0 ses=23393 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447181585.519:707035): pid=17045 uid=0 auid=0 ses=23393 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=17045 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447181585.519:707036): pid=17045 uid=0 auid=0 ses=23393 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=17045 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447181585.519:707037): pid=17045 uid=0 auid=0 ses=23393 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=17045 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447181585.520:707038): pid=17045 uid=0 auid=0 ses=23393 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447181585.538:707039): pid=17042 uid=0 auid=0 ses=23393 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447181585.538:707040): pid=17042 uid=0 auid=0 ses=23393 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447181585.541:707041): pid=17042 uid=0 auid=0 ses=23393 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447181585.541:707042): pid=17042 uid=0 auid=0 ses=23393 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447181585.542:707043): pid=17042 uid=0 auid=0 ses=23393 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=17042 suid=0 rport=47776 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447181585.542:707044): pid=17042 uid=0 auid=0 ses=23393 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=17042 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447181585.542:707045): pid=17042 uid=0 auid=0 ses=23393 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=17042 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447181585.542:707046): pid=17042 uid=0 auid=0 ses=23393 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=17042 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447182001.449:707047): pid=18334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447182001.449:707048): pid=18333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447182001.449:707049): pid=18334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447182001.449:707050): pid=18333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447182001.450:707051): pid=18334 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23394 res=1
type=LOGIN msg=audit(1447182001.450:707052): pid=18333 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23395 res=1
type=USER_START msg=audit(1447182001.468:707053): pid=18334 uid=0 auid=0 ses=23394 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447182001.468:707054): pid=18333 uid=0 auid=0 ses=23395 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447182001.468:707055): pid=18334 uid=0 auid=0 ses=23394 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447182001.468:707056): pid=18333 uid=0 auid=0 ses=23395 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447182001.476:707057): pid=18334 uid=0 auid=0 ses=23394 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447182001.477:707058): pid=18334 uid=0 auid=0 ses=23394 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447182001.485:707059): pid=18333 uid=0 auid=0 ses=23395 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447182001.486:707060): pid=18333 uid=0 auid=0 ses=23395 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1447182007.741:707061): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447182061.495:707062): pid=18569 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447182061.495:707063): pid=18569 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447182061.495:707064): pid=18569 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23396 res=1
type=USER_START msg=audit(1447182061.505:707065): pid=18569 uid=0 auid=0 ses=23396 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447182061.506:707066): pid=18569 uid=0 auid=0 ses=23396 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447182061.529:707067): pid=18569 uid=0 auid=0 ses=23396 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447182061.531:707068): pid=18569 uid=0 auid=0 ses=23396 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447182601.541:707069): pid=20237 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447182601.542:707070): pid=20238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447182601.542:707071): pid=20237 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447182601.542:707072): pid=20238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447182601.542:707073): pid=20238 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23397 res=1
type=LOGIN msg=audit(1447182601.542:707074): pid=20237 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23398 res=1
type=USER_START msg=audit(1447182601.559:707075): pid=20238 uid=0 auid=0 ses=23397 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447182601.559:707076): pid=20237 uid=0 auid=0 ses=23398 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447182601.559:707077): pid=20237 uid=0 auid=0 ses=23398 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447182601.559:707078): pid=20238 uid=0 auid=0 ses=23397 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447182601.565:707079): pid=20238 uid=0 auid=0 ses=23397 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447182601.566:707080): pid=20238 uid=0 auid=0 ses=23397 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447182601.570:707081): pid=20237 uid=0 auid=0 ses=23398 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447182601.572:707082): pid=20237 uid=0 auid=0 ses=23398 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447182782.649:707083): pid=20808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=20808 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447182782.649:707084): pid=20808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=20808 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447182782.649:707085): pid=20808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=20808 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447182782.693:707086): pid=20807 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=20808 suid=74 rport=49750 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447182782.693:707087): pid=20807 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=20808 suid=74 rport=49750 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447182782.823:707088): pid=20807 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=49750 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447182782.823:707089): pid=20807 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=49750 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447182782.832:707090): pid=20807 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447182782.833:707091): pid=20807 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20808 suid=74 rport=49750 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447182782.834:707092): pid=20807 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447182782.834:707093): pid=20807 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447182782.834:707094): pid=20807 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23399 res=1
type=USER_ROLE_CHANGE msg=audit(1447182782.904:707095): pid=20807 uid=0 auid=0 ses=23399 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447182782.925:707096): pid=20807 uid=0 auid=0 ses=23399 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447182782.928:707097): pid=20807 uid=0 auid=0 ses=23399 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447182782.928:707098): pid=20807 uid=0 auid=0 ses=23399 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447182782.929:707099): pid=20810 uid=0 auid=0 ses=23399 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=20810 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447182782.929:707100): pid=20810 uid=0 auid=0 ses=23399 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=20810 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447182782.929:707101): pid=20810 uid=0 auid=0 ses=23399 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=20810 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447182782.930:707102): pid=20810 uid=0 auid=0 ses=23399 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447182782.950:707103): pid=20807 uid=0 auid=0 ses=23399 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447182782.950:707104): pid=20807 uid=0 auid=0 ses=23399 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447182782.954:707105): pid=20807 uid=0 auid=0 ses=23399 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447182782.954:707106): pid=20807 uid=0 auid=0 ses=23399 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447182782.955:707107): pid=20807 uid=0 auid=0 ses=23399 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20807 suid=0 rport=49750 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447182782.955:707108): pid=20807 uid=0 auid=0 ses=23399 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=20807 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447182782.955:707109): pid=20807 uid=0 auid=0 ses=23399 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=20807 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447182782.955:707110): pid=20807 uid=0 auid=0 ses=23399 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=20807 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447182782.975:707111): pid=20818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=20818 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447182782.976:707112): pid=20818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=20818 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447182782.976:707113): pid=20818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=20818 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447182783.021:707114): pid=20817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=20818 suid=74 rport=49751 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447182783.021:707115): pid=20817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=20818 suid=74 rport=49751 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447182783.151:707116): pid=20817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=49751 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447182783.151:707117): pid=20817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=49751 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447182783.161:707118): pid=20817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447182783.162:707119): pid=20817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20818 suid=74 rport=49751 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447182783.165:707120): pid=20817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447182783.165:707121): pid=20817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447182783.165:707122): pid=20817 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23400 res=1
type=USER_ROLE_CHANGE msg=audit(1447182783.233:707123): pid=20817 uid=0 auid=0 ses=23400 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447182783.258:707124): pid=20817 uid=0 auid=0 ses=23400 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447182783.261:707125): pid=20817 uid=0 auid=0 ses=23400 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447182783.261:707126): pid=20817 uid=0 auid=0 ses=23400 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447182783.263:707127): pid=20820 uid=0 auid=0 ses=23400 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=20820 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447182783.263:707128): pid=20820 uid=0 auid=0 ses=23400 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=20820 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447182783.263:707129): pid=20820 uid=0 auid=0 ses=23400 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=20820 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447182783.264:707130): pid=20820 uid=0 auid=0 ses=23400 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447182784.536:707131): pid=20817 uid=0 auid=0 ses=23400 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447182784.536:707132): pid=20817 uid=0 auid=0 ses=23400 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447182784.540:707133): pid=20817 uid=0 auid=0 ses=23400 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447182784.540:707134): pid=20817 uid=0 auid=0 ses=23400 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447182784.541:707135): pid=20817 uid=0 auid=0 ses=23400 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20817 suid=0 rport=49751 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447182784.542:707136): pid=20817 uid=0 auid=0 ses=23400 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=20817 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447182784.542:707137): pid=20817 uid=0 auid=0 ses=23400 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=20817 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447182784.542:707138): pid=20817 uid=0 auid=0 ses=23400 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=20817 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447182784.578:707139): pid=20870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=20870 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447182784.578:707140): pid=20870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=20870 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447182784.578:707141): pid=20870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=20870 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447182784.623:707142): pid=20869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=20870 suid=74 rport=49755 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447182784.623:707143): pid=20869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=20870 suid=74 rport=49755 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447182784.752:707144): pid=20869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=49755 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447182784.752:707145): pid=20869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=49755 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447182784.760:707146): pid=20869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447182784.761:707147): pid=20869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20870 suid=74 rport=49755 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447182784.763:707148): pid=20869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447182784.764:707149): pid=20869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447182784.764:707150): pid=20869 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23401 res=1
type=USER_ROLE_CHANGE msg=audit(1447182784.830:707151): pid=20869 uid=0 auid=0 ses=23401 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447182784.855:707152): pid=20869 uid=0 auid=0 ses=23401 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447182784.858:707153): pid=20869 uid=0 auid=0 ses=23401 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447182784.858:707154): pid=20869 uid=0 auid=0 ses=23401 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447182784.859:707155): pid=20872 uid=0 auid=0 ses=23401 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=20872 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447182784.859:707156): pid=20872 uid=0 auid=0 ses=23401 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=20872 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447182784.859:707157): pid=20872 uid=0 auid=0 ses=23401 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=20872 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447182784.860:707158): pid=20872 uid=0 auid=0 ses=23401 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447182784.877:707159): pid=20869 uid=0 auid=0 ses=23401 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447182784.877:707160): pid=20869 uid=0 auid=0 ses=23401 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447182784.879:707161): pid=20869 uid=0 auid=0 ses=23401 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447182784.880:707162): pid=20869 uid=0 auid=0 ses=23401 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447182784.880:707163): pid=20869 uid=0 auid=0 ses=23401 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20869 suid=0 rport=49755 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447182784.880:707164): pid=20869 uid=0 auid=0 ses=23401 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=20869 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447182784.880:707165): pid=20869 uid=0 auid=0 ses=23401 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=20869 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447182784.880:707166): pid=20869 uid=0 auid=0 ses=23401 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=20869 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447183201.590:707167): pid=22161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447183201.590:707168): pid=22161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447183201.590:707169): pid=22160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447183201.590:707170): pid=22160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447183201.591:707171): pid=22161 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23402 res=1
type=LOGIN msg=audit(1447183201.592:707172): pid=22160 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23403 res=1
type=USER_START msg=audit(1447183201.612:707173): pid=22160 uid=0 auid=0 ses=23403 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447183201.612:707174): pid=22161 uid=0 auid=0 ses=23402 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447183201.612:707175): pid=22160 uid=0 auid=0 ses=23403 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447183201.613:707176): pid=22161 uid=0 auid=0 ses=23402 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447183201.625:707177): pid=22161 uid=0 auid=0 ses=23402 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447183201.626:707178): pid=22161 uid=0 auid=0 ses=23402 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447183201.628:707179): pid=22160 uid=0 auid=0 ses=23403 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447183201.633:707180): pid=22160 uid=0 auid=0 ses=23403 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447183801.647:707181): pid=24023 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447183801.647:707182): pid=24023 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447183801.647:707183): pid=24024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447183801.647:707184): pid=24024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447183801.647:707185): pid=24023 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23404 res=1
type=LOGIN msg=audit(1447183801.647:707186): pid=24024 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23405 res=1
type=USER_START msg=audit(1447183801.662:707187): pid=24024 uid=0 auid=0 ses=23405 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447183801.662:707188): pid=24023 uid=0 auid=0 ses=23404 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447183801.662:707189): pid=24024 uid=0 auid=0 ses=23405 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447183801.662:707190): pid=24023 uid=0 auid=0 ses=23404 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447183801.669:707191): pid=24024 uid=0 auid=0 ses=23405 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447183801.670:707192): pid=24024 uid=0 auid=0 ses=23405 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447183801.673:707193): pid=24023 uid=0 auid=0 ses=23404 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447183826.700:707194): pid=24023 uid=0 auid=0 ses=23404 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=CRYPTO_KEY_USER msg=audit(1447183983.341:707195): pid=24600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=24600 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447183983.341:707196): pid=24600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=24600 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447183983.341:707197): pid=24600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=24600 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447183983.386:707198): pid=24599 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=24600 suid=74 rport=51731 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447183983.386:707199): pid=24599 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=24600 suid=74 rport=51731 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447183983.506:707200): pid=24599 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=51731 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447183983.506:707201): pid=24599 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=51731 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447183983.511:707202): pid=24599 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447183983.512:707203): pid=24599 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24600 suid=74 rport=51731 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447183983.515:707204): pid=24599 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447183983.515:707205): pid=24599 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447183983.515:707206): pid=24599 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23406 res=1
type=USER_ROLE_CHANGE msg=audit(1447183983.583:707207): pid=24599 uid=0 auid=0 ses=23406 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447183983.603:707208): pid=24599 uid=0 auid=0 ses=23406 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447183983.607:707209): pid=24599 uid=0 auid=0 ses=23406 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447183983.608:707210): pid=24599 uid=0 auid=0 ses=23406 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447183983.610:707211): pid=24602 uid=0 auid=0 ses=23406 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=24602 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447183983.610:707212): pid=24602 uid=0 auid=0 ses=23406 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=24602 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447183983.610:707213): pid=24602 uid=0 auid=0 ses=23406 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=24602 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447183983.611:707214): pid=24602 uid=0 auid=0 ses=23406 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447183983.630:707215): pid=24599 uid=0 auid=0 ses=23406 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447183983.630:707216): pid=24599 uid=0 auid=0 ses=23406 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447183983.634:707217): pid=24599 uid=0 auid=0 ses=23406 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447183983.634:707218): pid=24599 uid=0 auid=0 ses=23406 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447183983.634:707219): pid=24599 uid=0 auid=0 ses=23406 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24599 suid=0 rport=51731 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447183983.635:707220): pid=24599 uid=0 auid=0 ses=23406 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=24599 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447183983.635:707221): pid=24599 uid=0 auid=0 ses=23406 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=24599 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447183983.635:707222): pid=24599 uid=0 auid=0 ses=23406 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=24599 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447183983.658:707223): pid=24610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=24610 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447183983.658:707224): pid=24610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=24610 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447183983.658:707225): pid=24610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=24610 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447183983.702:707226): pid=24609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=24610 suid=74 rport=51735 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447183983.702:707227): pid=24609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=24610 suid=74 rport=51735 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447183983.831:707228): pid=24609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=51735 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447183983.831:707229): pid=24609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=51735 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447183983.840:707230): pid=24609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447183983.841:707231): pid=24609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24610 suid=74 rport=51735 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447183983.843:707232): pid=24609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447183983.844:707233): pid=24609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447183983.844:707234): pid=24609 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23407 res=1
type=USER_ROLE_CHANGE msg=audit(1447183983.908:707235): pid=24609 uid=0 auid=0 ses=23407 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447183983.931:707236): pid=24609 uid=0 auid=0 ses=23407 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447183983.933:707237): pid=24609 uid=0 auid=0 ses=23407 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447183983.933:707238): pid=24609 uid=0 auid=0 ses=23407 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447183983.935:707239): pid=24612 uid=0 auid=0 ses=23407 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=24612 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447183983.935:707240): pid=24612 uid=0 auid=0 ses=23407 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=24612 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447183983.935:707241): pid=24612 uid=0 auid=0 ses=23407 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=24612 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447183983.935:707242): pid=24612 uid=0 auid=0 ses=23407 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447183985.216:707243): pid=24609 uid=0 auid=0 ses=23407 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447183985.216:707244): pid=24609 uid=0 auid=0 ses=23407 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447183985.222:707245): pid=24609 uid=0 auid=0 ses=23407 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447183985.222:707246): pid=24609 uid=0 auid=0 ses=23407 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447183985.223:707247): pid=24609 uid=0 auid=0 ses=23407 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24609 suid=0 rport=51735 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447183985.223:707248): pid=24609 uid=0 auid=0 ses=23407 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=24609 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447183985.223:707249): pid=24609 uid=0 auid=0 ses=23407 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=24609 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447183985.223:707250): pid=24609 uid=0 auid=0 ses=23407 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=24609 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447183985.253:707251): pid=24662 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=24662 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447183985.253:707252): pid=24662 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=24662 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447183985.253:707253): pid=24662 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=24662 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447183985.297:707254): pid=24661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=24662 suid=74 rport=51736 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447183985.297:707255): pid=24661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=24662 suid=74 rport=51736 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447183985.425:707256): pid=24661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=51736 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447183985.425:707257): pid=24661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=51736 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447183985.433:707258): pid=24661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447183985.435:707259): pid=24661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24662 suid=74 rport=51736 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447183985.437:707260): pid=24661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447183985.437:707261): pid=24661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447183985.437:707262): pid=24661 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23408 res=1
type=USER_ROLE_CHANGE msg=audit(1447183985.505:707263): pid=24661 uid=0 auid=0 ses=23408 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447183985.528:707264): pid=24661 uid=0 auid=0 ses=23408 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447183985.530:707265): pid=24661 uid=0 auid=0 ses=23408 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447183985.530:707266): pid=24661 uid=0 auid=0 ses=23408 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447183985.532:707267): pid=24664 uid=0 auid=0 ses=23408 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=24664 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447183985.532:707268): pid=24664 uid=0 auid=0 ses=23408 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=24664 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447183985.532:707269): pid=24664 uid=0 auid=0 ses=23408 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=24664 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447183985.533:707270): pid=24664 uid=0 auid=0 ses=23408 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447183985.548:707271): pid=24661 uid=0 auid=0 ses=23408 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447183985.548:707272): pid=24661 uid=0 auid=0 ses=23408 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447183985.551:707273): pid=24661 uid=0 auid=0 ses=23408 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447183985.551:707274): pid=24661 uid=0 auid=0 ses=23408 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447183985.551:707275): pid=24661 uid=0 auid=0 ses=23408 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24661 suid=0 rport=51736 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447183985.551:707276): pid=24661 uid=0 auid=0 ses=23408 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=24661 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447183985.551:707277): pid=24661 uid=0 auid=0 ses=23408 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=24661 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447183985.552:707278): pid=24661 uid=0 auid=0 ses=23408 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=24661 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=SYSCALL msg=audit(1447184141.759:707279): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447184401.724:707280): pid=25953 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447184401.724:707281): pid=25952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447184401.724:707282): pid=25953 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447184401.724:707283): pid=25952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447184401.725:707284): pid=25953 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23409 res=1
type=LOGIN msg=audit(1447184401.725:707285): pid=25952 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23410 res=1
type=USER_START msg=audit(1447184401.745:707286): pid=25952 uid=0 auid=0 ses=23410 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447184401.745:707287): pid=25952 uid=0 auid=0 ses=23410 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447184401.746:707288): pid=25953 uid=0 auid=0 ses=23409 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447184401.746:707289): pid=25953 uid=0 auid=0 ses=23409 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447184401.757:707290): pid=25953 uid=0 auid=0 ses=23409 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447184401.759:707291): pid=25953 uid=0 auid=0 ses=23409 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447184401.762:707292): pid=25952 uid=0 auid=0 ses=23410 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447184401.766:707293): pid=25952 uid=0 auid=0 ses=23410 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447185001.781:707295): pid=27804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447185001.781:707294): pid=27805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447185001.781:707296): pid=27804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447185001.781:707297): pid=27805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447185001.781:707299): pid=27804 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23411 res=1
type=LOGIN msg=audit(1447185001.781:707298): pid=27805 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23412 res=1
type=USER_START msg=audit(1447185001.798:707300): pid=27805 uid=0 auid=0 ses=23412 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447185001.799:707301): pid=27805 uid=0 auid=0 ses=23412 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447185001.800:707302): pid=27804 uid=0 auid=0 ses=23411 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447185001.800:707303): pid=27804 uid=0 auid=0 ses=23411 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447185001.804:707304): pid=27805 uid=0 auid=0 ses=23412 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447185001.807:707305): pid=27805 uid=0 auid=0 ses=23412 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447185001.816:707306): pid=27804 uid=0 auid=0 ses=23411 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447185001.817:707307): pid=27804 uid=0 auid=0 ses=23411 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447185183.210:707308): pid=28369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=28369 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447185183.211:707309): pid=28369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=28369 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447185183.211:707310): pid=28369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=28369 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447185183.255:707311): pid=28368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=28369 suid=74 rport=53713 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447185183.256:707312): pid=28368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=28369 suid=74 rport=53713 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447185183.382:707313): pid=28368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=53713 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447185183.382:707314): pid=28368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=53713 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447185183.388:707315): pid=28368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447185183.388:707316): pid=28368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=28369 suid=74 rport=53713 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447185183.389:707317): pid=28368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447185183.390:707318): pid=28368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447185183.390:707319): pid=28368 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23413 res=1
type=USER_ROLE_CHANGE msg=audit(1447185183.459:707320): pid=28368 uid=0 auid=0 ses=23413 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447185183.478:707321): pid=28368 uid=0 auid=0 ses=23413 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447185183.480:707322): pid=28368 uid=0 auid=0 ses=23413 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447185183.481:707323): pid=28368 uid=0 auid=0 ses=23413 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447185183.482:707324): pid=28371 uid=0 auid=0 ses=23413 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=28371 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447185183.482:707325): pid=28371 uid=0 auid=0 ses=23413 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=28371 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447185183.482:707326): pid=28371 uid=0 auid=0 ses=23413 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=28371 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447185183.483:707327): pid=28371 uid=0 auid=0 ses=23413 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447185183.499:707328): pid=28368 uid=0 auid=0 ses=23413 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447185183.500:707329): pid=28368 uid=0 auid=0 ses=23413 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447185183.503:707330): pid=28368 uid=0 auid=0 ses=23413 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447185183.503:707331): pid=28368 uid=0 auid=0 ses=23413 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447185183.505:707332): pid=28368 uid=0 auid=0 ses=23413 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=28368 suid=0 rport=53713 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447185183.506:707333): pid=28368 uid=0 auid=0 ses=23413 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=28368 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447185183.506:707334): pid=28368 uid=0 auid=0 ses=23413 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=28368 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447185183.506:707335): pid=28368 uid=0 auid=0 ses=23413 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=28368 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447185183.526:707336): pid=28379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=28379 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447185183.526:707337): pid=28379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=28379 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447185183.526:707338): pid=28379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=28379 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447185183.572:707339): pid=28378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=28379 suid=74 rport=53714 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447185183.572:707340): pid=28378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=28379 suid=74 rport=53714 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447185183.702:707341): pid=28378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=53714 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447185183.702:707342): pid=28378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=53714 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447185183.711:707343): pid=28378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447185183.712:707344): pid=28378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=28379 suid=74 rport=53714 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447185183.712:707345): pid=28378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447185183.713:707346): pid=28378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447185183.713:707347): pid=28378 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23414 res=1
type=USER_ROLE_CHANGE msg=audit(1447185183.776:707348): pid=28378 uid=0 auid=0 ses=23414 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447185183.804:707349): pid=28378 uid=0 auid=0 ses=23414 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447185183.807:707350): pid=28378 uid=0 auid=0 ses=23414 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447185183.807:707351): pid=28378 uid=0 auid=0 ses=23414 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447185183.809:707352): pid=28381 uid=0 auid=0 ses=23414 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=28381 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447185183.809:707353): pid=28381 uid=0 auid=0 ses=23414 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=28381 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447185183.809:707354): pid=28381 uid=0 auid=0 ses=23414 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=28381 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447185183.810:707355): pid=28381 uid=0 auid=0 ses=23414 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447185185.095:707356): pid=28378 uid=0 auid=0 ses=23414 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447185185.095:707357): pid=28378 uid=0 auid=0 ses=23414 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447185185.098:707358): pid=28378 uid=0 auid=0 ses=23414 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447185185.098:707359): pid=28378 uid=0 auid=0 ses=23414 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447185185.099:707360): pid=28378 uid=0 auid=0 ses=23414 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=28378 suid=0 rport=53714 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447185185.099:707361): pid=28378 uid=0 auid=0 ses=23414 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=28378 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447185185.099:707362): pid=28378 uid=0 auid=0 ses=23414 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=28378 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447185185.099:707363): pid=28378 uid=0 auid=0 ses=23414 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=28378 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447185185.135:707364): pid=28431 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=28431 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447185185.135:707365): pid=28431 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=28431 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447185185.135:707366): pid=28431 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=28431 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447185185.180:707367): pid=28430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=28431 suid=74 rport=53718 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447185185.180:707368): pid=28430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=28431 suid=74 rport=53718 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447185185.306:707369): pid=28430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=53718 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447185185.306:707370): pid=28430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=53718 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447185185.311:707371): pid=28430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447185185.311:707372): pid=28430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=28431 suid=74 rport=53718 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447185185.313:707373): pid=28430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447185185.313:707374): pid=28430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447185185.313:707375): pid=28430 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23415 res=1
type=USER_ROLE_CHANGE msg=audit(1447185185.378:707376): pid=28430 uid=0 auid=0 ses=23415 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447185185.402:707377): pid=28430 uid=0 auid=0 ses=23415 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447185185.405:707378): pid=28430 uid=0 auid=0 ses=23415 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447185185.405:707379): pid=28430 uid=0 auid=0 ses=23415 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447185185.406:707380): pid=28433 uid=0 auid=0 ses=23415 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=28433 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447185185.407:707381): pid=28433 uid=0 auid=0 ses=23415 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=28433 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447185185.407:707382): pid=28433 uid=0 auid=0 ses=23415 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=28433 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447185185.407:707383): pid=28433 uid=0 auid=0 ses=23415 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447185185.422:707384): pid=28430 uid=0 auid=0 ses=23415 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447185185.422:707385): pid=28430 uid=0 auid=0 ses=23415 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447185185.425:707386): pid=28430 uid=0 auid=0 ses=23415 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447185185.426:707387): pid=28430 uid=0 auid=0 ses=23415 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447185185.426:707388): pid=28430 uid=0 auid=0 ses=23415 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=28430 suid=0 rport=53718 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447185185.426:707389): pid=28430 uid=0 auid=0 ses=23415 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=28430 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447185185.426:707390): pid=28430 uid=0 auid=0 ses=23415 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=28430 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447185185.426:707391): pid=28430 uid=0 auid=0 ses=23415 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=28430 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=SYSCALL msg=audit(1447185217.747:707392): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447185601.841:707393): pid=29723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447185601.841:707394): pid=29723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447185601.842:707395): pid=29723 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23416 res=1
type=USER_ACCT msg=audit(1447185601.844:707396): pid=29724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447185601.844:707397): pid=29724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447185601.844:707398): pid=29724 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23417 res=1
type=USER_START msg=audit(1447185601.862:707399): pid=29723 uid=0 auid=0 ses=23416 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447185601.862:707400): pid=29724 uid=0 auid=0 ses=23417 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447185601.863:707401): pid=29723 uid=0 auid=0 ses=23416 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447185601.863:707402): pid=29724 uid=0 auid=0 ses=23417 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447185601.873:707403): pid=29724 uid=0 auid=0 ses=23417 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447185601.875:707404): pid=29724 uid=0 auid=0 ses=23417 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447185601.879:707405): pid=29723 uid=0 auid=0 ses=23416 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447185626.906:707406): pid=29723 uid=0 auid=0 ses=23416 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=USER_ACCT msg=audit(1447185661.924:707407): pid=29958 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447185661.925:707408): pid=29958 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447185661.925:707409): pid=29958 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23418 res=1
type=USER_START msg=audit(1447185661.937:707410): pid=29958 uid=0 auid=0 ses=23418 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447185661.938:707411): pid=29958 uid=0 auid=0 ses=23418 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447185661.961:707412): pid=29958 uid=0 auid=0 ses=23418 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447185661.963:707413): pid=29958 uid=0 auid=0 ses=23418 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447186201.975:707414): pid=31612 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447186201.975:707415): pid=31612 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447186201.975:707416): pid=31612 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23419 res=1
type=USER_START msg=audit(1447186201.985:707417): pid=31612 uid=0 auid=0 ses=23419 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447186201.985:707418): pid=31612 uid=0 auid=0 ses=23419 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447186201.989:707419): pid=31613 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447186201.989:707420): pid=31613 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447186201.989:707421): pid=31613 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23420 res=1
type=USER_START msg=audit(1447186201.996:707422): pid=31613 uid=0 auid=0 ses=23420 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447186201.996:707423): pid=31613 uid=0 auid=0 ses=23420 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447186201.999:707424): pid=31612 uid=0 auid=0 ses=23419 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447186202.001:707425): pid=31612 uid=0 auid=0 ses=23419 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447186202.001:707426): pid=31613 uid=0 auid=0 ses=23420 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447186227.030:707427): pid=31613 uid=0 auid=0 ses=23420 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=SYSCALL msg=audit(1447186256.758:707428): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=CRYPTO_KEY_USER msg=audit(1447186383.081:707429): pid=32196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=32196 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447186383.081:707430): pid=32196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=32196 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447186383.081:707431): pid=32196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=32196 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447186383.126:707432): pid=32195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=32196 suid=74 rport=55694 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447186383.126:707433): pid=32195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=32196 suid=74 rport=55694 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447186383.257:707434): pid=32195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=55694 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447186383.257:707435): pid=32195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=55694 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447186383.264:707436): pid=32195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447186383.266:707437): pid=32195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=32196 suid=74 rport=55694 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447186383.266:707438): pid=32195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447186383.267:707439): pid=32195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447186383.267:707440): pid=32195 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23421 res=1
type=USER_ROLE_CHANGE msg=audit(1447186383.337:707441): pid=32195 uid=0 auid=0 ses=23421 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447186383.357:707442): pid=32195 uid=0 auid=0 ses=23421 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447186383.359:707443): pid=32195 uid=0 auid=0 ses=23421 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447186383.359:707444): pid=32195 uid=0 auid=0 ses=23421 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447186383.361:707445): pid=32198 uid=0 auid=0 ses=23421 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=32198 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447186383.361:707446): pid=32198 uid=0 auid=0 ses=23421 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=32198 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447186383.361:707447): pid=32198 uid=0 auid=0 ses=23421 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=32198 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447186383.362:707448): pid=32198 uid=0 auid=0 ses=23421 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447186383.381:707449): pid=32195 uid=0 auid=0 ses=23421 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447186383.381:707450): pid=32195 uid=0 auid=0 ses=23421 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447186383.386:707451): pid=32195 uid=0 auid=0 ses=23421 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447186383.386:707452): pid=32195 uid=0 auid=0 ses=23421 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447186383.387:707453): pid=32195 uid=0 auid=0 ses=23421 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=32195 suid=0 rport=55694 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447186383.387:707454): pid=32195 uid=0 auid=0 ses=23421 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=32195 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447186383.387:707455): pid=32195 uid=0 auid=0 ses=23421 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=32195 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447186383.387:707456): pid=32195 uid=0 auid=0 ses=23421 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=32195 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447186383.407:707457): pid=32206 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=32206 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447186383.407:707458): pid=32206 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=32206 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447186383.407:707459): pid=32206 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=32206 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447186383.453:707460): pid=32205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=32206 suid=74 rport=55695 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447186383.453:707461): pid=32205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=32206 suid=74 rport=55695 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447186383.583:707462): pid=32205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=55695 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447186383.583:707463): pid=32205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=55695 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447186383.591:707464): pid=32205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447186383.592:707465): pid=32205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=32206 suid=74 rport=55695 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447186383.594:707466): pid=32205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447186383.594:707467): pid=32205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447186383.594:707468): pid=32205 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23422 res=1
type=USER_ROLE_CHANGE msg=audit(1447186383.660:707469): pid=32205 uid=0 auid=0 ses=23422 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447186383.683:707470): pid=32205 uid=0 auid=0 ses=23422 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447186383.686:707471): pid=32205 uid=0 auid=0 ses=23422 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447186383.686:707472): pid=32205 uid=0 auid=0 ses=23422 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447186383.687:707473): pid=32208 uid=0 auid=0 ses=23422 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=32208 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447186383.688:707474): pid=32208 uid=0 auid=0 ses=23422 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=32208 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447186383.688:707475): pid=32208 uid=0 auid=0 ses=23422 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=32208 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447186383.688:707476): pid=32208 uid=0 auid=0 ses=23422 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447186384.959:707477): pid=32205 uid=0 auid=0 ses=23422 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447186384.959:707478): pid=32205 uid=0 auid=0 ses=23422 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447186384.963:707479): pid=32205 uid=0 auid=0 ses=23422 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447186384.963:707480): pid=32205 uid=0 auid=0 ses=23422 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447186384.964:707481): pid=32205 uid=0 auid=0 ses=23422 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=32205 suid=0 rport=55695 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447186384.964:707482): pid=32205 uid=0 auid=0 ses=23422 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=32205 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447186384.964:707483): pid=32205 uid=0 auid=0 ses=23422 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=32205 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447186384.964:707484): pid=32205 uid=0 auid=0 ses=23422 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=32205 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447186384.994:707485): pid=32258 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=32258 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447186384.994:707486): pid=32258 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=32258 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447186384.994:707487): pid=32258 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=32258 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447186385.040:707488): pid=32257 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=32258 suid=74 rport=55699 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447186385.040:707489): pid=32257 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=32258 suid=74 rport=55699 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447186385.166:707490): pid=32257 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=55699 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447186385.167:707491): pid=32257 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=55699 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447186385.175:707492): pid=32257 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447186385.177:707493): pid=32257 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=32258 suid=74 rport=55699 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447186385.178:707494): pid=32257 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447186385.179:707495): pid=32257 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447186385.179:707496): pid=32257 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23423 res=1
type=USER_ROLE_CHANGE msg=audit(1447186385.244:707497): pid=32257 uid=0 auid=0 ses=23423 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447186385.274:707498): pid=32257 uid=0 auid=0 ses=23423 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447186385.276:707499): pid=32257 uid=0 auid=0 ses=23423 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447186385.276:707500): pid=32257 uid=0 auid=0 ses=23423 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447186385.278:707501): pid=32260 uid=0 auid=0 ses=23423 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=32260 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447186385.278:707502): pid=32260 uid=0 auid=0 ses=23423 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=32260 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447186385.278:707503): pid=32260 uid=0 auid=0 ses=23423 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=32260 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447186385.278:707504): pid=32260 uid=0 auid=0 ses=23423 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447186385.297:707505): pid=32257 uid=0 auid=0 ses=23423 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447186385.298:707506): pid=32257 uid=0 auid=0 ses=23423 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447186385.301:707507): pid=32257 uid=0 auid=0 ses=23423 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447186385.302:707508): pid=32257 uid=0 auid=0 ses=23423 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447186385.302:707509): pid=32257 uid=0 auid=0 ses=23423 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=32257 suid=0 rport=55699 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447186385.302:707510): pid=32257 uid=0 auid=0 ses=23423 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=32257 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447186385.302:707511): pid=32257 uid=0 auid=0 ses=23423 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=32257 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447186385.303:707512): pid=32257 uid=0 auid=0 ses=23423 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=32257 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447186801.054:707513): pid=1153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447186801.054:707514): pid=1154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447186801.054:707515): pid=1153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447186801.054:707516): pid=1154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447186801.055:707517): pid=1154 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23424 res=1
type=LOGIN msg=audit(1447186801.055:707518): pid=1153 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23425 res=1
type=USER_START msg=audit(1447186801.072:707519): pid=1154 uid=0 auid=0 ses=23424 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447186801.073:707520): pid=1154 uid=0 auid=0 ses=23424 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447186801.074:707521): pid=1153 uid=0 auid=0 ses=23425 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447186801.074:707522): pid=1153 uid=0 auid=0 ses=23425 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447186801.082:707523): pid=1154 uid=0 auid=0 ses=23424 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447186801.083:707524): pid=1154 uid=0 auid=0 ses=23424 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447186801.092:707525): pid=1153 uid=0 auid=0 ses=23425 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447186801.093:707526): pid=1153 uid=0 auid=0 ses=23425 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1447187318.753:707527): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447187401.105:707528): pid=2948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447187401.105:707529): pid=2947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447187401.105:707530): pid=2947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447187401.105:707531): pid=2948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447187401.105:707532): pid=2948 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23426 res=1
type=LOGIN msg=audit(1447187401.105:707533): pid=2947 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23427 res=1
type=USER_START msg=audit(1447187401.126:707534): pid=2948 uid=0 auid=0 ses=23426 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447187401.127:707535): pid=2948 uid=0 auid=0 ses=23426 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447187401.129:707536): pid=2947 uid=0 auid=0 ses=23427 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447187401.129:707537): pid=2947 uid=0 auid=0 ses=23427 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447187401.134:707538): pid=2948 uid=0 auid=0 ses=23426 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447187401.137:707539): pid=2948 uid=0 auid=0 ses=23426 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447187401.141:707540): pid=2947 uid=0 auid=0 ses=23427 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447187401.142:707541): pid=2947 uid=0 auid=0 ses=23427 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447187582.407:707542): pid=3514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=3514 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447187582.408:707543): pid=3514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=3514 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447187582.408:707544): pid=3514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=3514 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447187582.454:707545): pid=3513 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=3514 suid=74 rport=57674 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447187582.457:707546): pid=3513 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=3514 suid=74 rport=57674 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447187582.585:707547): pid=3513 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=57674 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447187582.585:707548): pid=3513 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=57674 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447187582.594:707549): pid=3513 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447187582.595:707550): pid=3513 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3514 suid=74 rport=57674 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447187582.597:707551): pid=3513 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447187582.598:707552): pid=3513 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447187582.598:707553): pid=3513 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23428 res=1
type=USER_ROLE_CHANGE msg=audit(1447187582.667:707554): pid=3513 uid=0 auid=0 ses=23428 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447187582.689:707555): pid=3513 uid=0 auid=0 ses=23428 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447187582.692:707556): pid=3513 uid=0 auid=0 ses=23428 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447187582.692:707557): pid=3513 uid=0 auid=0 ses=23428 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447187582.694:707558): pid=3556 uid=0 auid=0 ses=23428 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=3556 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447187582.694:707559): pid=3556 uid=0 auid=0 ses=23428 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=3556 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447187582.694:707560): pid=3556 uid=0 auid=0 ses=23428 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=3556 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447187582.695:707561): pid=3556 uid=0 auid=0 ses=23428 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447187582.717:707562): pid=3513 uid=0 auid=0 ses=23428 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447187582.717:707563): pid=3513 uid=0 auid=0 ses=23428 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447187582.723:707564): pid=3513 uid=0 auid=0 ses=23428 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447187582.723:707565): pid=3513 uid=0 auid=0 ses=23428 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447187582.724:707566): pid=3513 uid=0 auid=0 ses=23428 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3513 suid=0 rport=57674 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447187582.724:707567): pid=3513 uid=0 auid=0 ses=23428 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=3513 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447187582.724:707568): pid=3513 uid=0 auid=0 ses=23428 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=3513 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447187582.724:707569): pid=3513 uid=0 auid=0 ses=23428 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=3513 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447187582.743:707570): pid=3564 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=3564 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447187582.743:707571): pid=3564 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=3564 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447187582.743:707572): pid=3564 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=3564 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447187582.788:707573): pid=3563 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=3564 suid=74 rport=57675 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447187582.788:707574): pid=3563 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=3564 suid=74 rport=57675 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447187582.911:707575): pid=3563 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=57675 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447187582.911:707576): pid=3563 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=57675 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447187582.915:707577): pid=3563 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447187582.916:707578): pid=3563 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3564 suid=74 rport=57675 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447187582.917:707579): pid=3563 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447187582.917:707580): pid=3563 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447187582.918:707581): pid=3563 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23429 res=1
type=USER_ROLE_CHANGE msg=audit(1447187582.982:707582): pid=3563 uid=0 auid=0 ses=23429 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447187583.003:707583): pid=3563 uid=0 auid=0 ses=23429 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447187583.007:707584): pid=3563 uid=0 auid=0 ses=23429 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447187583.007:707585): pid=3563 uid=0 auid=0 ses=23429 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447187583.009:707586): pid=3603 uid=0 auid=0 ses=23429 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=3603 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447187583.009:707587): pid=3603 uid=0 auid=0 ses=23429 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=3603 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447187583.009:707588): pid=3603 uid=0 auid=0 ses=23429 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=3603 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447187583.010:707589): pid=3603 uid=0 auid=0 ses=23429 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447187584.298:707590): pid=3563 uid=0 auid=0 ses=23429 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447187584.298:707591): pid=3563 uid=0 auid=0 ses=23429 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447187584.305:707592): pid=3563 uid=0 auid=0 ses=23429 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447187584.305:707593): pid=3563 uid=0 auid=0 ses=23429 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447187584.305:707594): pid=3563 uid=0 auid=0 ses=23429 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3563 suid=0 rport=57675 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447187584.305:707595): pid=3563 uid=0 auid=0 ses=23429 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=3563 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447187584.306:707596): pid=3563 uid=0 auid=0 ses=23429 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=3563 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447187584.306:707597): pid=3563 uid=0 auid=0 ses=23429 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=3563 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447187584.338:707598): pid=3665 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=3665 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447187584.338:707599): pid=3665 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=3665 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447187584.338:707600): pid=3665 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=3665 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447187584.382:707601): pid=3664 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=3665 suid=74 rport=57676 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447187584.382:707602): pid=3664 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=3665 suid=74 rport=57676 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447187584.512:707603): pid=3664 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=57676 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447187584.513:707604): pid=3664 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=57676 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447187584.520:707605): pid=3664 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447187584.522:707606): pid=3664 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3665 suid=74 rport=57676 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447187584.523:707607): pid=3664 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447187584.523:707608): pid=3664 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447187584.523:707609): pid=3664 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23430 res=1
type=USER_ROLE_CHANGE msg=audit(1447187584.594:707610): pid=3664 uid=0 auid=0 ses=23430 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447187584.614:707611): pid=3664 uid=0 auid=0 ses=23430 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447187584.617:707612): pid=3664 uid=0 auid=0 ses=23430 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447187584.617:707613): pid=3664 uid=0 auid=0 ses=23430 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447187584.619:707614): pid=3677 uid=0 auid=0 ses=23430 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=3677 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447187584.619:707615): pid=3677 uid=0 auid=0 ses=23430 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=3677 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447187584.619:707616): pid=3677 uid=0 auid=0 ses=23430 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=3677 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447187584.620:707617): pid=3677 uid=0 auid=0 ses=23430 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447187584.638:707618): pid=3664 uid=0 auid=0 ses=23430 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447187584.639:707619): pid=3664 uid=0 auid=0 ses=23430 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447187584.642:707620): pid=3664 uid=0 auid=0 ses=23430 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447187584.643:707621): pid=3664 uid=0 auid=0 ses=23430 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447187584.643:707622): pid=3664 uid=0 auid=0 ses=23430 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3664 suid=0 rport=57676 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447187584.643:707623): pid=3664 uid=0 auid=0 ses=23430 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=3664 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447187584.644:707624): pid=3664 uid=0 auid=0 ses=23430 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=3664 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447187584.644:707625): pid=3664 uid=0 auid=0 ses=23430 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=3664 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447188001.166:707626): pid=4865 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447188001.166:707627): pid=4865 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447188001.166:707628): pid=4864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447188001.166:707629): pid=4864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447188001.167:707630): pid=4865 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23431 res=1
type=LOGIN msg=audit(1447188001.167:707631): pid=4864 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23432 res=1
type=USER_START msg=audit(1447188001.185:707632): pid=4865 uid=0 auid=0 ses=23431 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447188001.185:707633): pid=4865 uid=0 auid=0 ses=23431 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447188001.188:707634): pid=4864 uid=0 auid=0 ses=23432 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447188001.188:707635): pid=4864 uid=0 auid=0 ses=23432 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447188001.197:707636): pid=4865 uid=0 auid=0 ses=23431 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447188001.199:707637): pid=4865 uid=0 auid=0 ses=23431 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447188001.203:707638): pid=4864 uid=0 auid=0 ses=23432 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447188026.231:707639): pid=4864 uid=0 auid=0 ses=23432 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=SYSCALL msg=audit(1447188358.758:707640): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447188601.252:707641): pid=6740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447188601.252:707642): pid=6740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447188601.252:707643): pid=6740 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23433 res=1
type=USER_ACCT msg=audit(1447188601.254:707644): pid=6741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447188601.254:707645): pid=6741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447188601.255:707646): pid=6741 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23434 res=1
type=USER_START msg=audit(1447188601.268:707647): pid=6741 uid=0 auid=0 ses=23434 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447188601.268:707648): pid=6740 uid=0 auid=0 ses=23433 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447188601.269:707649): pid=6741 uid=0 auid=0 ses=23434 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447188601.269:707650): pid=6740 uid=0 auid=0 ses=23433 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447188601.277:707651): pid=6741 uid=0 auid=0 ses=23434 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447188601.278:707652): pid=6741 uid=0 auid=0 ses=23434 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447188601.281:707653): pid=6740 uid=0 auid=0 ses=23433 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447188601.285:707654): pid=6740 uid=0 auid=0 ses=23433 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447188782.582:707655): pid=7306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=7306 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447188782.583:707656): pid=7306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=7306 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447188782.583:707657): pid=7306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=7306 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447188782.626:707658): pid=7305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=7306 suid=74 rport=59654 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447188782.626:707659): pid=7305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=7306 suid=74 rport=59654 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447188782.755:707660): pid=7305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59654 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447188782.755:707661): pid=7305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=59654 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447188782.761:707662): pid=7305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447188782.763:707663): pid=7305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7306 suid=74 rport=59654 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447188782.764:707664): pid=7305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447188782.764:707665): pid=7305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447188782.765:707666): pid=7305 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23435 res=1
type=USER_ROLE_CHANGE msg=audit(1447188782.837:707667): pid=7305 uid=0 auid=0 ses=23435 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447188782.859:707668): pid=7305 uid=0 auid=0 ses=23435 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447188782.862:707669): pid=7305 uid=0 auid=0 ses=23435 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447188782.862:707670): pid=7305 uid=0 auid=0 ses=23435 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447188782.863:707671): pid=7308 uid=0 auid=0 ses=23435 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=7308 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447188782.863:707672): pid=7308 uid=0 auid=0 ses=23435 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=7308 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447188782.864:707673): pid=7308 uid=0 auid=0 ses=23435 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=7308 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447188782.865:707674): pid=7308 uid=0 auid=0 ses=23435 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447188782.885:707675): pid=7305 uid=0 auid=0 ses=23435 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447188782.885:707676): pid=7305 uid=0 auid=0 ses=23435 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447188782.890:707677): pid=7305 uid=0 auid=0 ses=23435 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447188782.890:707678): pid=7305 uid=0 auid=0 ses=23435 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447188782.891:707679): pid=7305 uid=0 auid=0 ses=23435 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7305 suid=0 rport=59654 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447188782.891:707680): pid=7305 uid=0 auid=0 ses=23435 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=7305 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447188782.891:707681): pid=7305 uid=0 auid=0 ses=23435 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=7305 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447188782.891:707682): pid=7305 uid=0 auid=0 ses=23435 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=7305 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447188782.911:707683): pid=7316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=7316 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447188782.911:707684): pid=7316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=7316 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447188782.911:707685): pid=7316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=7316 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447188782.956:707686): pid=7315 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=7316 suid=74 rport=59656 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447188782.956:707687): pid=7315 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=7316 suid=74 rport=59656 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447188783.084:707688): pid=7315 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59656 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447188783.084:707689): pid=7315 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=59656 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447188783.094:707690): pid=7315 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447188783.095:707691): pid=7315 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7316 suid=74 rport=59656 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447188783.097:707692): pid=7315 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447188783.097:707693): pid=7315 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447188783.097:707694): pid=7315 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23436 res=1
type=USER_ROLE_CHANGE msg=audit(1447188783.164:707695): pid=7315 uid=0 auid=0 ses=23436 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447188783.184:707696): pid=7315 uid=0 auid=0 ses=23436 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447188783.187:707697): pid=7315 uid=0 auid=0 ses=23436 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447188783.187:707698): pid=7315 uid=0 auid=0 ses=23436 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447188783.188:707699): pid=7318 uid=0 auid=0 ses=23436 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=7318 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447188783.188:707700): pid=7318 uid=0 auid=0 ses=23436 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=7318 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447188783.188:707701): pid=7318 uid=0 auid=0 ses=23436 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=7318 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447188783.190:707702): pid=7318 uid=0 auid=0 ses=23436 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447188784.487:707703): pid=7315 uid=0 auid=0 ses=23436 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447188784.487:707704): pid=7315 uid=0 auid=0 ses=23436 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447188784.493:707705): pid=7315 uid=0 auid=0 ses=23436 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447188784.493:707706): pid=7315 uid=0 auid=0 ses=23436 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447188784.493:707707): pid=7315 uid=0 auid=0 ses=23436 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7315 suid=0 rport=59656 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447188784.493:707708): pid=7315 uid=0 auid=0 ses=23436 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=7315 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447188784.494:707709): pid=7315 uid=0 auid=0 ses=23436 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=7315 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447188784.494:707710): pid=7315 uid=0 auid=0 ses=23436 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=7315 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447188784.527:707711): pid=7405 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=7405 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447188784.527:707712): pid=7405 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=7405 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447188784.527:707713): pid=7405 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=7405 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447188784.571:707714): pid=7404 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=7405 suid=74 rport=59657 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447188784.571:707715): pid=7404 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=7405 suid=74 rport=59657 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447188784.701:707716): pid=7404 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59657 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447188784.701:707717): pid=7404 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=59657 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447188784.707:707718): pid=7404 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447188784.709:707719): pid=7404 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7405 suid=74 rport=59657 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447188784.710:707720): pid=7404 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447188784.711:707721): pid=7404 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447188784.711:707722): pid=7404 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23437 res=1
type=USER_ROLE_CHANGE msg=audit(1447188784.776:707723): pid=7404 uid=0 auid=0 ses=23437 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447188784.800:707724): pid=7404 uid=0 auid=0 ses=23437 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447188784.803:707725): pid=7404 uid=0 auid=0 ses=23437 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447188784.803:707726): pid=7404 uid=0 auid=0 ses=23437 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447188784.805:707727): pid=7407 uid=0 auid=0 ses=23437 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=7407 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447188784.805:707728): pid=7407 uid=0 auid=0 ses=23437 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=7407 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447188784.805:707729): pid=7407 uid=0 auid=0 ses=23437 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=7407 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447188784.805:707730): pid=7407 uid=0 auid=0 ses=23437 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447188784.826:707731): pid=7404 uid=0 auid=0 ses=23437 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447188784.826:707732): pid=7404 uid=0 auid=0 ses=23437 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447188784.832:707733): pid=7404 uid=0 auid=0 ses=23437 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447188784.832:707734): pid=7404 uid=0 auid=0 ses=23437 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447188784.832:707735): pid=7404 uid=0 auid=0 ses=23437 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7404 suid=0 rport=59657 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447188784.832:707736): pid=7404 uid=0 auid=0 ses=23437 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=7404 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447188784.832:707737): pid=7404 uid=0 auid=0 ses=23437 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=7404 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447188784.832:707738): pid=7404 uid=0 auid=0 ses=23437 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=7404 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447189201.307:707739): pid=8660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447189201.307:707740): pid=8659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447189201.308:707741): pid=8659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447189201.308:707742): pid=8660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447189201.309:707743): pid=8660 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23438 res=1
type=LOGIN msg=audit(1447189201.309:707744): pid=8659 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23439 res=1
type=USER_START msg=audit(1447189201.327:707745): pid=8660 uid=0 auid=0 ses=23438 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447189201.327:707746): pid=8659 uid=0 auid=0 ses=23439 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447189201.327:707747): pid=8660 uid=0 auid=0 ses=23438 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447189201.327:707748): pid=8659 uid=0 auid=0 ses=23439 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447189201.337:707749): pid=8660 uid=0 auid=0 ses=23438 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447189201.339:707750): pid=8660 uid=0 auid=0 ses=23438 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447189201.344:707751): pid=8659 uid=0 auid=0 ses=23439 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447189201.347:707752): pid=8659 uid=0 auid=0 ses=23439 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447189261.361:707753): pid=8863 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447189261.361:707754): pid=8863 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447189261.362:707755): pid=8863 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23440 res=1
type=USER_START msg=audit(1447189261.376:707756): pid=8863 uid=0 auid=0 ses=23440 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447189261.376:707757): pid=8863 uid=0 auid=0 ses=23440 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447189261.400:707758): pid=8863 uid=0 auid=0 ses=23440 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447189261.401:707759): pid=8863 uid=0 auid=0 ses=23440 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1447189440.675:707760): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447189801.416:707761): pid=10564 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447189801.416:707762): pid=10564 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447189801.416:707763): pid=10563 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447189801.416:707764): pid=10563 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447189801.416:707765): pid=10564 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23441 res=1
type=LOGIN msg=audit(1447189801.416:707766): pid=10563 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23442 res=1
type=USER_START msg=audit(1447189801.431:707767): pid=10563 uid=0 auid=0 ses=23442 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447189801.431:707768): pid=10564 uid=0 auid=0 ses=23441 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447189801.431:707769): pid=10564 uid=0 auid=0 ses=23441 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447189801.431:707770): pid=10563 uid=0 auid=0 ses=23442 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447189801.440:707771): pid=10564 uid=0 auid=0 ses=23441 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447189801.441:707772): pid=10564 uid=0 auid=0 ses=23441 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447189801.444:707773): pid=10563 uid=0 auid=0 ses=23442 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447189801.446:707774): pid=10563 uid=0 auid=0 ses=23442 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447189983.267:707775): pid=11133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=11133 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447189983.267:707776): pid=11133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=11133 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447189983.267:707777): pid=11133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=11133 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447189983.311:707778): pid=11132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=11133 suid=74 rport=61636 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447189983.312:707779): pid=11132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=11133 suid=74 rport=61636 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447189983.441:707780): pid=11132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=61636 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447189983.442:707781): pid=11132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=61636 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447189983.450:707782): pid=11132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447189983.451:707783): pid=11132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11133 suid=74 rport=61636 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447189983.452:707784): pid=11132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447189983.452:707785): pid=11132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447189983.452:707786): pid=11132 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23443 res=1
type=USER_ROLE_CHANGE msg=audit(1447189983.523:707787): pid=11132 uid=0 auid=0 ses=23443 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447189983.545:707788): pid=11132 uid=0 auid=0 ses=23443 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447189983.548:707789): pid=11132 uid=0 auid=0 ses=23443 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447189983.548:707790): pid=11132 uid=0 auid=0 ses=23443 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447189983.550:707791): pid=11135 uid=0 auid=0 ses=23443 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=11135 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447189983.550:707792): pid=11135 uid=0 auid=0 ses=23443 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=11135 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447189983.550:707793): pid=11135 uid=0 auid=0 ses=23443 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=11135 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447189983.551:707794): pid=11135 uid=0 auid=0 ses=23443 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447189983.570:707795): pid=11132 uid=0 auid=0 ses=23443 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447189983.571:707796): pid=11132 uid=0 auid=0 ses=23443 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447189983.574:707797): pid=11132 uid=0 auid=0 ses=23443 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447189983.574:707798): pid=11132 uid=0 auid=0 ses=23443 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447189983.574:707799): pid=11132 uid=0 auid=0 ses=23443 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11132 suid=0 rport=61636 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447189983.575:707800): pid=11132 uid=0 auid=0 ses=23443 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=11132 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447189983.575:707801): pid=11132 uid=0 auid=0 ses=23443 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=11132 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447189983.575:707802): pid=11132 uid=0 auid=0 ses=23443 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=11132 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447189983.596:707803): pid=11143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=11143 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447189983.596:707804): pid=11143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=11143 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447189983.596:707805): pid=11143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=11143 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447189983.641:707806): pid=11142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=11143 suid=74 rport=61637 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447189983.641:707807): pid=11142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=11143 suid=74 rport=61637 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447189983.770:707808): pid=11142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=61637 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447189983.770:707809): pid=11142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=61637 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447189983.778:707810): pid=11142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447189983.779:707811): pid=11142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11143 suid=74 rport=61637 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447189983.782:707812): pid=11142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447189983.782:707813): pid=11142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447189983.782:707814): pid=11142 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23444 res=1
type=USER_ROLE_CHANGE msg=audit(1447189983.857:707815): pid=11142 uid=0 auid=0 ses=23444 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447189983.879:707816): pid=11142 uid=0 auid=0 ses=23444 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447189983.881:707817): pid=11142 uid=0 auid=0 ses=23444 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447189983.882:707818): pid=11142 uid=0 auid=0 ses=23444 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447189983.883:707819): pid=11145 uid=0 auid=0 ses=23444 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=11145 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447189983.883:707820): pid=11145 uid=0 auid=0 ses=23444 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=11145 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447189983.883:707821): pid=11145 uid=0 auid=0 ses=23444 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=11145 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447189983.884:707822): pid=11145 uid=0 auid=0 ses=23444 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447189985.147:707823): pid=11142 uid=0 auid=0 ses=23444 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447189985.147:707824): pid=11142 uid=0 auid=0 ses=23444 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447189985.151:707825): pid=11142 uid=0 auid=0 ses=23444 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447189985.151:707826): pid=11142 uid=0 auid=0 ses=23444 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447189985.152:707827): pid=11142 uid=0 auid=0 ses=23444 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11142 suid=0 rport=61637 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447189985.152:707828): pid=11142 uid=0 auid=0 ses=23444 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=11142 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447189985.152:707829): pid=11142 uid=0 auid=0 ses=23444 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=11142 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447189985.152:707830): pid=11142 uid=0 auid=0 ses=23444 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=11142 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447189985.182:707831): pid=11232 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=11232 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447189985.183:707832): pid=11232 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=11232 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447189985.183:707833): pid=11232 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=11232 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447189985.227:707834): pid=11231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=11232 suid=74 rport=61638 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447189985.228:707835): pid=11231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=11232 suid=74 rport=61638 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447189985.353:707836): pid=11231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=61638 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447189985.353:707837): pid=11231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=61638 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447189985.360:707838): pid=11231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447189985.361:707839): pid=11231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11232 suid=74 rport=61638 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447189985.363:707840): pid=11231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447189985.363:707841): pid=11231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447189985.364:707842): pid=11231 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23445 res=1
type=USER_ROLE_CHANGE msg=audit(1447189985.428:707843): pid=11231 uid=0 auid=0 ses=23445 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447189985.447:707844): pid=11231 uid=0 auid=0 ses=23445 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447189985.449:707845): pid=11231 uid=0 auid=0 ses=23445 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447189985.449:707846): pid=11231 uid=0 auid=0 ses=23445 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447189985.451:707847): pid=11234 uid=0 auid=0 ses=23445 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=11234 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447189985.451:707848): pid=11234 uid=0 auid=0 ses=23445 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=11234 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447189985.451:707849): pid=11234 uid=0 auid=0 ses=23445 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=11234 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447189985.452:707850): pid=11234 uid=0 auid=0 ses=23445 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447189985.467:707851): pid=11231 uid=0 auid=0 ses=23445 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447189985.467:707852): pid=11231 uid=0 auid=0 ses=23445 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447189985.470:707853): pid=11231 uid=0 auid=0 ses=23445 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447189985.471:707854): pid=11231 uid=0 auid=0 ses=23445 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447189985.471:707855): pid=11231 uid=0 auid=0 ses=23445 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11231 suid=0 rport=61638 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447189985.471:707856): pid=11231 uid=0 auid=0 ses=23445 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=11231 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447189985.471:707857): pid=11231 uid=0 auid=0 ses=23445 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=11231 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447189985.471:707858): pid=11231 uid=0 auid=0 ses=23445 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=11231 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447190401.471:707860): pid=12487 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447190401.471:707859): pid=12486 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447190401.471:707861): pid=12487 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447190401.471:707862): pid=12486 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447190401.473:707863): pid=12487 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23446 res=1
type=LOGIN msg=audit(1447190401.473:707864): pid=12486 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23447 res=1
type=USER_START msg=audit(1447190401.489:707865): pid=12486 uid=0 auid=0 ses=23447 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447190401.489:707866): pid=12487 uid=0 auid=0 ses=23446 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447190401.489:707867): pid=12486 uid=0 auid=0 ses=23447 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447190401.489:707868): pid=12487 uid=0 auid=0 ses=23446 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447190401.498:707869): pid=12487 uid=0 auid=0 ses=23446 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447190401.500:707870): pid=12487 uid=0 auid=0 ses=23446 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447190401.503:707871): pid=12486 uid=0 auid=0 ses=23447 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447190426.532:707872): pid=12486 uid=0 auid=0 ses=23447 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=USER_ACCT msg=audit(1447191001.551:707873): pid=14442 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447191001.551:707874): pid=14443 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447191001.551:707875): pid=14442 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447191001.551:707876): pid=14443 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447191001.552:707877): pid=14443 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23448 res=1
type=LOGIN msg=audit(1447191001.552:707878): pid=14442 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23449 res=1
type=USER_START msg=audit(1447191001.568:707879): pid=14443 uid=0 auid=0 ses=23448 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447191001.568:707880): pid=14442 uid=0 auid=0 ses=23449 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447191001.568:707881): pid=14442 uid=0 auid=0 ses=23449 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447191001.568:707882): pid=14443 uid=0 auid=0 ses=23448 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447191001.575:707883): pid=14443 uid=0 auid=0 ses=23448 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447191001.576:707884): pid=14443 uid=0 auid=0 ses=23448 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447191001.579:707885): pid=14442 uid=0 auid=0 ses=23449 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447191026.608:707886): pid=14442 uid=0 auid=0 ses=23449 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=CRYPTO_KEY_USER msg=audit(1447191182.555:707887): pid=15013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=15013 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447191182.555:707888): pid=15013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=15013 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447191182.555:707889): pid=15013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=15013 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447191182.599:707890): pid=15012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=15013 suid=74 rport=63615 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447191182.599:707891): pid=15012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=15013 suid=74 rport=63615 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447191182.729:707892): pid=15012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=63615 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447191182.729:707893): pid=15012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=63615 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447191182.737:707894): pid=15012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447191182.739:707895): pid=15012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15013 suid=74 rport=63615 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447191182.741:707896): pid=15012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447191182.742:707897): pid=15012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447191182.742:707898): pid=15012 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23450 res=1
type=USER_ROLE_CHANGE msg=audit(1447191182.816:707899): pid=15012 uid=0 auid=0 ses=23450 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447191182.841:707900): pid=15012 uid=0 auid=0 ses=23450 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447191182.844:707901): pid=15012 uid=0 auid=0 ses=23450 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447191182.844:707902): pid=15012 uid=0 auid=0 ses=23450 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447191182.846:707903): pid=15015 uid=0 auid=0 ses=23450 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=15015 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447191182.846:707904): pid=15015 uid=0 auid=0 ses=23450 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=15015 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447191182.846:707905): pid=15015 uid=0 auid=0 ses=23450 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=15015 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447191182.847:707906): pid=15015 uid=0 auid=0 ses=23450 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447191182.865:707907): pid=15012 uid=0 auid=0 ses=23450 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447191182.865:707908): pid=15012 uid=0 auid=0 ses=23450 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447191182.869:707909): pid=15012 uid=0 auid=0 ses=23450 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447191182.869:707910): pid=15012 uid=0 auid=0 ses=23450 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447191182.870:707911): pid=15012 uid=0 auid=0 ses=23450 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15012 suid=0 rport=63615 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447191182.870:707912): pid=15012 uid=0 auid=0 ses=23450 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=15012 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447191182.870:707913): pid=15012 uid=0 auid=0 ses=23450 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=15012 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447191182.870:707914): pid=15012 uid=0 auid=0 ses=23450 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=15012 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447191182.891:707915): pid=15023 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=15023 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447191182.891:707916): pid=15023 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=15023 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447191182.891:707917): pid=15023 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=15023 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447191182.936:707918): pid=15022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=15023 suid=74 rport=63616 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447191182.936:707919): pid=15022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=15023 suid=74 rport=63616 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447191183.064:707920): pid=15022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=63616 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447191183.064:707921): pid=15022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=63616 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447191183.074:707922): pid=15022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447191183.075:707923): pid=15022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15023 suid=74 rport=63616 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447191183.076:707924): pid=15022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447191183.076:707925): pid=15022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447191183.076:707926): pid=15022 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23451 res=1
type=USER_ROLE_CHANGE msg=audit(1447191183.144:707927): pid=15022 uid=0 auid=0 ses=23451 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447191183.165:707928): pid=15022 uid=0 auid=0 ses=23451 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447191183.168:707929): pid=15022 uid=0 auid=0 ses=23451 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447191183.168:707930): pid=15022 uid=0 auid=0 ses=23451 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447191183.169:707931): pid=15025 uid=0 auid=0 ses=23451 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=15025 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447191183.169:707932): pid=15025 uid=0 auid=0 ses=23451 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=15025 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447191183.169:707933): pid=15025 uid=0 auid=0 ses=23451 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=15025 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447191183.170:707934): pid=15025 uid=0 auid=0 ses=23451 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447191184.451:707935): pid=15022 uid=0 auid=0 ses=23451 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447191184.451:707936): pid=15022 uid=0 auid=0 ses=23451 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447191184.456:707937): pid=15022 uid=0 auid=0 ses=23451 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447191184.457:707938): pid=15022 uid=0 auid=0 ses=23451 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447191184.457:707939): pid=15022 uid=0 auid=0 ses=23451 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15022 suid=0 rport=63616 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447191184.457:707940): pid=15022 uid=0 auid=0 ses=23451 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=15022 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447191184.457:707941): pid=15022 uid=0 auid=0 ses=23451 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=15022 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447191184.457:707942): pid=15022 uid=0 auid=0 ses=23451 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=15022 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447191184.491:707943): pid=15076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=15076 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447191184.491:707944): pid=15076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=15076 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447191184.491:707945): pid=15076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=15076 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447191184.535:707946): pid=15075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=15076 suid=74 rport=63619 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447191184.535:707947): pid=15075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=15076 suid=74 rport=63619 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447191184.663:707948): pid=15075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=63619 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447191184.664:707949): pid=15075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=63619 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447191184.672:707950): pid=15075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447191184.673:707951): pid=15075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15076 suid=74 rport=63619 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447191184.675:707952): pid=15075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447191184.676:707953): pid=15075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447191184.676:707954): pid=15075 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23452 res=1
type=USER_ROLE_CHANGE msg=audit(1447191184.739:707955): pid=15075 uid=0 auid=0 ses=23452 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447191184.761:707956): pid=15075 uid=0 auid=0 ses=23452 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447191184.764:707957): pid=15075 uid=0 auid=0 ses=23452 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447191184.764:707958): pid=15075 uid=0 auid=0 ses=23452 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447191184.765:707959): pid=15078 uid=0 auid=0 ses=23452 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=15078 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447191184.765:707960): pid=15078 uid=0 auid=0 ses=23452 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=15078 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447191184.765:707961): pid=15078 uid=0 auid=0 ses=23452 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=15078 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447191184.766:707962): pid=15078 uid=0 auid=0 ses=23452 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447191184.785:707963): pid=15075 uid=0 auid=0 ses=23452 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447191184.785:707964): pid=15075 uid=0 auid=0 ses=23452 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447191184.788:707965): pid=15075 uid=0 auid=0 ses=23452 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447191184.788:707966): pid=15075 uid=0 auid=0 ses=23452 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447191184.789:707967): pid=15075 uid=0 auid=0 ses=23452 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15075 suid=0 rport=63619 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447191184.789:707968): pid=15075 uid=0 auid=0 ses=23452 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=15075 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447191184.789:707969): pid=15075 uid=0 auid=0 ses=23452 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=15075 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447191184.789:707970): pid=15075 uid=0 auid=0 ses=23452 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=15075 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=SYSCALL msg=audit(1447191548.681:707971): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447191601.630:707973): pid=16376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447191601.630:707972): pid=16377 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447191601.631:707974): pid=16376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447191601.631:707975): pid=16377 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447191601.632:707976): pid=16377 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23453 res=1
type=LOGIN msg=audit(1447191601.632:707977): pid=16376 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23454 res=1
type=USER_START msg=audit(1447191601.651:707978): pid=16376 uid=0 auid=0 ses=23454 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447191601.651:707979): pid=16377 uid=0 auid=0 ses=23453 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447191601.651:707980): pid=16376 uid=0 auid=0 ses=23454 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447191601.651:707981): pid=16377 uid=0 auid=0 ses=23453 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447191601.661:707982): pid=16377 uid=0 auid=0 ses=23453 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447191601.667:707983): pid=16376 uid=0 auid=0 ses=23454 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447191601.668:707984): pid=16377 uid=0 auid=0 ses=23453 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447191601.668:707985): pid=16376 uid=0 auid=0 ses=23454 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447192201.681:707987): pid=18225 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447192201.681:707986): pid=18226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447192201.681:707988): pid=18225 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447192201.681:707989): pid=18226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447192201.681:707990): pid=18226 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23455 res=1
type=LOGIN msg=audit(1447192201.681:707991): pid=18225 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23456 res=1
type=USER_START msg=audit(1447192201.699:707992): pid=18226 uid=0 auid=0 ses=23455 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447192201.699:707993): pid=18226 uid=0 auid=0 ses=23455 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447192201.699:707994): pid=18225 uid=0 auid=0 ses=23456 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447192201.699:707995): pid=18225 uid=0 auid=0 ses=23456 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447192201.706:707996): pid=18226 uid=0 auid=0 ses=23455 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447192201.707:707997): pid=18226 uid=0 auid=0 ses=23455 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447192201.712:707998): pid=18225 uid=0 auid=0 ses=23456 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447192201.714:707999): pid=18225 uid=0 auid=0 ses=23456 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447192383.022:708000): pid=18790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=18790 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447192383.022:708001): pid=18790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=18790 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447192383.022:708002): pid=18790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=18790 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447192383.067:708003): pid=18789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=18790 suid=74 rport=32830 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447192383.067:708004): pid=18789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=18790 suid=74 rport=32830 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447192383.196:708005): pid=18789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=32830 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447192383.196:708006): pid=18789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=32830 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447192383.205:708007): pid=18789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447192383.207:708008): pid=18789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18790 suid=74 rport=32830 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447192383.207:708009): pid=18789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447192383.208:708010): pid=18789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447192383.208:708011): pid=18789 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23457 res=1
type=USER_ROLE_CHANGE msg=audit(1447192383.279:708012): pid=18789 uid=0 auid=0 ses=23457 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447192383.301:708013): pid=18789 uid=0 auid=0 ses=23457 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447192383.305:708014): pid=18789 uid=0 auid=0 ses=23457 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447192383.305:708015): pid=18789 uid=0 auid=0 ses=23457 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447192383.307:708016): pid=18792 uid=0 auid=0 ses=23457 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=18792 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447192383.307:708017): pid=18792 uid=0 auid=0 ses=23457 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=18792 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447192383.307:708018): pid=18792 uid=0 auid=0 ses=23457 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=18792 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447192383.308:708019): pid=18792 uid=0 auid=0 ses=23457 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447192383.326:708020): pid=18789 uid=0 auid=0 ses=23457 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447192383.326:708021): pid=18789 uid=0 auid=0 ses=23457 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447192383.330:708022): pid=18789 uid=0 auid=0 ses=23457 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447192383.330:708023): pid=18789 uid=0 auid=0 ses=23457 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447192383.331:708024): pid=18789 uid=0 auid=0 ses=23457 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18789 suid=0 rport=32830 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447192383.331:708025): pid=18789 uid=0 auid=0 ses=23457 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=18789 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447192383.331:708026): pid=18789 uid=0 auid=0 ses=23457 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=18789 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447192383.331:708027): pid=18789 uid=0 auid=0 ses=23457 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=18789 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447192383.352:708028): pid=18800 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=18800 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447192383.352:708029): pid=18800 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=18800 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447192383.352:708030): pid=18800 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=18800 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447192383.397:708031): pid=18799 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=18800 suid=74 rport=32831 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447192383.397:708032): pid=18799 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=18800 suid=74 rport=32831 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447192383.526:708033): pid=18799 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=32831 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447192383.526:708034): pid=18799 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=32831 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447192383.534:708035): pid=18799 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447192383.536:708036): pid=18799 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18800 suid=74 rport=32831 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447192383.540:708037): pid=18799 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447192383.540:708038): pid=18799 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447192383.540:708039): pid=18799 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23458 res=1
type=USER_ROLE_CHANGE msg=audit(1447192383.608:708040): pid=18799 uid=0 auid=0 ses=23458 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447192383.633:708041): pid=18799 uid=0 auid=0 ses=23458 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447192383.637:708042): pid=18799 uid=0 auid=0 ses=23458 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447192383.637:708043): pid=18799 uid=0 auid=0 ses=23458 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447192383.639:708044): pid=18802 uid=0 auid=0 ses=23458 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=18802 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447192383.639:708045): pid=18802 uid=0 auid=0 ses=23458 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=18802 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447192383.639:708046): pid=18802 uid=0 auid=0 ses=23458 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=18802 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447192383.640:708047): pid=18802 uid=0 auid=0 ses=23458 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447192384.890:708048): pid=18799 uid=0 auid=0 ses=23458 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447192384.890:708049): pid=18799 uid=0 auid=0 ses=23458 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447192384.895:708050): pid=18799 uid=0 auid=0 ses=23458 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447192384.895:708051): pid=18799 uid=0 auid=0 ses=23458 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447192384.895:708052): pid=18799 uid=0 auid=0 ses=23458 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18799 suid=0 rport=32831 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447192384.895:708053): pid=18799 uid=0 auid=0 ses=23458 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=18799 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447192384.895:708054): pid=18799 uid=0 auid=0 ses=23458 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=18799 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447192384.896:708055): pid=18799 uid=0 auid=0 ses=23458 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=18799 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447192384.931:708056): pid=18852 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=18852 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447192384.931:708057): pid=18852 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=18852 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447192384.931:708058): pid=18852 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=18852 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447192384.975:708059): pid=18851 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=18852 suid=74 rport=32834 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447192384.976:708060): pid=18851 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=18852 suid=74 rport=32834 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447192385.105:708061): pid=18851 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=32834 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447192385.105:708062): pid=18851 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=32834 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447192385.114:708063): pid=18851 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447192385.114:708064): pid=18851 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18852 suid=74 rport=32834 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447192385.115:708065): pid=18851 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447192385.116:708066): pid=18851 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447192385.116:708067): pid=18851 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23459 res=1
type=USER_ROLE_CHANGE msg=audit(1447192385.181:708068): pid=18851 uid=0 auid=0 ses=23459 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447192385.202:708069): pid=18851 uid=0 auid=0 ses=23459 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447192385.205:708070): pid=18851 uid=0 auid=0 ses=23459 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447192385.205:708071): pid=18851 uid=0 auid=0 ses=23459 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447192385.206:708072): pid=18854 uid=0 auid=0 ses=23459 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=18854 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447192385.206:708073): pid=18854 uid=0 auid=0 ses=23459 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=18854 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447192385.206:708074): pid=18854 uid=0 auid=0 ses=23459 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=18854 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447192385.207:708075): pid=18854 uid=0 auid=0 ses=23459 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447192385.223:708076): pid=18851 uid=0 auid=0 ses=23459 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447192385.223:708077): pid=18851 uid=0 auid=0 ses=23459 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447192385.229:708078): pid=18851 uid=0 auid=0 ses=23459 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447192385.229:708079): pid=18851 uid=0 auid=0 ses=23459 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447192385.230:708080): pid=18851 uid=0 auid=0 ses=23459 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18851 suid=0 rport=32834 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447192385.230:708081): pid=18851 uid=0 auid=0 ses=23459 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=18851 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447192385.230:708082): pid=18851 uid=0 auid=0 ses=23459 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=18851 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447192385.230:708083): pid=18851 uid=0 auid=0 ses=23459 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=18851 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=SYSCALL msg=audit(1447192615.754:708084): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447192801.737:708085): pid=20142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447192801.737:708086): pid=20143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447192801.737:708087): pid=20142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447192801.737:708088): pid=20143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447192801.738:708089): pid=20143 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23460 res=1
type=LOGIN msg=audit(1447192801.738:708090): pid=20142 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23461 res=1
type=USER_START msg=audit(1447192801.761:708091): pid=20143 uid=0 auid=0 ses=23460 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447192801.761:708092): pid=20142 uid=0 auid=0 ses=23461 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447192801.762:708093): pid=20143 uid=0 auid=0 ses=23460 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447192801.762:708094): pid=20142 uid=0 auid=0 ses=23461 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447192801.769:708095): pid=20143 uid=0 auid=0 ses=23460 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447192801.773:708096): pid=20143 uid=0 auid=0 ses=23460 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447192801.778:708097): pid=20142 uid=0 auid=0 ses=23461 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447192801.779:708098): pid=20142 uid=0 auid=0 ses=23461 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447192861.792:708099): pid=20346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447192861.792:708100): pid=20346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447192861.793:708101): pid=20346 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23462 res=1
type=USER_START msg=audit(1447192861.802:708102): pid=20346 uid=0 auid=0 ses=23462 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447192861.803:708103): pid=20346 uid=0 auid=0 ses=23462 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447192861.826:708104): pid=20346 uid=0 auid=0 ses=23462 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447192861.828:708105): pid=20346 uid=0 auid=0 ses=23462 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447193401.837:708106): pid=22046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447193401.837:708107): pid=22047 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447193401.838:708108): pid=22046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447193401.838:708109): pid=22047 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447193401.838:708110): pid=22047 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23463 res=1
type=LOGIN msg=audit(1447193401.838:708111): pid=22046 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23464 res=1
type=USER_START msg=audit(1447193401.852:708112): pid=22047 uid=0 auid=0 ses=23463 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447193401.853:708113): pid=22046 uid=0 auid=0 ses=23464 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447193401.853:708114): pid=22047 uid=0 auid=0 ses=23463 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447193401.853:708115): pid=22046 uid=0 auid=0 ses=23464 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447193401.859:708116): pid=22047 uid=0 auid=0 ses=23463 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447193401.861:708117): pid=22047 uid=0 auid=0 ses=23463 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447193401.866:708118): pid=22046 uid=0 auid=0 ses=23464 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447193401.870:708119): pid=22046 uid=0 auid=0 ses=23464 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447193582.396:708120): pid=22616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=22616 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447193582.397:708121): pid=22616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=22616 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447193582.397:708122): pid=22616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=22616 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447193582.440:708123): pid=22615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=22616 suid=74 rport=34810 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447193582.440:708124): pid=22615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=22616 suid=74 rport=34810 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447193582.564:708125): pid=22615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34810 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447193582.564:708126): pid=22615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=34810 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447193582.569:708127): pid=22615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447193582.571:708128): pid=22615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22616 suid=74 rport=34810 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447193582.572:708129): pid=22615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447193582.573:708130): pid=22615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447193582.573:708131): pid=22615 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23465 res=1
type=USER_ROLE_CHANGE msg=audit(1447193582.643:708132): pid=22615 uid=0 auid=0 ses=23465 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447193582.664:708133): pid=22615 uid=0 auid=0 ses=23465 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447193582.667:708134): pid=22615 uid=0 auid=0 ses=23465 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447193582.667:708135): pid=22615 uid=0 auid=0 ses=23465 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447193582.668:708136): pid=22618 uid=0 auid=0 ses=23465 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=22618 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447193582.668:708137): pid=22618 uid=0 auid=0 ses=23465 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=22618 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447193582.668:708138): pid=22618 uid=0 auid=0 ses=23465 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=22618 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447193582.669:708139): pid=22618 uid=0 auid=0 ses=23465 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447193582.689:708140): pid=22615 uid=0 auid=0 ses=23465 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447193582.690:708141): pid=22615 uid=0 auid=0 ses=23465 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447193582.695:708142): pid=22615 uid=0 auid=0 ses=23465 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447193582.695:708143): pid=22615 uid=0 auid=0 ses=23465 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447193582.695:708144): pid=22615 uid=0 auid=0 ses=23465 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22615 suid=0 rport=34810 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447193582.695:708145): pid=22615 uid=0 auid=0 ses=23465 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=22615 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447193582.695:708146): pid=22615 uid=0 auid=0 ses=23465 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=22615 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447193582.695:708147): pid=22615 uid=0 auid=0 ses=23465 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=22615 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447193582.719:708148): pid=22626 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=22626 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447193582.720:708149): pid=22626 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=22626 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447193582.720:708150): pid=22626 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=22626 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447193582.765:708151): pid=22625 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=22626 suid=74 rport=34813 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447193582.765:708152): pid=22625 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=22626 suid=74 rport=34813 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447193582.895:708153): pid=22625 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34813 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447193582.896:708154): pid=22625 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=34813 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447193582.900:708155): pid=22625 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447193582.901:708156): pid=22625 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22626 suid=74 rport=34813 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447193582.903:708157): pid=22625 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447193582.904:708158): pid=22625 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447193582.904:708159): pid=22625 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23466 res=1
type=USER_ROLE_CHANGE msg=audit(1447193582.969:708160): pid=22625 uid=0 auid=0 ses=23466 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447193582.991:708161): pid=22625 uid=0 auid=0 ses=23466 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447193582.994:708162): pid=22625 uid=0 auid=0 ses=23466 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447193582.994:708163): pid=22625 uid=0 auid=0 ses=23466 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447193582.995:708164): pid=22628 uid=0 auid=0 ses=23466 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=22628 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447193582.996:708165): pid=22628 uid=0 auid=0 ses=23466 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=22628 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447193582.996:708166): pid=22628 uid=0 auid=0 ses=23466 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=22628 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447193582.996:708167): pid=22628 uid=0 auid=0 ses=23466 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447193584.281:708168): pid=22625 uid=0 auid=0 ses=23466 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447193584.281:708169): pid=22625 uid=0 auid=0 ses=23466 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447193584.285:708170): pid=22625 uid=0 auid=0 ses=23466 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447193584.285:708171): pid=22625 uid=0 auid=0 ses=23466 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447193584.286:708172): pid=22625 uid=0 auid=0 ses=23466 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22625 suid=0 rport=34813 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447193584.286:708173): pid=22625 uid=0 auid=0 ses=23466 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=22625 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447193584.286:708174): pid=22625 uid=0 auid=0 ses=23466 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=22625 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447193584.286:708175): pid=22625 uid=0 auid=0 ses=23466 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=22625 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447193584.320:708176): pid=22678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=22678 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447193584.320:708177): pid=22678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=22678 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447193584.320:708178): pid=22678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=22678 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447193584.365:708179): pid=22677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=22678 suid=74 rport=34814 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447193584.365:708180): pid=22677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=22678 suid=74 rport=34814 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447193584.487:708181): pid=22677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34814 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447193584.487:708182): pid=22677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=34814 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447193584.492:708183): pid=22677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447193584.494:708184): pid=22677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22678 suid=74 rport=34814 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447193584.495:708185): pid=22677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447193584.496:708186): pid=22677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447193584.496:708187): pid=22677 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23467 res=1
type=USER_ROLE_CHANGE msg=audit(1447193584.562:708188): pid=22677 uid=0 auid=0 ses=23467 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447193584.580:708189): pid=22677 uid=0 auid=0 ses=23467 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447193584.583:708190): pid=22677 uid=0 auid=0 ses=23467 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447193584.583:708191): pid=22677 uid=0 auid=0 ses=23467 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447193584.585:708192): pid=22680 uid=0 auid=0 ses=23467 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=22680 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447193584.585:708193): pid=22680 uid=0 auid=0 ses=23467 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=22680 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447193584.585:708194): pid=22680 uid=0 auid=0 ses=23467 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=22680 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447193584.586:708195): pid=22680 uid=0 auid=0 ses=23467 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447193584.602:708196): pid=22677 uid=0 auid=0 ses=23467 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447193584.602:708197): pid=22677 uid=0 auid=0 ses=23467 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447193584.606:708198): pid=22677 uid=0 auid=0 ses=23467 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447193584.606:708199): pid=22677 uid=0 auid=0 ses=23467 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447193584.607:708200): pid=22677 uid=0 auid=0 ses=23467 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22677 suid=0 rport=34814 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447193584.607:708201): pid=22677 uid=0 auid=0 ses=23467 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=22677 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447193584.607:708202): pid=22677 uid=0 auid=0 ses=23467 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=22677 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447193584.607:708203): pid=22677 uid=0 auid=0 ses=23467 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=22677 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=SYSCALL msg=audit(1447193669.703:708204): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447194001.890:708205): pid=23968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447194001.890:708206): pid=23967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447194001.890:708207): pid=23967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447194001.890:708208): pid=23968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447194001.891:708209): pid=23968 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23468 res=1
type=LOGIN msg=audit(1447194001.891:708210): pid=23967 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23469 res=1
type=USER_START msg=audit(1447194001.912:708211): pid=23968 uid=0 auid=0 ses=23468 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447194001.912:708212): pid=23968 uid=0 auid=0 ses=23468 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447194001.913:708213): pid=23967 uid=0 auid=0 ses=23469 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447194001.914:708214): pid=23967 uid=0 auid=0 ses=23469 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447194001.924:708215): pid=23968 uid=0 auid=0 ses=23468 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447194001.926:708216): pid=23968 uid=0 auid=0 ses=23468 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447194001.928:708217): pid=23967 uid=0 auid=0 ses=23469 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447194026.955:708218): pid=23967 uid=0 auid=0 ses=23469 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=USER_ACCT msg=audit(1447194601.968:708219): pid=25793 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447194601.968:708220): pid=25793 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447194601.968:708221): pid=25793 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23470 res=1
type=USER_ACCT msg=audit(1447194601.969:708222): pid=25792 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447194601.969:708223): pid=25792 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447194601.969:708224): pid=25792 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23471 res=1
type=USER_START msg=audit(1447194601.983:708225): pid=25793 uid=0 auid=0 ses=23470 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447194601.983:708226): pid=25793 uid=0 auid=0 ses=23470 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447194601.983:708227): pid=25792 uid=0 auid=0 ses=23471 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447194601.983:708228): pid=25792 uid=0 auid=0 ses=23471 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447194601.990:708229): pid=25793 uid=0 auid=0 ses=23470 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447194601.992:708230): pid=25793 uid=0 auid=0 ses=23470 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447194601.996:708231): pid=25792 uid=0 auid=0 ses=23471 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447194601.997:708232): pid=25792 uid=0 auid=0 ses=23471 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447194783.275:708233): pid=26357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=26357 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447194783.275:708234): pid=26357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=26357 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447194783.275:708235): pid=26357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=26357 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447194783.319:708236): pid=26356 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=26357 suid=74 rport=36793 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447194783.319:708237): pid=26356 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=26357 suid=74 rport=36793 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447194783.445:708238): pid=26356 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=36793 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447194783.445:708239): pid=26356 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=36793 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447194783.451:708240): pid=26356 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447194783.452:708241): pid=26356 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26357 suid=74 rport=36793 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447194783.454:708242): pid=26356 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447194783.454:708243): pid=26356 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447194783.454:708244): pid=26356 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23472 res=1
type=USER_ROLE_CHANGE msg=audit(1447194783.526:708245): pid=26356 uid=0 auid=0 ses=23472 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447194783.550:708246): pid=26356 uid=0 auid=0 ses=23472 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447194783.552:708247): pid=26356 uid=0 auid=0 ses=23472 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447194783.553:708248): pid=26356 uid=0 auid=0 ses=23472 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447194783.554:708249): pid=26359 uid=0 auid=0 ses=23472 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=26359 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447194783.554:708250): pid=26359 uid=0 auid=0 ses=23472 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=26359 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447194783.554:708251): pid=26359 uid=0 auid=0 ses=23472 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=26359 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447194783.555:708252): pid=26359 uid=0 auid=0 ses=23472 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447194783.576:708253): pid=26356 uid=0 auid=0 ses=23472 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447194783.576:708254): pid=26356 uid=0 auid=0 ses=23472 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447194783.580:708255): pid=26356 uid=0 auid=0 ses=23472 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447194783.580:708256): pid=26356 uid=0 auid=0 ses=23472 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447194783.581:708257): pid=26356 uid=0 auid=0 ses=23472 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26356 suid=0 rport=36793 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447194783.581:708258): pid=26356 uid=0 auid=0 ses=23472 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=26356 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447194783.581:708259): pid=26356 uid=0 auid=0 ses=23472 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=26356 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447194783.581:708260): pid=26356 uid=0 auid=0 ses=23472 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=26356 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447194783.605:708261): pid=26367 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=26367 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447194783.605:708262): pid=26367 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=26367 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447194783.605:708263): pid=26367 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=26367 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447194783.650:708264): pid=26366 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=26367 suid=74 rport=36794 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447194783.650:708265): pid=26366 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=26367 suid=74 rport=36794 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447194783.778:708266): pid=26366 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=36794 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447194783.778:708267): pid=26366 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=36794 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447194783.788:708268): pid=26366 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447194783.789:708269): pid=26366 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26367 suid=74 rport=36794 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447194783.790:708270): pid=26366 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447194783.790:708271): pid=26366 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447194783.790:708272): pid=26366 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23473 res=1
type=USER_ROLE_CHANGE msg=audit(1447194783.854:708273): pid=26366 uid=0 auid=0 ses=23473 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447194783.872:708274): pid=26366 uid=0 auid=0 ses=23473 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447194783.875:708275): pid=26366 uid=0 auid=0 ses=23473 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447194783.875:708276): pid=26366 uid=0 auid=0 ses=23473 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447194783.876:708277): pid=26381 uid=0 auid=0 ses=23473 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=26381 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447194783.876:708278): pid=26381 uid=0 auid=0 ses=23473 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=26381 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447194783.876:708279): pid=26381 uid=0 auid=0 ses=23473 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=26381 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447194783.877:708280): pid=26381 uid=0 auid=0 ses=23473 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447194785.145:708281): pid=26366 uid=0 auid=0 ses=23473 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447194785.145:708282): pid=26366 uid=0 auid=0 ses=23473 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447194785.154:708283): pid=26366 uid=0 auid=0 ses=23473 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447194785.154:708284): pid=26366 uid=0 auid=0 ses=23473 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447194785.155:708285): pid=26366 uid=0 auid=0 ses=23473 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26366 suid=0 rport=36794 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447194785.155:708286): pid=26366 uid=0 auid=0 ses=23473 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=26366 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447194785.155:708287): pid=26366 uid=0 auid=0 ses=23473 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=26366 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447194785.155:708288): pid=26366 uid=0 auid=0 ses=23473 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=26366 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447194785.181:708289): pid=26441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=26441 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447194785.181:708290): pid=26441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=26441 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447194785.182:708291): pid=26441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=26441 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447194785.226:708292): pid=26440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=26441 suid=74 rport=36797 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447194785.227:708293): pid=26440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=26441 suid=74 rport=36797 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447194785.352:708294): pid=26440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=36797 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447194785.352:708295): pid=26440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=36797 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447194785.358:708296): pid=26440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447194785.359:708297): pid=26440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26441 suid=74 rport=36797 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447194785.359:708298): pid=26440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447194785.360:708299): pid=26440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447194785.360:708300): pid=26440 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23474 res=1
type=USER_ROLE_CHANGE msg=audit(1447194785.427:708301): pid=26440 uid=0 auid=0 ses=23474 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447194785.453:708302): pid=26440 uid=0 auid=0 ses=23474 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447194785.456:708303): pid=26440 uid=0 auid=0 ses=23474 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447194785.456:708304): pid=26440 uid=0 auid=0 ses=23474 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447194785.457:708305): pid=26443 uid=0 auid=0 ses=23474 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=26443 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447194785.457:708306): pid=26443 uid=0 auid=0 ses=23474 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=26443 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447194785.457:708307): pid=26443 uid=0 auid=0 ses=23474 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=26443 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447194785.458:708308): pid=26443 uid=0 auid=0 ses=23474 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447194785.476:708309): pid=26440 uid=0 auid=0 ses=23474 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447194785.476:708310): pid=26440 uid=0 auid=0 ses=23474 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447194785.479:708311): pid=26440 uid=0 auid=0 ses=23474 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447194785.480:708312): pid=26440 uid=0 auid=0 ses=23474 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447194785.480:708313): pid=26440 uid=0 auid=0 ses=23474 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26440 suid=0 rport=36797 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447194785.480:708314): pid=26440 uid=0 auid=0 ses=23474 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=26440 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447194785.480:708315): pid=26440 uid=0 auid=0 ses=23474 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=26440 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447194785.480:708316): pid=26440 uid=0 auid=0 ses=23474 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=26440 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447195201.014:708317): pid=27667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447195201.014:708318): pid=27668 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447195201.014:708319): pid=27667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447195201.014:708320): pid=27668 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447195201.015:708321): pid=27668 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23475 res=1
type=LOGIN msg=audit(1447195201.015:708322): pid=27667 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23476 res=1
type=USER_START msg=audit(1447195201.037:708323): pid=27668 uid=0 auid=0 ses=23475 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447195201.038:708324): pid=27667 uid=0 auid=0 ses=23476 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447195201.038:708325): pid=27668 uid=0 auid=0 ses=23475 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447195201.038:708326): pid=27667 uid=0 auid=0 ses=23476 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447195201.047:708327): pid=27668 uid=0 auid=0 ses=23475 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447195201.048:708328): pid=27668 uid=0 auid=0 ses=23475 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447195201.062:708329): pid=27667 uid=0 auid=0 ses=23476 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447195201.064:708330): pid=27667 uid=0 auid=0 ses=23476 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1447195759.693:708331): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447195801.083:708332): pid=29513 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447195801.083:708333): pid=29513 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447195801.083:708334): pid=29513 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23477 res=1
type=USER_ACCT msg=audit(1447195801.084:708335): pid=29514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447195801.084:708336): pid=29514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447195801.084:708337): pid=29514 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23478 res=1
type=USER_START msg=audit(1447195801.099:708338): pid=29513 uid=0 auid=0 ses=23477 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447195801.099:708339): pid=29513 uid=0 auid=0 ses=23477 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447195801.099:708340): pid=29514 uid=0 auid=0 ses=23478 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447195801.099:708341): pid=29514 uid=0 auid=0 ses=23478 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447195801.106:708342): pid=29514 uid=0 auid=0 ses=23478 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447195801.109:708343): pid=29514 uid=0 auid=0 ses=23478 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447195801.112:708344): pid=29513 uid=0 auid=0 ses=23477 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447195826.141:708345): pid=29513 uid=0 auid=0 ses=23477 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=CRYPTO_KEY_USER msg=audit(1447195982.846:708346): pid=30078 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=30078 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447195982.846:708347): pid=30078 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=30078 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447195982.846:708348): pid=30078 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=30078 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447195982.889:708349): pid=30077 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=30078 suid=74 rport=38773 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447195982.889:708350): pid=30077 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=30078 suid=74 rport=38773 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447195983.020:708351): pid=30077 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38773 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447195983.020:708352): pid=30077 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=38773 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447195983.024:708353): pid=30077 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447195983.025:708354): pid=30077 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=30078 suid=74 rport=38773 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447195983.025:708355): pid=30077 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447195983.026:708356): pid=30077 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447195983.026:708357): pid=30077 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23479 res=1
type=USER_ROLE_CHANGE msg=audit(1447195983.097:708358): pid=30077 uid=0 auid=0 ses=23479 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447195983.118:708359): pid=30077 uid=0 auid=0 ses=23479 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447195983.121:708360): pid=30077 uid=0 auid=0 ses=23479 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447195983.121:708361): pid=30077 uid=0 auid=0 ses=23479 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447195983.122:708362): pid=30080 uid=0 auid=0 ses=23479 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=30080 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447195983.122:708363): pid=30080 uid=0 auid=0 ses=23479 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=30080 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447195983.122:708364): pid=30080 uid=0 auid=0 ses=23479 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=30080 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447195983.124:708365): pid=30080 uid=0 auid=0 ses=23479 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447195983.143:708366): pid=30077 uid=0 auid=0 ses=23479 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447195983.143:708367): pid=30077 uid=0 auid=0 ses=23479 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447195983.148:708368): pid=30077 uid=0 auid=0 ses=23479 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447195983.148:708369): pid=30077 uid=0 auid=0 ses=23479 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447195983.149:708370): pid=30077 uid=0 auid=0 ses=23479 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=30077 suid=0 rport=38773 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447195983.149:708371): pid=30077 uid=0 auid=0 ses=23479 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=30077 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447195983.150:708372): pid=30077 uid=0 auid=0 ses=23479 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=30077 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447195983.150:708373): pid=30077 uid=0 auid=0 ses=23479 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=30077 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447195983.174:708374): pid=30088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=30088 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447195983.174:708375): pid=30088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=30088 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447195983.174:708376): pid=30088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=30088 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447195983.219:708377): pid=30087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=30088 suid=74 rport=38774 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447195983.219:708378): pid=30087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=30088 suid=74 rport=38774 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447195983.346:708379): pid=30087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38774 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447195983.346:708380): pid=30087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=38774 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447195983.351:708381): pid=30087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447195983.351:708382): pid=30087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=30088 suid=74 rport=38774 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447195983.352:708383): pid=30087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447195983.352:708384): pid=30087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447195983.352:708385): pid=30087 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23480 res=1
type=USER_ROLE_CHANGE msg=audit(1447195983.417:708386): pid=30087 uid=0 auid=0 ses=23480 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447195983.443:708387): pid=30087 uid=0 auid=0 ses=23480 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447195983.448:708388): pid=30087 uid=0 auid=0 ses=23480 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447195983.448:708389): pid=30087 uid=0 auid=0 ses=23480 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447195983.450:708390): pid=30090 uid=0 auid=0 ses=23480 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=30090 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447195983.450:708391): pid=30090 uid=0 auid=0 ses=23480 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=30090 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447195983.450:708392): pid=30090 uid=0 auid=0 ses=23480 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=30090 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447195983.451:708393): pid=30090 uid=0 auid=0 ses=23480 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447195984.733:708394): pid=30087 uid=0 auid=0 ses=23480 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447195984.733:708395): pid=30087 uid=0 auid=0 ses=23480 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447195984.736:708396): pid=30087 uid=0 auid=0 ses=23480 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447195984.737:708397): pid=30087 uid=0 auid=0 ses=23480 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447195984.737:708398): pid=30087 uid=0 auid=0 ses=23480 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=30087 suid=0 rport=38774 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447195984.737:708399): pid=30087 uid=0 auid=0 ses=23480 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=30087 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447195984.737:708400): pid=30087 uid=0 auid=0 ses=23480 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=30087 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447195984.737:708401): pid=30087 uid=0 auid=0 ses=23480 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=30087 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447195984.767:708402): pid=30140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=30140 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447195984.767:708403): pid=30140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=30140 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447195984.767:708404): pid=30140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=30140 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447195984.814:708405): pid=30139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=30140 suid=74 rport=38778 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447195984.815:708406): pid=30139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=30140 suid=74 rport=38778 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447195984.936:708407): pid=30139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38778 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447195984.936:708408): pid=30139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=38778 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447195984.942:708409): pid=30139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447195984.943:708410): pid=30139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=30140 suid=74 rport=38778 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447195984.944:708411): pid=30139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447195984.944:708412): pid=30139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447195984.944:708413): pid=30139 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23481 res=1
type=USER_ROLE_CHANGE msg=audit(1447195985.011:708414): pid=30139 uid=0 auid=0 ses=23481 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447195985.037:708415): pid=30139 uid=0 auid=0 ses=23481 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447195985.041:708416): pid=30139 uid=0 auid=0 ses=23481 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447195985.041:708417): pid=30139 uid=0 auid=0 ses=23481 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447195985.043:708418): pid=30142 uid=0 auid=0 ses=23481 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=30142 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447195985.043:708419): pid=30142 uid=0 auid=0 ses=23481 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=30142 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447195985.043:708420): pid=30142 uid=0 auid=0 ses=23481 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=30142 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447195985.046:708421): pid=30142 uid=0 auid=0 ses=23481 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447195985.069:708422): pid=30139 uid=0 auid=0 ses=23481 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447195985.069:708423): pid=30139 uid=0 auid=0 ses=23481 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447195985.071:708424): pid=30139 uid=0 auid=0 ses=23481 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447195985.071:708425): pid=30139 uid=0 auid=0 ses=23481 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447195985.073:708426): pid=30139 uid=0 auid=0 ses=23481 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=30139 suid=0 rport=38778 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447195985.073:708427): pid=30139 uid=0 auid=0 ses=23481 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=30139 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447195985.073:708428): pid=30139 uid=0 auid=0 ses=23481 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=30139 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447195985.073:708429): pid=30139 uid=0 auid=0 ses=23481 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=30139 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447196401.164:708431): pid=31428 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447196401.164:708430): pid=31429 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447196401.164:708432): pid=31429 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447196401.164:708433): pid=31428 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447196401.165:708434): pid=31429 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23482 res=1
type=LOGIN msg=audit(1447196401.165:708435): pid=31428 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23483 res=1
type=USER_START msg=audit(1447196401.183:708436): pid=31428 uid=0 auid=0 ses=23483 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447196401.183:708437): pid=31429 uid=0 auid=0 ses=23482 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447196401.183:708439): pid=31428 uid=0 auid=0 ses=23483 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447196401.183:708438): pid=31429 uid=0 auid=0 ses=23482 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447196401.192:708440): pid=31429 uid=0 auid=0 ses=23482 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447196401.197:708441): pid=31429 uid=0 auid=0 ses=23482 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447196401.199:708442): pid=31428 uid=0 auid=0 ses=23483 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447196401.203:708443): pid=31428 uid=0 auid=0 ses=23483 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447196461.212:708444): pid=31634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447196461.212:708445): pid=31634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447196461.212:708446): pid=31634 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23484 res=1
type=USER_START msg=audit(1447196461.223:708447): pid=31634 uid=0 auid=0 ses=23484 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447196461.224:708448): pid=31634 uid=0 auid=0 ses=23484 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447196461.249:708449): pid=31634 uid=0 auid=0 ses=23484 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447196461.250:708450): pid=31634 uid=0 auid=0 ses=23484 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447197001.268:708451): pid=982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447197001.268:708452): pid=983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447197001.268:708453): pid=982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447197001.268:708454): pid=983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447197001.268:708455): pid=983 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23485 res=1
type=LOGIN msg=audit(1447197001.268:708456): pid=982 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23486 res=1
type=USER_START msg=audit(1447197001.283:708457): pid=983 uid=0 auid=0 ses=23485 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447197001.283:708458): pid=983 uid=0 auid=0 ses=23485 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447197001.283:708459): pid=982 uid=0 auid=0 ses=23486 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447197001.283:708460): pid=982 uid=0 auid=0 ses=23486 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447197001.293:708461): pid=983 uid=0 auid=0 ses=23485 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447197001.294:708462): pid=983 uid=0 auid=0 ses=23485 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447197001.295:708463): pid=982 uid=0 auid=0 ses=23486 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447197001.300:708464): pid=982 uid=0 auid=0 ses=23486 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447197182.482:708465): pid=1553 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=1553 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447197182.482:708466): pid=1553 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=1553 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447197182.482:708467): pid=1553 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=1553 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447197182.525:708468): pid=1552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=1553 suid=74 rport=40755 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447197182.526:708469): pid=1552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=1553 suid=74 rport=40755 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447197182.652:708470): pid=1552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=40755 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447197182.652:708471): pid=1552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=40755 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447197182.656:708472): pid=1552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447197182.657:708473): pid=1552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1553 suid=74 rport=40755 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447197182.657:708474): pid=1552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447197182.658:708475): pid=1552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447197182.658:708476): pid=1552 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23487 res=1
type=USER_ROLE_CHANGE msg=audit(1447197182.734:708477): pid=1552 uid=0 auid=0 ses=23487 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447197182.760:708478): pid=1552 uid=0 auid=0 ses=23487 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447197182.762:708479): pid=1552 uid=0 auid=0 ses=23487 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447197182.762:708480): pid=1552 uid=0 auid=0 ses=23487 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447197182.764:708481): pid=1561 uid=0 auid=0 ses=23487 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=1561 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447197182.764:708482): pid=1561 uid=0 auid=0 ses=23487 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=1561 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447197182.764:708483): pid=1561 uid=0 auid=0 ses=23487 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=1561 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447197182.765:708484): pid=1561 uid=0 auid=0 ses=23487 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447197182.784:708485): pid=1552 uid=0 auid=0 ses=23487 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447197182.784:708486): pid=1552 uid=0 auid=0 ses=23487 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447197182.788:708487): pid=1552 uid=0 auid=0 ses=23487 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447197182.789:708488): pid=1552 uid=0 auid=0 ses=23487 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447197182.790:708489): pid=1552 uid=0 auid=0 ses=23487 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1552 suid=0 rport=40755 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447197182.790:708490): pid=1552 uid=0 auid=0 ses=23487 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=1552 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447197182.790:708491): pid=1552 uid=0 auid=0 ses=23487 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=1552 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447197182.790:708492): pid=1552 uid=0 auid=0 ses=23487 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=1552 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447197182.810:708493): pid=1569 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=1569 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447197182.810:708494): pid=1569 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=1569 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447197182.810:708495): pid=1569 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=1569 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447197182.855:708496): pid=1568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=1569 suid=74 rport=40756 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447197182.855:708497): pid=1568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=1569 suid=74 rport=40756 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447197182.984:708498): pid=1568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=40756 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447197182.984:708499): pid=1568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=40756 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447197182.991:708500): pid=1568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447197182.992:708501): pid=1568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1569 suid=74 rport=40756 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447197182.993:708502): pid=1568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447197182.993:708503): pid=1568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447197182.994:708504): pid=1568 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23488 res=1
type=USER_ROLE_CHANGE msg=audit(1447197183.061:708505): pid=1568 uid=0 auid=0 ses=23488 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447197183.085:708506): pid=1568 uid=0 auid=0 ses=23488 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447197183.088:708507): pid=1568 uid=0 auid=0 ses=23488 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447197183.088:708508): pid=1568 uid=0 auid=0 ses=23488 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447197183.089:708509): pid=1571 uid=0 auid=0 ses=23488 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=1571 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447197183.089:708510): pid=1571 uid=0 auid=0 ses=23488 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=1571 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447197183.090:708511): pid=1571 uid=0 auid=0 ses=23488 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=1571 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447197183.090:708512): pid=1571 uid=0 auid=0 ses=23488 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447197184.366:708513): pid=1568 uid=0 auid=0 ses=23488 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447197184.366:708514): pid=1568 uid=0 auid=0 ses=23488 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447197184.371:708515): pid=1568 uid=0 auid=0 ses=23488 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447197184.371:708516): pid=1568 uid=0 auid=0 ses=23488 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447197184.372:708517): pid=1568 uid=0 auid=0 ses=23488 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1568 suid=0 rport=40756 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447197184.372:708518): pid=1568 uid=0 auid=0 ses=23488 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=1568 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447197184.372:708519): pid=1568 uid=0 auid=0 ses=23488 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=1568 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447197184.372:708520): pid=1568 uid=0 auid=0 ses=23488 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=1568 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447197184.405:708521): pid=1621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=1621 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447197184.405:708522): pid=1621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=1621 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447197184.405:708523): pid=1621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=1621 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447197184.451:708524): pid=1620 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=1621 suid=74 rport=40761 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447197184.451:708525): pid=1620 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=1621 suid=74 rport=40761 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447197184.576:708526): pid=1620 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=40761 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447197184.576:708527): pid=1620 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=40761 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447197184.581:708528): pid=1620 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447197184.582:708529): pid=1620 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1621 suid=74 rport=40761 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447197184.583:708530): pid=1620 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447197184.583:708531): pid=1620 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447197184.583:708532): pid=1620 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23489 res=1
type=USER_ROLE_CHANGE msg=audit(1447197184.651:708533): pid=1620 uid=0 auid=0 ses=23489 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447197184.672:708534): pid=1620 uid=0 auid=0 ses=23489 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447197184.674:708535): pid=1620 uid=0 auid=0 ses=23489 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447197184.674:708536): pid=1620 uid=0 auid=0 ses=23489 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447197184.675:708537): pid=1623 uid=0 auid=0 ses=23489 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=1623 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447197184.675:708538): pid=1623 uid=0 auid=0 ses=23489 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=1623 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447197184.675:708539): pid=1623 uid=0 auid=0 ses=23489 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=1623 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447197184.676:708540): pid=1623 uid=0 auid=0 ses=23489 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447197184.692:708541): pid=1620 uid=0 auid=0 ses=23489 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447197184.692:708542): pid=1620 uid=0 auid=0 ses=23489 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447197184.696:708543): pid=1620 uid=0 auid=0 ses=23489 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447197184.696:708544): pid=1620 uid=0 auid=0 ses=23489 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447197184.696:708545): pid=1620 uid=0 auid=0 ses=23489 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1620 suid=0 rport=40761 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447197184.696:708546): pid=1620 uid=0 auid=0 ses=23489 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=1620 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447197184.696:708547): pid=1620 uid=0 auid=0 ses=23489 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=1620 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447197184.696:708548): pid=1620 uid=0 auid=0 ses=23489 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=1620 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447197601.318:708549): pid=2913 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447197601.318:708550): pid=2912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447197601.318:708551): pid=2913 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447197601.318:708552): pid=2912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447197601.320:708553): pid=2913 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23490 res=1
type=LOGIN msg=audit(1447197601.320:708554): pid=2912 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23491 res=1
type=USER_START msg=audit(1447197601.339:708555): pid=2912 uid=0 auid=0 ses=23491 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447197601.339:708556): pid=2913 uid=0 auid=0 ses=23490 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447197601.340:708557): pid=2912 uid=0 auid=0 ses=23491 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447197601.340:708558): pid=2913 uid=0 auid=0 ses=23490 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447197601.350:708559): pid=2913 uid=0 auid=0 ses=23490 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447197601.351:708560): pid=2913 uid=0 auid=0 ses=23490 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447197601.354:708561): pid=2912 uid=0 auid=0 ses=23491 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447197601.359:708562): pid=2912 uid=0 auid=0 ses=23491 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1447197862.696:708563): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447198201.375:708564): pid=4757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447198201.375:708565): pid=4757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447198201.375:708566): pid=4757 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23492 res=1
type=USER_ACCT msg=audit(1447198201.375:708567): pid=4756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447198201.375:708568): pid=4756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447198201.376:708569): pid=4756 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23493 res=1
type=USER_START msg=audit(1447198201.394:708570): pid=4757 uid=0 auid=0 ses=23492 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447198201.394:708571): pid=4756 uid=0 auid=0 ses=23493 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447198201.394:708572): pid=4757 uid=0 auid=0 ses=23492 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447198201.394:708573): pid=4756 uid=0 auid=0 ses=23493 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447198201.400:708574): pid=4757 uid=0 auid=0 ses=23492 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447198201.401:708575): pid=4757 uid=0 auid=0 ses=23492 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447198201.409:708576): pid=4756 uid=0 auid=0 ses=23493 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447198201.410:708577): pid=4756 uid=0 auid=0 ses=23493 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447198382.952:708578): pid=5319 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=5319 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447198382.952:708579): pid=5319 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=5319 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447198382.952:708580): pid=5319 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=5319 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447198382.996:708581): pid=5318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=5319 suid=74 rport=42736 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447198382.996:708582): pid=5318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=5319 suid=74 rport=42736 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447198383.127:708583): pid=5318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42736 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447198383.127:708584): pid=5318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=42736 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447198383.135:708585): pid=5318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447198383.137:708586): pid=5318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5319 suid=74 rport=42736 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447198383.140:708587): pid=5318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447198383.140:708588): pid=5318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447198383.140:708589): pid=5318 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23494 res=1
type=USER_ROLE_CHANGE msg=audit(1447198383.207:708590): pid=5318 uid=0 auid=0 ses=23494 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447198383.226:708591): pid=5318 uid=0 auid=0 ses=23494 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447198383.229:708592): pid=5318 uid=0 auid=0 ses=23494 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447198383.229:708593): pid=5318 uid=0 auid=0 ses=23494 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447198383.230:708594): pid=5325 uid=0 auid=0 ses=23494 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=5325 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447198383.230:708595): pid=5325 uid=0 auid=0 ses=23494 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=5325 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447198383.230:708596): pid=5325 uid=0 auid=0 ses=23494 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=5325 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447198383.231:708597): pid=5325 uid=0 auid=0 ses=23494 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447198383.249:708598): pid=5318 uid=0 auid=0 ses=23494 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447198383.249:708599): pid=5318 uid=0 auid=0 ses=23494 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447198383.254:708600): pid=5318 uid=0 auid=0 ses=23494 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447198383.254:708601): pid=5318 uid=0 auid=0 ses=23494 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447198383.254:708602): pid=5318 uid=0 auid=0 ses=23494 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5318 suid=0 rport=42736 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447198383.255:708603): pid=5318 uid=0 auid=0 ses=23494 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=5318 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447198383.255:708604): pid=5318 uid=0 auid=0 ses=23494 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=5318 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447198383.255:708605): pid=5318 uid=0 auid=0 ses=23494 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=5318 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447198383.275:708606): pid=5333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=5333 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447198383.275:708607): pid=5333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=5333 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447198383.275:708608): pid=5333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=5333 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447198383.321:708609): pid=5332 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=5333 suid=74 rport=42737 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447198383.321:708610): pid=5332 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=5333 suid=74 rport=42737 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447198383.450:708611): pid=5332 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42737 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447198383.450:708612): pid=5332 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=42737 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447198383.458:708613): pid=5332 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447198383.459:708614): pid=5332 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5333 suid=74 rport=42737 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447198383.463:708615): pid=5332 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447198383.463:708616): pid=5332 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447198383.463:708617): pid=5332 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23495 res=1
type=USER_ROLE_CHANGE msg=audit(1447198383.532:708618): pid=5332 uid=0 auid=0 ses=23495 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447198383.552:708619): pid=5332 uid=0 auid=0 ses=23495 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447198383.554:708620): pid=5332 uid=0 auid=0 ses=23495 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447198383.555:708621): pid=5332 uid=0 auid=0 ses=23495 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447198383.556:708622): pid=5335 uid=0 auid=0 ses=23495 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=5335 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447198383.556:708623): pid=5335 uid=0 auid=0 ses=23495 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=5335 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447198383.556:708624): pid=5335 uid=0 auid=0 ses=23495 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=5335 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447198383.557:708625): pid=5335 uid=0 auid=0 ses=23495 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447198384.830:708626): pid=5332 uid=0 auid=0 ses=23495 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447198384.830:708627): pid=5332 uid=0 auid=0 ses=23495 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447198384.836:708628): pid=5332 uid=0 auid=0 ses=23495 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447198384.836:708629): pid=5332 uid=0 auid=0 ses=23495 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447198384.837:708630): pid=5332 uid=0 auid=0 ses=23495 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5332 suid=0 rport=42737 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447198384.837:708631): pid=5332 uid=0 auid=0 ses=23495 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=5332 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447198384.837:708632): pid=5332 uid=0 auid=0 ses=23495 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=5332 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447198384.837:708633): pid=5332 uid=0 auid=0 ses=23495 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=5332 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447198384.872:708634): pid=5385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=5385 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447198384.872:708635): pid=5385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=5385 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447198384.872:708636): pid=5385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=5385 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447198384.917:708637): pid=5384 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=5385 suid=74 rport=42742 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447198384.917:708638): pid=5384 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=5385 suid=74 rport=42742 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447198385.047:708639): pid=5384 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=42742 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447198385.047:708640): pid=5384 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=42742 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447198385.057:708641): pid=5384 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447198385.058:708642): pid=5384 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5385 suid=74 rport=42742 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447198385.059:708643): pid=5384 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447198385.060:708644): pid=5384 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447198385.060:708645): pid=5384 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23496 res=1
type=USER_ROLE_CHANGE msg=audit(1447198385.128:708646): pid=5384 uid=0 auid=0 ses=23496 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447198385.146:708647): pid=5384 uid=0 auid=0 ses=23496 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447198385.148:708648): pid=5384 uid=0 auid=0 ses=23496 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447198385.148:708649): pid=5384 uid=0 auid=0 ses=23496 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447198385.150:708650): pid=5387 uid=0 auid=0 ses=23496 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=5387 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447198385.150:708651): pid=5387 uid=0 auid=0 ses=23496 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=5387 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447198385.150:708652): pid=5387 uid=0 auid=0 ses=23496 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=5387 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447198385.151:708653): pid=5387 uid=0 auid=0 ses=23496 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447198385.166:708654): pid=5384 uid=0 auid=0 ses=23496 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447198385.166:708655): pid=5384 uid=0 auid=0 ses=23496 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447198385.171:708656): pid=5384 uid=0 auid=0 ses=23496 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447198385.171:708657): pid=5384 uid=0 auid=0 ses=23496 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447198385.172:708658): pid=5384 uid=0 auid=0 ses=23496 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5384 suid=0 rport=42742 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447198385.172:708659): pid=5384 uid=0 auid=0 ses=23496 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=5384 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447198385.172:708660): pid=5384 uid=0 auid=0 ses=23496 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=5384 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447198385.172:708661): pid=5384 uid=0 auid=0 ses=23496 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=5384 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447198801.428:708663): pid=6678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447198801.428:708662): pid=6677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447198801.428:708664): pid=6677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447198801.428:708665): pid=6678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447198801.429:708666): pid=6678 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23497 res=1
type=LOGIN msg=audit(1447198801.429:708667): pid=6677 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23498 res=1
type=USER_START msg=audit(1447198801.448:708668): pid=6678 uid=0 auid=0 ses=23497 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447198801.448:708669): pid=6678 uid=0 auid=0 ses=23497 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447198801.449:708670): pid=6677 uid=0 auid=0 ses=23498 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447198801.449:708671): pid=6677 uid=0 auid=0 ses=23498 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447198801.459:708672): pid=6678 uid=0 auid=0 ses=23497 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447198801.461:708673): pid=6678 uid=0 auid=0 ses=23497 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447198801.468:708674): pid=6677 uid=0 auid=0 ses=23498 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447198801.471:708675): pid=6677 uid=0 auid=0 ses=23498 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1447198928.758:708676): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447199401.484:708677): pid=8526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447199401.484:708678): pid=8525 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447199401.484:708679): pid=8526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447199401.484:708680): pid=8525 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447199401.484:708681): pid=8526 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23499 res=1
type=LOGIN msg=audit(1447199401.484:708682): pid=8525 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23500 res=1
type=USER_START msg=audit(1447199401.500:708683): pid=8525 uid=0 auid=0 ses=23500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447199401.500:708684): pid=8526 uid=0 auid=0 ses=23499 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447199401.500:708685): pid=8525 uid=0 auid=0 ses=23500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447199401.500:708686): pid=8526 uid=0 auid=0 ses=23499 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447199401.508:708687): pid=8526 uid=0 auid=0 ses=23499 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447199401.513:708688): pid=8525 uid=0 auid=0 ses=23500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447199401.513:708689): pid=8526 uid=0 auid=0 ses=23499 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447199426.541:708690): pid=8525 uid=0 auid=0 ses=23500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=USER_ACCT msg=audit(1447199581.550:708691): pid=9085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447199581.550:708692): pid=9085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447199581.550:708693): pid=9085 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23501 res=1
type=USER_START msg=audit(1447199581.559:708694): pid=9085 uid=0 auid=0 ses=23501 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447199581.560:708695): pid=9085 uid=0 auid=0 ses=23501 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447199581.629:708696): pid=9085 uid=0 auid=0 ses=23501 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447199581.630:708697): pid=9085 uid=0 auid=0 ses=23501 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447199582.507:708698): pid=9098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=9098 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447199582.507:708699): pid=9098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=9098 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447199582.507:708700): pid=9098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=9098 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447199582.551:708701): pid=9097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=9098 suid=74 rport=44713 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447199582.552:708702): pid=9097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=9098 suid=74 rport=44713 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447199582.681:708703): pid=9097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=44713 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447199582.681:708704): pid=9097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=44713 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447199582.690:708705): pid=9097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447199582.692:708706): pid=9097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9098 suid=74 rport=44713 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447199582.694:708707): pid=9097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447199582.694:708708): pid=9097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447199582.695:708709): pid=9097 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23502 res=1
type=USER_ROLE_CHANGE msg=audit(1447199582.764:708710): pid=9097 uid=0 auid=0 ses=23502 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447199582.784:708711): pid=9097 uid=0 auid=0 ses=23502 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447199582.786:708712): pid=9097 uid=0 auid=0 ses=23502 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447199582.786:708713): pid=9097 uid=0 auid=0 ses=23502 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447199582.788:708714): pid=9100 uid=0 auid=0 ses=23502 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=9100 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447199582.788:708715): pid=9100 uid=0 auid=0 ses=23502 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=9100 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447199582.788:708716): pid=9100 uid=0 auid=0 ses=23502 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=9100 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447199582.789:708717): pid=9100 uid=0 auid=0 ses=23502 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447199582.808:708718): pid=9097 uid=0 auid=0 ses=23502 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447199582.808:708719): pid=9097 uid=0 auid=0 ses=23502 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447199582.811:708720): pid=9097 uid=0 auid=0 ses=23502 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447199582.811:708721): pid=9097 uid=0 auid=0 ses=23502 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447199582.812:708722): pid=9097 uid=0 auid=0 ses=23502 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9097 suid=0 rport=44713 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447199582.812:708723): pid=9097 uid=0 auid=0 ses=23502 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=9097 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447199582.812:708724): pid=9097 uid=0 auid=0 ses=23502 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=9097 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447199582.812:708725): pid=9097 uid=0 auid=0 ses=23502 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=9097 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447199582.833:708726): pid=9108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=9108 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447199582.834:708727): pid=9108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=9108 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447199582.834:708728): pid=9108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=9108 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447199582.878:708729): pid=9107 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=9108 suid=74 rport=44715 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447199582.879:708730): pid=9107 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=9108 suid=74 rport=44715 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447199583.007:708731): pid=9107 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=44715 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447199583.007:708732): pid=9107 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=44715 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447199583.013:708733): pid=9107 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447199583.015:708734): pid=9107 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9108 suid=74 rport=44715 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447199583.017:708735): pid=9107 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447199583.017:708736): pid=9107 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447199583.017:708737): pid=9107 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23503 res=1
type=USER_ROLE_CHANGE msg=audit(1447199583.084:708738): pid=9107 uid=0 auid=0 ses=23503 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447199583.106:708739): pid=9107 uid=0 auid=0 ses=23503 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447199583.111:708740): pid=9107 uid=0 auid=0 ses=23503 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447199583.111:708741): pid=9107 uid=0 auid=0 ses=23503 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447199583.113:708742): pid=9110 uid=0 auid=0 ses=23503 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=9110 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447199583.113:708743): pid=9110 uid=0 auid=0 ses=23503 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=9110 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447199583.113:708744): pid=9110 uid=0 auid=0 ses=23503 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=9110 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447199583.114:708745): pid=9110 uid=0 auid=0 ses=23503 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447199584.394:708746): pid=9107 uid=0 auid=0 ses=23503 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447199584.394:708747): pid=9107 uid=0 auid=0 ses=23503 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447199584.398:708748): pid=9107 uid=0 auid=0 ses=23503 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447199584.398:708749): pid=9107 uid=0 auid=0 ses=23503 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447199584.399:708750): pid=9107 uid=0 auid=0 ses=23503 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9107 suid=0 rport=44715 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447199584.399:708751): pid=9107 uid=0 auid=0 ses=23503 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=9107 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447199584.399:708752): pid=9107 uid=0 auid=0 ses=23503 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=9107 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447199584.399:708753): pid=9107 uid=0 auid=0 ses=23503 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=9107 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447199584.430:708754): pid=9164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=9164 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447199584.430:708755): pid=9164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=9164 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447199584.430:708756): pid=9164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=9164 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447199584.475:708757): pid=9163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=9164 suid=74 rport=44719 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447199584.475:708758): pid=9163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=9164 suid=74 rport=44719 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447199584.596:708759): pid=9163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=44719 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447199584.596:708760): pid=9163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=44719 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447199584.604:708761): pid=9163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447199584.605:708762): pid=9163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9164 suid=74 rport=44719 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447199584.606:708763): pid=9163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447199584.606:708764): pid=9163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447199584.606:708765): pid=9163 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23504 res=1
type=USER_ROLE_CHANGE msg=audit(1447199584.673:708766): pid=9163 uid=0 auid=0 ses=23504 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447199584.694:708767): pid=9163 uid=0 auid=0 ses=23504 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447199584.696:708768): pid=9163 uid=0 auid=0 ses=23504 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447199584.696:708769): pid=9163 uid=0 auid=0 ses=23504 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447199584.698:708770): pid=9166 uid=0 auid=0 ses=23504 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=9166 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447199584.698:708771): pid=9166 uid=0 auid=0 ses=23504 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=9166 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447199584.698:708772): pid=9166 uid=0 auid=0 ses=23504 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=9166 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447199584.698:708773): pid=9166 uid=0 auid=0 ses=23504 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447199584.714:708774): pid=9163 uid=0 auid=0 ses=23504 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447199584.714:708775): pid=9163 uid=0 auid=0 ses=23504 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447199584.717:708776): pid=9163 uid=0 auid=0 ses=23504 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447199584.717:708777): pid=9163 uid=0 auid=0 ses=23504 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447199584.717:708778): pid=9163 uid=0 auid=0 ses=23504 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9163 suid=0 rport=44719 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447199584.717:708779): pid=9163 uid=0 auid=0 ses=23504 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=9163 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447199584.718:708780): pid=9163 uid=0 auid=0 ses=23504 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=9163 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447199584.718:708781): pid=9163 uid=0 auid=0 ses=23504 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=9163 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=SYSCALL msg=audit(1447199970.705:708782): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447200001.650:708783): pid=10464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447200001.651:708784): pid=10464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447200001.651:708785): pid=10463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447200001.651:708786): pid=10463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447200001.652:708787): pid=10464 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23505 res=1
type=LOGIN msg=audit(1447200001.652:708788): pid=10463 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23506 res=1
type=USER_START msg=audit(1447200001.668:708789): pid=10464 uid=0 auid=0 ses=23505 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447200001.669:708790): pid=10464 uid=0 auid=0 ses=23505 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447200001.672:708791): pid=10463 uid=0 auid=0 ses=23506 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447200001.672:708792): pid=10463 uid=0 auid=0 ses=23506 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447200001.680:708793): pid=10464 uid=0 auid=0 ses=23505 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447200001.681:708794): pid=10464 uid=0 auid=0 ses=23505 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447200001.692:708795): pid=10463 uid=0 auid=0 ses=23506 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447200001.693:708796): pid=10463 uid=0 auid=0 ses=23506 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447200061.701:708797): pid=10665 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447200061.701:708798): pid=10665 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447200061.702:708799): pid=10665 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23507 res=1
type=USER_START msg=audit(1447200061.714:708800): pid=10665 uid=0 auid=0 ses=23507 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447200061.715:708801): pid=10665 uid=0 auid=0 ses=23507 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447200061.744:708802): pid=10665 uid=0 auid=0 ses=23507 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447200061.746:708803): pid=10665 uid=0 auid=0 ses=23507 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447200601.768:708805): pid=12369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447200601.768:708804): pid=12368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447200601.768:708806): pid=12369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447200601.768:708807): pid=12368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447200601.768:708808): pid=12369 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23508 res=1
type=LOGIN msg=audit(1447200601.768:708809): pid=12368 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23509 res=1
type=USER_START msg=audit(1447200601.783:708810): pid=12368 uid=0 auid=0 ses=23509 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447200601.783:708811): pid=12368 uid=0 auid=0 ses=23509 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447200601.783:708812): pid=12369 uid=0 auid=0 ses=23508 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447200601.784:708813): pid=12369 uid=0 auid=0 ses=23508 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447200601.791:708814): pid=12369 uid=0 auid=0 ses=23508 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447200601.795:708815): pid=12368 uid=0 auid=0 ses=23509 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447200601.796:708816): pid=12369 uid=0 auid=0 ses=23508 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447200601.799:708817): pid=12368 uid=0 auid=0 ses=23509 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447200782.709:708818): pid=12934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12934 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447200782.709:708819): pid=12934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12934 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447200782.709:708820): pid=12934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12934 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447200782.753:708821): pid=12933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=12934 suid=74 rport=46694 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447200782.754:708822): pid=12933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=12934 suid=74 rport=46694 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447200782.883:708823): pid=12933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=46694 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447200782.883:708824): pid=12933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=46694 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447200782.892:708825): pid=12933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447200782.893:708826): pid=12933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12934 suid=74 rport=46694 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447200782.894:708827): pid=12933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447200782.894:708828): pid=12933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447200782.895:708829): pid=12933 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23510 res=1
type=USER_ROLE_CHANGE msg=audit(1447200782.969:708830): pid=12933 uid=0 auid=0 ses=23510 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447200782.990:708831): pid=12933 uid=0 auid=0 ses=23510 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447200782.992:708832): pid=12933 uid=0 auid=0 ses=23510 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447200782.992:708833): pid=12933 uid=0 auid=0 ses=23510 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447200782.994:708834): pid=12936 uid=0 auid=0 ses=23510 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12936 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447200782.994:708835): pid=12936 uid=0 auid=0 ses=23510 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12936 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447200782.994:708836): pid=12936 uid=0 auid=0 ses=23510 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12936 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447200782.995:708837): pid=12936 uid=0 auid=0 ses=23510 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447200783.012:708838): pid=12933 uid=0 auid=0 ses=23510 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447200783.013:708839): pid=12933 uid=0 auid=0 ses=23510 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447200783.016:708840): pid=12933 uid=0 auid=0 ses=23510 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447200783.016:708841): pid=12933 uid=0 auid=0 ses=23510 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447200783.017:708842): pid=12933 uid=0 auid=0 ses=23510 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12933 suid=0 rport=46694 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447200783.017:708843): pid=12933 uid=0 auid=0 ses=23510 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12933 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447200783.017:708844): pid=12933 uid=0 auid=0 ses=23510 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12933 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447200783.017:708845): pid=12933 uid=0 auid=0 ses=23510 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12933 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447200783.039:708846): pid=12944 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12944 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447200783.039:708847): pid=12944 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12944 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447200783.039:708848): pid=12944 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12944 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447200783.084:708849): pid=12943 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=12944 suid=74 rport=46696 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447200783.084:708850): pid=12943 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=12944 suid=74 rport=46696 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447200783.205:708851): pid=12943 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=46696 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447200783.205:708852): pid=12943 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=46696 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447200783.210:708853): pid=12943 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447200783.210:708854): pid=12943 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12944 suid=74 rport=46696 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447200783.212:708855): pid=12943 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447200783.212:708856): pid=12943 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447200783.212:708857): pid=12943 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23511 res=1
type=USER_ROLE_CHANGE msg=audit(1447200783.280:708858): pid=12943 uid=0 auid=0 ses=23511 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447200783.300:708859): pid=12943 uid=0 auid=0 ses=23511 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447200783.304:708860): pid=12943 uid=0 auid=0 ses=23511 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447200783.304:708861): pid=12943 uid=0 auid=0 ses=23511 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447200783.306:708862): pid=12946 uid=0 auid=0 ses=23511 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12946 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447200783.306:708863): pid=12946 uid=0 auid=0 ses=23511 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12946 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447200783.306:708864): pid=12946 uid=0 auid=0 ses=23511 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12946 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447200783.306:708865): pid=12946 uid=0 auid=0 ses=23511 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447200784.585:708866): pid=12943 uid=0 auid=0 ses=23511 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447200784.585:708867): pid=12943 uid=0 auid=0 ses=23511 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447200784.589:708868): pid=12943 uid=0 auid=0 ses=23511 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447200784.589:708869): pid=12943 uid=0 auid=0 ses=23511 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447200784.590:708870): pid=12943 uid=0 auid=0 ses=23511 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12943 suid=0 rport=46696 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447200784.590:708871): pid=12943 uid=0 auid=0 ses=23511 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12943 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447200784.590:708872): pid=12943 uid=0 auid=0 ses=23511 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12943 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447200784.590:708873): pid=12943 uid=0 auid=0 ses=23511 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12943 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447200784.625:708874): pid=13002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=13002 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447200784.625:708875): pid=13002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=13002 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447200784.625:708876): pid=13002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=13002 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447200784.670:708877): pid=13001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=13002 suid=74 rport=46699 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447200784.670:708878): pid=13001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=13002 suid=74 rport=46699 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447200784.799:708879): pid=13001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=46699 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447200784.799:708880): pid=13001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=46699 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447200784.808:708881): pid=13001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447200784.809:708882): pid=13001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13002 suid=74 rport=46699 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447200784.809:708883): pid=13001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447200784.810:708884): pid=13001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447200784.810:708885): pid=13001 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23512 res=1
type=USER_ROLE_CHANGE msg=audit(1447200784.879:708886): pid=13001 uid=0 auid=0 ses=23512 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447200784.900:708887): pid=13001 uid=0 auid=0 ses=23512 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447200784.903:708888): pid=13001 uid=0 auid=0 ses=23512 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447200784.903:708889): pid=13001 uid=0 auid=0 ses=23512 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447200784.904:708890): pid=13004 uid=0 auid=0 ses=23512 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=13004 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447200784.904:708891): pid=13004 uid=0 auid=0 ses=23512 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=13004 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447200784.904:708892): pid=13004 uid=0 auid=0 ses=23512 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=13004 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447200784.905:708893): pid=13004 uid=0 auid=0 ses=23512 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447200784.921:708894): pid=13001 uid=0 auid=0 ses=23512 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447200784.921:708895): pid=13001 uid=0 auid=0 ses=23512 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447200784.925:708896): pid=13001 uid=0 auid=0 ses=23512 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447200784.925:708897): pid=13001 uid=0 auid=0 ses=23512 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447200784.926:708898): pid=13001 uid=0 auid=0 ses=23512 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13001 suid=0 rport=46699 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447200784.926:708899): pid=13001 uid=0 auid=0 ses=23512 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=13001 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447200784.926:708900): pid=13001 uid=0 auid=0 ses=23512 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=13001 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447200784.926:708901): pid=13001 uid=0 auid=0 ses=23512 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=13001 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=SYSCALL msg=audit(1447201027.748:708902): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447201201.825:708903): pid=14403 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447201201.825:708904): pid=14403 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447201201.826:708905): pid=14403 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23513 res=1
type=USER_ACCT msg=audit(1447201201.828:708906): pid=14402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447201201.829:708907): pid=14402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447201201.829:708908): pid=14402 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23514 res=1
type=USER_START msg=audit(1447201201.843:708909): pid=14402 uid=0 auid=0 ses=23514 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447201201.843:708910): pid=14403 uid=0 auid=0 ses=23513 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447201201.843:708911): pid=14402 uid=0 auid=0 ses=23514 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447201201.843:708912): pid=14403 uid=0 auid=0 ses=23513 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447201201.852:708913): pid=14403 uid=0 auid=0 ses=23513 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447201201.854:708914): pid=14403 uid=0 auid=0 ses=23513 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447201201.862:708915): pid=14402 uid=0 auid=0 ses=23514 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447201201.863:708916): pid=14402 uid=0 auid=0 ses=23514 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447201801.877:708917): pid=16228 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447201801.877:708918): pid=16228 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447201801.878:708919): pid=16227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447201801.878:708920): pid=16227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447201801.878:708921): pid=16228 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23515 res=1
type=LOGIN msg=audit(1447201801.878:708922): pid=16227 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23516 res=1
type=USER_START msg=audit(1447201801.896:708923): pid=16227 uid=0 auid=0 ses=23516 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447201801.896:708924): pid=16227 uid=0 auid=0 ses=23516 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447201801.896:708925): pid=16228 uid=0 auid=0 ses=23515 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447201801.896:708926): pid=16228 uid=0 auid=0 ses=23515 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447201801.903:708927): pid=16228 uid=0 auid=0 ses=23515 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447201801.905:708928): pid=16228 uid=0 auid=0 ses=23515 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447201801.910:708929): pid=16227 uid=0 auid=0 ses=23516 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447201826.939:708930): pid=16227 uid=0 auid=0 ses=23516 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=CRYPTO_KEY_USER msg=audit(1447201982.737:708931): pid=16788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16788 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447201982.737:708932): pid=16788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16788 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447201982.737:708933): pid=16788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16788 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447201982.782:708934): pid=16787 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=16788 suid=74 rport=48675 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447201982.782:708935): pid=16787 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=16788 suid=74 rport=48675 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447201982.905:708936): pid=16787 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=48675 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447201982.905:708937): pid=16787 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=48675 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447201982.910:708938): pid=16787 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447201982.912:708939): pid=16787 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16788 suid=74 rport=48675 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447201982.914:708940): pid=16787 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447201982.914:708941): pid=16787 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447201982.914:708942): pid=16787 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23517 res=1
type=USER_ROLE_CHANGE msg=audit(1447201982.983:708943): pid=16787 uid=0 auid=0 ses=23517 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447201983.005:708944): pid=16787 uid=0 auid=0 ses=23517 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447201983.009:708945): pid=16787 uid=0 auid=0 ses=23517 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447201983.009:708946): pid=16787 uid=0 auid=0 ses=23517 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447201983.011:708947): pid=16790 uid=0 auid=0 ses=23517 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16790 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447201983.011:708948): pid=16790 uid=0 auid=0 ses=23517 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16790 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447201983.011:708949): pid=16790 uid=0 auid=0 ses=23517 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16790 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447201983.012:708950): pid=16790 uid=0 auid=0 ses=23517 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447201983.031:708951): pid=16787 uid=0 auid=0 ses=23517 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447201983.031:708952): pid=16787 uid=0 auid=0 ses=23517 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447201983.037:708953): pid=16787 uid=0 auid=0 ses=23517 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447201983.037:708954): pid=16787 uid=0 auid=0 ses=23517 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447201983.037:708955): pid=16787 uid=0 auid=0 ses=23517 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16787 suid=0 rport=48675 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447201983.037:708956): pid=16787 uid=0 auid=0 ses=23517 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16787 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447201983.037:708957): pid=16787 uid=0 auid=0 ses=23517 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16787 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447201983.037:708958): pid=16787 uid=0 auid=0 ses=23517 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16787 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447201983.057:708959): pid=16798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16798 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447201983.057:708960): pid=16798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16798 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447201983.057:708961): pid=16798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16798 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447201983.102:708962): pid=16797 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=16798 suid=74 rport=48676 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447201983.102:708963): pid=16797 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=16798 suid=74 rport=48676 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447201983.230:708964): pid=16797 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=48676 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447201983.230:708965): pid=16797 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=48676 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447201983.239:708966): pid=16797 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447201983.240:708967): pid=16797 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16798 suid=74 rport=48676 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447201983.245:708968): pid=16797 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447201983.245:708969): pid=16797 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447201983.245:708970): pid=16797 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23518 res=1
type=USER_ROLE_CHANGE msg=audit(1447201983.313:708971): pid=16797 uid=0 auid=0 ses=23518 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447201983.335:708972): pid=16797 uid=0 auid=0 ses=23518 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447201983.338:708973): pid=16797 uid=0 auid=0 ses=23518 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447201983.338:708974): pid=16797 uid=0 auid=0 ses=23518 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447201983.340:708975): pid=16800 uid=0 auid=0 ses=23518 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16800 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447201983.340:708976): pid=16800 uid=0 auid=0 ses=23518 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16800 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447201983.340:708977): pid=16800 uid=0 auid=0 ses=23518 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16800 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447201983.341:708978): pid=16800 uid=0 auid=0 ses=23518 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447201984.627:708979): pid=16797 uid=0 auid=0 ses=23518 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447201984.627:708980): pid=16797 uid=0 auid=0 ses=23518 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447201984.632:708981): pid=16797 uid=0 auid=0 ses=23518 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447201984.632:708982): pid=16797 uid=0 auid=0 ses=23518 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447201984.633:708983): pid=16797 uid=0 auid=0 ses=23518 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16797 suid=0 rport=48676 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447201984.633:708984): pid=16797 uid=0 auid=0 ses=23518 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16797 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447201984.633:708985): pid=16797 uid=0 auid=0 ses=23518 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16797 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447201984.633:708986): pid=16797 uid=0 auid=0 ses=23518 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16797 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447201984.662:708987): pid=16872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16872 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447201984.662:708988): pid=16872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16872 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447201984.662:708989): pid=16872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16872 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447201984.706:708990): pid=16871 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=16872 suid=74 rport=48680 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447201984.707:708991): pid=16871 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=16872 suid=74 rport=48680 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447201984.831:708992): pid=16871 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=48680 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447201984.831:708993): pid=16871 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=48680 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447201984.839:708994): pid=16871 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447201984.840:708995): pid=16871 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16872 suid=74 rport=48680 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447201984.841:708996): pid=16871 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447201984.841:708997): pid=16871 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447201984.841:708998): pid=16871 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23519 res=1
type=USER_ROLE_CHANGE msg=audit(1447201984.907:708999): pid=16871 uid=0 auid=0 ses=23519 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447201984.926:709000): pid=16871 uid=0 auid=0 ses=23519 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447201984.929:709001): pid=16871 uid=0 auid=0 ses=23519 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447201984.929:709002): pid=16871 uid=0 auid=0 ses=23519 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447201984.930:709003): pid=16879 uid=0 auid=0 ses=23519 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16879 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447201984.930:709004): pid=16879 uid=0 auid=0 ses=23519 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16879 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447201984.930:709005): pid=16879 uid=0 auid=0 ses=23519 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16879 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447201984.931:709006): pid=16879 uid=0 auid=0 ses=23519 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447201984.948:709007): pid=16871 uid=0 auid=0 ses=23519 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447201984.948:709008): pid=16871 uid=0 auid=0 ses=23519 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447201984.951:709009): pid=16871 uid=0 auid=0 ses=23519 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447201984.951:709010): pid=16871 uid=0 auid=0 ses=23519 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447201984.952:709011): pid=16871 uid=0 auid=0 ses=23519 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16871 suid=0 rport=48680 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447201984.952:709012): pid=16871 uid=0 auid=0 ses=23519 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16871 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447201984.952:709013): pid=16871 uid=0 auid=0 ses=23519 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16871 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447201984.952:709014): pid=16871 uid=0 auid=0 ses=23519 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16871 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=SYSCALL msg=audit(1447202097.706:709015): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447202401.961:709017): pid=18103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447202401.961:709016): pid=18104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447202401.962:709018): pid=18103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447202401.962:709019): pid=18104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447202401.963:709020): pid=18103 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23520 res=1
type=LOGIN msg=audit(1447202401.963:709021): pid=18104 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23521 res=1
type=USER_START msg=audit(1447202401.981:709022): pid=18103 uid=0 auid=0 ses=23520 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447202401.981:709023): pid=18104 uid=0 auid=0 ses=23521 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447202401.982:709024): pid=18103 uid=0 auid=0 ses=23520 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447202401.982:709025): pid=18104 uid=0 auid=0 ses=23521 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447202401.990:709026): pid=18104 uid=0 auid=0 ses=23521 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447202401.995:709027): pid=18104 uid=0 auid=0 ses=23521 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447202402.000:709028): pid=18103 uid=0 auid=0 ses=23520 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447202427.028:709029): pid=18103 uid=0 auid=0 ses=23520 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=USER_ACCT msg=audit(1447203001.042:709030): pid=19950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447203001.042:709031): pid=19950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447203001.042:709032): pid=19949 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447203001.042:709033): pid=19949 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447203001.042:709034): pid=19950 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23522 res=1
type=LOGIN msg=audit(1447203001.043:709035): pid=19949 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23523 res=1
type=USER_START msg=audit(1447203001.059:709036): pid=19949 uid=0 auid=0 ses=23523 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447203001.059:709037): pid=19950 uid=0 auid=0 ses=23522 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447203001.059:709038): pid=19949 uid=0 auid=0 ses=23523 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447203001.059:709039): pid=19950 uid=0 auid=0 ses=23522 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447203001.067:709040): pid=19950 uid=0 auid=0 ses=23522 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447203001.069:709041): pid=19950 uid=0 auid=0 ses=23522 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447203001.073:709042): pid=19949 uid=0 auid=0 ses=23523 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447203001.075:709043): pid=19949 uid=0 auid=0 ses=23523 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447203182.814:709044): pid=20510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=20510 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447203182.815:709045): pid=20510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=20510 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447203182.815:709046): pid=20510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=20510 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447203182.859:709047): pid=20509 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=20510 suid=74 rport=50656 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447203182.859:709048): pid=20509 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=20510 suid=74 rport=50656 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447203182.990:709049): pid=20509 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=50656 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447203182.990:709050): pid=20509 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=50656 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447203182.997:709051): pid=20509 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447203182.998:709052): pid=20509 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20510 suid=74 rport=50656 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447203182.999:709053): pid=20509 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447203183.000:709054): pid=20509 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447203183.000:709055): pid=20509 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23524 res=1
type=USER_ROLE_CHANGE msg=audit(1447203183.071:709056): pid=20509 uid=0 auid=0 ses=23524 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447203183.094:709057): pid=20509 uid=0 auid=0 ses=23524 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447203183.096:709058): pid=20509 uid=0 auid=0 ses=23524 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447203183.097:709059): pid=20509 uid=0 auid=0 ses=23524 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447203183.098:709060): pid=20512 uid=0 auid=0 ses=23524 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=20512 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447203183.098:709061): pid=20512 uid=0 auid=0 ses=23524 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=20512 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447203183.099:709062): pid=20512 uid=0 auid=0 ses=23524 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=20512 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447203183.100:709063): pid=20512 uid=0 auid=0 ses=23524 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447203183.118:709064): pid=20509 uid=0 auid=0 ses=23524 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447203183.118:709065): pid=20509 uid=0 auid=0 ses=23524 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447203183.122:709066): pid=20509 uid=0 auid=0 ses=23524 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447203183.122:709067): pid=20509 uid=0 auid=0 ses=23524 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447203183.123:709068): pid=20509 uid=0 auid=0 ses=23524 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20509 suid=0 rport=50656 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447203183.123:709069): pid=20509 uid=0 auid=0 ses=23524 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=20509 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447203183.123:709070): pid=20509 uid=0 auid=0 ses=23524 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=20509 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447203183.123:709071): pid=20509 uid=0 auid=0 ses=23524 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=20509 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447203183.144:709072): pid=20520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=20520 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447203183.144:709073): pid=20520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=20520 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447203183.144:709074): pid=20520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=20520 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447203183.189:709075): pid=20519 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=20520 suid=74 rport=50657 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447203183.189:709076): pid=20519 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=20520 suid=74 rport=50657 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447203183.316:709077): pid=20519 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=50657 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447203183.316:709078): pid=20519 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=50657 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447203183.324:709079): pid=20519 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447203183.326:709080): pid=20519 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20520 suid=74 rport=50657 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447203183.328:709081): pid=20519 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447203183.328:709082): pid=20519 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447203183.329:709083): pid=20519 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23525 res=1
type=USER_ROLE_CHANGE msg=audit(1447203183.391:709084): pid=20519 uid=0 auid=0 ses=23525 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447203183.414:709085): pid=20519 uid=0 auid=0 ses=23525 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447203183.416:709086): pid=20519 uid=0 auid=0 ses=23525 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447203183.417:709087): pid=20519 uid=0 auid=0 ses=23525 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447203183.418:709088): pid=20522 uid=0 auid=0 ses=23525 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=20522 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447203183.418:709089): pid=20522 uid=0 auid=0 ses=23525 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=20522 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447203183.419:709090): pid=20522 uid=0 auid=0 ses=23525 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=20522 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447203183.420:709091): pid=20522 uid=0 auid=0 ses=23525 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447203184.696:709092): pid=20519 uid=0 auid=0 ses=23525 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447203184.696:709093): pid=20519 uid=0 auid=0 ses=23525 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447203184.701:709094): pid=20519 uid=0 auid=0 ses=23525 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447203184.701:709095): pid=20519 uid=0 auid=0 ses=23525 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447203184.701:709096): pid=20519 uid=0 auid=0 ses=23525 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20519 suid=0 rport=50657 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447203184.701:709097): pid=20519 uid=0 auid=0 ses=23525 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=20519 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447203184.701:709098): pid=20519 uid=0 auid=0 ses=23525 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=20519 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447203184.701:709099): pid=20519 uid=0 auid=0 ses=23525 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=20519 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447203184.736:709100): pid=20572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=20572 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447203184.736:709101): pid=20572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=20572 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447203184.736:709102): pid=20572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=20572 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447203184.781:709103): pid=20571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=20572 suid=74 rport=50661 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447203184.781:709104): pid=20571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=20572 suid=74 rport=50661 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447203184.905:709105): pid=20571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=50661 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447203184.905:709106): pid=20571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=50661 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447203184.912:709107): pid=20571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447203184.913:709108): pid=20571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20572 suid=74 rport=50661 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447203184.914:709109): pid=20571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447203184.914:709110): pid=20571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447203184.914:709111): pid=20571 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23526 res=1
type=USER_ROLE_CHANGE msg=audit(1447203184.995:709112): pid=20571 uid=0 auid=0 ses=23526 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447203185.019:709113): pid=20571 uid=0 auid=0 ses=23526 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447203185.022:709114): pid=20571 uid=0 auid=0 ses=23526 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447203185.022:709115): pid=20571 uid=0 auid=0 ses=23526 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447203185.024:709116): pid=20574 uid=0 auid=0 ses=23526 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=20574 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447203185.024:709117): pid=20574 uid=0 auid=0 ses=23526 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=20574 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447203185.024:709118): pid=20574 uid=0 auid=0 ses=23526 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=20574 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447203185.025:709119): pid=20574 uid=0 auid=0 ses=23526 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447203185.044:709120): pid=20571 uid=0 auid=0 ses=23526 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447203185.044:709121): pid=20571 uid=0 auid=0 ses=23526 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447203185.048:709122): pid=20571 uid=0 auid=0 ses=23526 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447203185.048:709123): pid=20571 uid=0 auid=0 ses=23526 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447203185.049:709124): pid=20571 uid=0 auid=0 ses=23526 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20571 suid=0 rport=50661 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447203185.049:709125): pid=20571 uid=0 auid=0 ses=23526 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=20571 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447203185.049:709126): pid=20571 uid=0 auid=0 ses=23526 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=20571 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447203185.049:709127): pid=20571 uid=0 auid=0 ses=23526 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=20571 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447203601.097:709128): pid=21865 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447203601.097:709129): pid=21866 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447203601.097:709130): pid=21865 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447203601.097:709131): pid=21866 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447203601.098:709132): pid=21866 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23527 res=1
type=LOGIN msg=audit(1447203601.098:709133): pid=21865 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23528 res=1
type=USER_START msg=audit(1447203601.119:709134): pid=21865 uid=0 auid=0 ses=23528 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447203601.120:709135): pid=21865 uid=0 auid=0 ses=23528 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447203601.120:709136): pid=21866 uid=0 auid=0 ses=23527 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447203601.120:709137): pid=21866 uid=0 auid=0 ses=23527 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447203601.130:709138): pid=21866 uid=0 auid=0 ses=23527 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447203601.133:709139): pid=21866 uid=0 auid=0 ses=23527 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447203601.138:709140): pid=21865 uid=0 auid=0 ses=23528 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447203601.141:709141): pid=21865 uid=0 auid=0 ses=23528 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447203661.148:709142): pid=22103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447203661.148:709143): pid=22103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447203661.148:709144): pid=22103 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23529 res=1
type=USER_START msg=audit(1447203661.161:709145): pid=22103 uid=0 auid=0 ses=23529 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447203661.162:709146): pid=22103 uid=0 auid=0 ses=23529 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447203661.190:709147): pid=22103 uid=0 auid=0 ses=23529 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447203661.191:709148): pid=22103 uid=0 auid=0 ses=23529 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447204201.202:709149): pid=23773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447204201.202:709150): pid=23773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447204201.203:709151): pid=23773 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23530 res=1
type=USER_ACCT msg=audit(1447204201.203:709152): pid=23774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447204201.203:709153): pid=23774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447204201.203:709154): pid=23774 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23531 res=1
type=USER_START msg=audit(1447204201.217:709155): pid=23773 uid=0 auid=0 ses=23530 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447204201.217:709156): pid=23774 uid=0 auid=0 ses=23531 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447204201.218:709157): pid=23773 uid=0 auid=0 ses=23530 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447204201.218:709158): pid=23774 uid=0 auid=0 ses=23531 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447204201.223:709159): pid=23774 uid=0 auid=0 ses=23531 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447204201.224:709160): pid=23774 uid=0 auid=0 ses=23531 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447204201.232:709161): pid=23773 uid=0 auid=0 ses=23530 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447204201.233:709162): pid=23773 uid=0 auid=0 ses=23530 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1447204263.759:709163): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=CRYPTO_KEY_USER msg=audit(1447204382.688:709164): pid=24338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=24338 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447204382.688:709165): pid=24338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=24338 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447204382.688:709166): pid=24338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=24338 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447204382.732:709167): pid=24337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=24338 suid=74 rport=52636 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447204382.733:709168): pid=24337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=24338 suid=74 rport=52636 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447204382.861:709169): pid=24337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52636 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447204382.861:709170): pid=24337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=52636 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447204382.870:709171): pid=24337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447204382.871:709172): pid=24337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24338 suid=74 rport=52636 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447204382.872:709173): pid=24337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447204382.872:709174): pid=24337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447204382.872:709175): pid=24337 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23532 res=1
type=USER_ROLE_CHANGE msg=audit(1447204382.944:709176): pid=24337 uid=0 auid=0 ses=23532 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447204382.966:709177): pid=24337 uid=0 auid=0 ses=23532 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447204382.968:709178): pid=24337 uid=0 auid=0 ses=23532 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447204382.968:709179): pid=24337 uid=0 auid=0 ses=23532 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447204382.970:709180): pid=24340 uid=0 auid=0 ses=23532 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=24340 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447204382.970:709181): pid=24340 uid=0 auid=0 ses=23532 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=24340 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447204382.970:709182): pid=24340 uid=0 auid=0 ses=23532 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=24340 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447204382.971:709183): pid=24340 uid=0 auid=0 ses=23532 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447204382.989:709184): pid=24337 uid=0 auid=0 ses=23532 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447204382.989:709185): pid=24337 uid=0 auid=0 ses=23532 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447204382.995:709186): pid=24337 uid=0 auid=0 ses=23532 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447204382.995:709187): pid=24337 uid=0 auid=0 ses=23532 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447204382.995:709188): pid=24337 uid=0 auid=0 ses=23532 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24337 suid=0 rport=52636 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447204382.995:709189): pid=24337 uid=0 auid=0 ses=23532 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=24337 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447204382.995:709190): pid=24337 uid=0 auid=0 ses=23532 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=24337 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447204382.995:709191): pid=24337 uid=0 auid=0 ses=23532 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=24337 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447204383.015:709192): pid=24348 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=24348 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447204383.015:709193): pid=24348 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=24348 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447204383.015:709194): pid=24348 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=24348 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447204383.060:709195): pid=24347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=24348 suid=74 rport=52637 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447204383.060:709196): pid=24347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=24348 suid=74 rport=52637 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447204383.190:709197): pid=24347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52637 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447204383.190:709198): pid=24347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=52637 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447204383.197:709199): pid=24347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447204383.199:709200): pid=24347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24348 suid=74 rport=52637 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447204383.201:709201): pid=24347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447204383.202:709202): pid=24347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447204383.202:709203): pid=24347 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23533 res=1
type=USER_ROLE_CHANGE msg=audit(1447204383.265:709204): pid=24347 uid=0 auid=0 ses=23533 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447204383.289:709205): pid=24347 uid=0 auid=0 ses=23533 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447204383.292:709206): pid=24347 uid=0 auid=0 ses=23533 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447204383.292:709207): pid=24347 uid=0 auid=0 ses=23533 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447204383.294:709208): pid=24350 uid=0 auid=0 ses=23533 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=24350 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447204383.294:709209): pid=24350 uid=0 auid=0 ses=23533 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=24350 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447204383.294:709210): pid=24350 uid=0 auid=0 ses=23533 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=24350 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447204383.295:709211): pid=24350 uid=0 auid=0 ses=23533 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447204384.580:709212): pid=24347 uid=0 auid=0 ses=23533 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447204384.580:709213): pid=24347 uid=0 auid=0 ses=23533 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447204384.588:709214): pid=24347 uid=0 auid=0 ses=23533 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447204384.589:709215): pid=24347 uid=0 auid=0 ses=23533 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447204384.590:709216): pid=24347 uid=0 auid=0 ses=23533 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24347 suid=0 rport=52637 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447204384.590:709217): pid=24347 uid=0 auid=0 ses=23533 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=24347 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447204384.590:709218): pid=24347 uid=0 auid=0 ses=23533 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=24347 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447204384.590:709219): pid=24347 uid=0 auid=0 ses=23533 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=24347 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447204384.621:709220): pid=24400 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=24400 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447204384.621:709221): pid=24400 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=24400 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447204384.622:709222): pid=24400 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=24400 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447204384.666:709223): pid=24399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=24400 suid=74 rport=52642 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447204384.666:709224): pid=24399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=24400 suid=74 rport=52642 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447204384.796:709225): pid=24399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52642 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447204384.796:709226): pid=24399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=52642 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447204384.805:709227): pid=24399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447204384.806:709228): pid=24399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24400 suid=74 rport=52642 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447204384.808:709229): pid=24399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447204384.808:709230): pid=24399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447204384.809:709231): pid=24399 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23534 res=1
type=USER_ROLE_CHANGE msg=audit(1447204384.876:709232): pid=24399 uid=0 auid=0 ses=23534 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447204384.900:709233): pid=24399 uid=0 auid=0 ses=23534 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447204384.903:709234): pid=24399 uid=0 auid=0 ses=23534 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447204384.903:709235): pid=24399 uid=0 auid=0 ses=23534 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447204384.905:709236): pid=24402 uid=0 auid=0 ses=23534 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=24402 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447204384.905:709237): pid=24402 uid=0 auid=0 ses=23534 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=24402 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447204384.905:709238): pid=24402 uid=0 auid=0 ses=23534 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=24402 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447204384.906:709239): pid=24402 uid=0 auid=0 ses=23534 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447204384.924:709240): pid=24399 uid=0 auid=0 ses=23534 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447204384.924:709241): pid=24399 uid=0 auid=0 ses=23534 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447204384.928:709242): pid=24399 uid=0 auid=0 ses=23534 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447204384.928:709243): pid=24399 uid=0 auid=0 ses=23534 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447204384.928:709244): pid=24399 uid=0 auid=0 ses=23534 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24399 suid=0 rport=52642 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447204384.929:709245): pid=24399 uid=0 auid=0 ses=23534 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=24399 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447204384.929:709246): pid=24399 uid=0 auid=0 ses=23534 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=24399 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447204384.929:709247): pid=24399 uid=0 auid=0 ses=23534 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=24399 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447204801.252:709248): pid=25697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447204801.252:709249): pid=25697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447204801.253:709250): pid=25697 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23535 res=1
type=USER_ACCT msg=audit(1447204801.256:709251): pid=25698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447204801.256:709252): pid=25698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447204801.256:709253): pid=25698 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23536 res=1
type=USER_START msg=audit(1447204801.271:709254): pid=25697 uid=0 auid=0 ses=23535 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447204801.271:709255): pid=25698 uid=0 auid=0 ses=23536 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447204801.271:709256): pid=25697 uid=0 auid=0 ses=23535 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447204801.271:709257): pid=25698 uid=0 auid=0 ses=23536 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447204801.280:709258): pid=25698 uid=0 auid=0 ses=23536 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447204801.282:709259): pid=25698 uid=0 auid=0 ses=23536 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447204801.287:709260): pid=25697 uid=0 auid=0 ses=23535 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447204801.289:709261): pid=25697 uid=0 auid=0 ses=23535 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447205401.303:709262): pid=27541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447205401.303:709263): pid=27542 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447205401.304:709264): pid=27541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447205401.304:709265): pid=27542 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447205401.304:709266): pid=27542 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23537 res=1
type=LOGIN msg=audit(1447205401.304:709267): pid=27541 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23538 res=1
type=USER_START msg=audit(1447205401.319:709268): pid=27541 uid=0 auid=0 ses=23538 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447205401.319:709269): pid=27541 uid=0 auid=0 ses=23538 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447205401.320:709270): pid=27542 uid=0 auid=0 ses=23537 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447205401.321:709271): pid=27542 uid=0 auid=0 ses=23537 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447205401.329:709272): pid=27542 uid=0 auid=0 ses=23537 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447205401.330:709273): pid=27542 uid=0 auid=0 ses=23537 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447205401.331:709274): pid=27541 uid=0 auid=0 ses=23538 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447205401.336:709275): pid=27541 uid=0 auid=0 ses=23538 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447205583.163:709276): pid=28103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=28103 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447205583.163:709277): pid=28103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=28103 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447205583.163:709278): pid=28103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=28103 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447205583.209:709279): pid=28102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=28103 suid=74 rport=54617 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447205583.209:709280): pid=28102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=28103 suid=74 rport=54617 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447205583.336:709281): pid=28102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=54617 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447205583.336:709282): pid=28102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=54617 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447205583.345:709283): pid=28102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447205583.346:709284): pid=28102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=28103 suid=74 rport=54617 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447205583.347:709285): pid=28102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447205583.347:709286): pid=28102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447205583.348:709287): pid=28102 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23539 res=1
type=USER_ROLE_CHANGE msg=audit(1447205583.419:709288): pid=28102 uid=0 auid=0 ses=23539 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447205583.442:709289): pid=28102 uid=0 auid=0 ses=23539 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447205583.446:709290): pid=28102 uid=0 auid=0 ses=23539 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447205583.447:709291): pid=28102 uid=0 auid=0 ses=23539 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447205583.448:709292): pid=28105 uid=0 auid=0 ses=23539 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=28105 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447205583.448:709293): pid=28105 uid=0 auid=0 ses=23539 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=28105 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447205583.448:709294): pid=28105 uid=0 auid=0 ses=23539 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=28105 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447205583.449:709295): pid=28105 uid=0 auid=0 ses=23539 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447205583.468:709296): pid=28102 uid=0 auid=0 ses=23539 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447205583.469:709297): pid=28102 uid=0 auid=0 ses=23539 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447205583.473:709298): pid=28102 uid=0 auid=0 ses=23539 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447205583.473:709299): pid=28102 uid=0 auid=0 ses=23539 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447205583.473:709300): pid=28102 uid=0 auid=0 ses=23539 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=28102 suid=0 rport=54617 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447205583.473:709301): pid=28102 uid=0 auid=0 ses=23539 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=28102 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447205583.473:709302): pid=28102 uid=0 auid=0 ses=23539 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=28102 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447205583.473:709303): pid=28102 uid=0 auid=0 ses=23539 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=28102 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447205583.497:709304): pid=28113 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=28113 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447205583.497:709305): pid=28113 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=28113 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447205583.497:709306): pid=28113 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=28113 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447205583.541:709307): pid=28112 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=28113 suid=74 rport=54618 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447205583.542:709308): pid=28112 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=28113 suid=74 rport=54618 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447205583.670:709309): pid=28112 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=54618 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447205583.671:709310): pid=28112 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=54618 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447205583.680:709311): pid=28112 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447205583.681:709312): pid=28112 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=28113 suid=74 rport=54618 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447205583.682:709313): pid=28112 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447205583.682:709314): pid=28112 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447205583.682:709315): pid=28112 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23540 res=1
type=USER_ROLE_CHANGE msg=audit(1447205583.745:709316): pid=28112 uid=0 auid=0 ses=23540 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447205583.769:709317): pid=28112 uid=0 auid=0 ses=23540 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447205583.771:709318): pid=28112 uid=0 auid=0 ses=23540 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447205583.771:709319): pid=28112 uid=0 auid=0 ses=23540 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447205583.773:709320): pid=28115 uid=0 auid=0 ses=23540 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=28115 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447205583.773:709321): pid=28115 uid=0 auid=0 ses=23540 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=28115 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447205583.773:709322): pid=28115 uid=0 auid=0 ses=23540 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=28115 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447205583.774:709323): pid=28115 uid=0 auid=0 ses=23540 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447205585.063:709324): pid=28112 uid=0 auid=0 ses=23540 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447205585.063:709325): pid=28112 uid=0 auid=0 ses=23540 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447205585.067:709326): pid=28112 uid=0 auid=0 ses=23540 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447205585.067:709327): pid=28112 uid=0 auid=0 ses=23540 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447205585.068:709328): pid=28112 uid=0 auid=0 ses=23540 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=28112 suid=0 rport=54618 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447205585.068:709329): pid=28112 uid=0 auid=0 ses=23540 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=28112 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447205585.068:709330): pid=28112 uid=0 auid=0 ses=23540 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=28112 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447205585.068:709331): pid=28112 uid=0 auid=0 ses=23540 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=28112 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447205585.104:709332): pid=28165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=28165 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447205585.105:709333): pid=28165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=28165 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447205585.105:709334): pid=28165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=28165 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447205585.149:709335): pid=28164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=28165 suid=74 rport=54622 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447205585.149:709336): pid=28164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=28165 suid=74 rport=54622 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447205585.279:709337): pid=28164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=54622 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447205585.279:709338): pid=28164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=54622 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447205585.285:709339): pid=28164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447205585.286:709340): pid=28164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=28165 suid=74 rport=54622 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447205585.288:709341): pid=28164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447205585.288:709342): pid=28164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447205585.288:709343): pid=28164 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23541 res=1
type=USER_ROLE_CHANGE msg=audit(1447205585.353:709344): pid=28164 uid=0 auid=0 ses=23541 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447205585.376:709345): pid=28164 uid=0 auid=0 ses=23541 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447205585.380:709346): pid=28164 uid=0 auid=0 ses=23541 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447205585.380:709347): pid=28164 uid=0 auid=0 ses=23541 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447205585.382:709348): pid=28167 uid=0 auid=0 ses=23541 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=28167 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447205585.382:709349): pid=28167 uid=0 auid=0 ses=23541 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=28167 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447205585.382:709350): pid=28167 uid=0 auid=0 ses=23541 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=28167 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447205585.383:709351): pid=28167 uid=0 auid=0 ses=23541 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447205585.401:709352): pid=28164 uid=0 auid=0 ses=23541 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447205585.401:709353): pid=28164 uid=0 auid=0 ses=23541 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447205585.404:709354): pid=28164 uid=0 auid=0 ses=23541 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447205585.404:709355): pid=28164 uid=0 auid=0 ses=23541 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447205585.404:709356): pid=28164 uid=0 auid=0 ses=23541 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=28164 suid=0 rport=54622 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447205585.404:709357): pid=28164 uid=0 auid=0 ses=23541 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=28164 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447205585.405:709358): pid=28164 uid=0 auid=0 ses=23541 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=28164 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447205585.405:709359): pid=28164 uid=0 auid=0 ses=23541 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=28164 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447206001.355:709361): pid=29458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447206001.355:709360): pid=29457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447206001.355:709362): pid=29458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447206001.355:709363): pid=29457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447206001.356:709364): pid=29458 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23542 res=1
type=LOGIN msg=audit(1447206001.356:709365): pid=29457 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23543 res=1
type=USER_START msg=audit(1447206001.378:709366): pid=29458 uid=0 auid=0 ses=23542 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447206001.378:709367): pid=29457 uid=0 auid=0 ses=23543 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447206001.378:709368): pid=29458 uid=0 auid=0 ses=23542 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447206001.378:709369): pid=29457 uid=0 auid=0 ses=23543 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447206001.388:709370): pid=29458 uid=0 auid=0 ses=23542 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447206001.393:709371): pid=29457 uid=0 auid=0 ses=23543 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447206001.394:709372): pid=29458 uid=0 auid=0 ses=23542 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447206001.398:709373): pid=29457 uid=0 auid=0 ses=23543 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1447206381.759:709374): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447206601.412:709375): pid=31305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447206601.412:709376): pid=31304 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447206601.412:709377): pid=31305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447206601.412:709378): pid=31304 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447206601.412:709379): pid=31305 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23544 res=1
type=LOGIN msg=audit(1447206601.412:709380): pid=31304 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23545 res=1
type=USER_START msg=audit(1447206601.428:709381): pid=31305 uid=0 auid=0 ses=23544 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447206601.428:709382): pid=31304 uid=0 auid=0 ses=23545 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447206601.429:709383): pid=31304 uid=0 auid=0 ses=23545 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447206601.429:709384): pid=31305 uid=0 auid=0 ses=23544 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447206601.436:709385): pid=31305 uid=0 auid=0 ses=23544 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447206601.440:709386): pid=31305 uid=0 auid=0 ses=23544 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447206601.441:709387): pid=31304 uid=0 auid=0 ses=23545 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447206626.469:709388): pid=31304 uid=0 auid=0 ses=23545 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=CRYPTO_KEY_USER msg=audit(1447206782.442:709389): pid=31865 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=31865 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447206782.442:709390): pid=31865 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=31865 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447206782.442:709391): pid=31865 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=31865 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447206782.485:709392): pid=31864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=31865 suid=74 rport=56597 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447206782.485:709393): pid=31864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=31865 suid=74 rport=56597 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447206782.613:709394): pid=31864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=56597 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447206782.613:709395): pid=31864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=56597 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447206782.618:709396): pid=31864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447206782.619:709397): pid=31864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=31865 suid=74 rport=56597 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447206782.620:709398): pid=31864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447206782.621:709399): pid=31864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447206782.621:709400): pid=31864 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23546 res=1
type=USER_ROLE_CHANGE msg=audit(1447206782.690:709401): pid=31864 uid=0 auid=0 ses=23546 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447206782.708:709402): pid=31864 uid=0 auid=0 ses=23546 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447206782.710:709403): pid=31864 uid=0 auid=0 ses=23546 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447206782.710:709404): pid=31864 uid=0 auid=0 ses=23546 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447206782.712:709405): pid=31867 uid=0 auid=0 ses=23546 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=31867 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447206782.712:709406): pid=31867 uid=0 auid=0 ses=23546 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=31867 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447206782.712:709407): pid=31867 uid=0 auid=0 ses=23546 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=31867 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447206782.714:709408): pid=31867 uid=0 auid=0 ses=23546 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447206782.733:709409): pid=31864 uid=0 auid=0 ses=23546 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447206782.733:709410): pid=31864 uid=0 auid=0 ses=23546 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447206782.739:709411): pid=31864 uid=0 auid=0 ses=23546 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447206782.739:709412): pid=31864 uid=0 auid=0 ses=23546 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447206782.740:709413): pid=31864 uid=0 auid=0 ses=23546 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=31864 suid=0 rport=56597 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447206782.740:709414): pid=31864 uid=0 auid=0 ses=23546 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=31864 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447206782.740:709415): pid=31864 uid=0 auid=0 ses=23546 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=31864 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447206782.740:709416): pid=31864 uid=0 auid=0 ses=23546 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=31864 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447206782.759:709417): pid=31875 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=31875 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447206782.759:709418): pid=31875 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=31875 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447206782.759:709419): pid=31875 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=31875 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447206782.803:709420): pid=31874 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=31875 suid=74 rport=56598 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447206782.804:709421): pid=31874 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=31875 suid=74 rport=56598 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447206782.933:709422): pid=31874 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=56598 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447206782.933:709423): pid=31874 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=56598 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447206782.942:709424): pid=31874 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447206782.943:709425): pid=31874 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=31875 suid=74 rport=56598 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447206782.944:709426): pid=31874 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447206782.945:709427): pid=31874 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447206782.945:709428): pid=31874 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23547 res=1
type=USER_ROLE_CHANGE msg=audit(1447206783.009:709429): pid=31874 uid=0 auid=0 ses=23547 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447206783.030:709430): pid=31874 uid=0 auid=0 ses=23547 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447206783.032:709431): pid=31874 uid=0 auid=0 ses=23547 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447206783.032:709432): pid=31874 uid=0 auid=0 ses=23547 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447206783.034:709433): pid=31877 uid=0 auid=0 ses=23547 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=31877 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447206783.034:709434): pid=31877 uid=0 auid=0 ses=23547 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=31877 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447206783.034:709435): pid=31877 uid=0 auid=0 ses=23547 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=31877 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447206783.035:709436): pid=31877 uid=0 auid=0 ses=23547 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447206784.298:709437): pid=31874 uid=0 auid=0 ses=23547 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447206784.299:709438): pid=31874 uid=0 auid=0 ses=23547 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447206784.306:709439): pid=31874 uid=0 auid=0 ses=23547 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447206784.306:709440): pid=31874 uid=0 auid=0 ses=23547 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447206784.307:709441): pid=31874 uid=0 auid=0 ses=23547 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=31874 suid=0 rport=56598 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447206784.307:709442): pid=31874 uid=0 auid=0 ses=23547 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=31874 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447206784.307:709443): pid=31874 uid=0 auid=0 ses=23547 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=31874 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447206784.307:709444): pid=31874 uid=0 auid=0 ses=23547 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=31874 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447206784.332:709445): pid=31927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=31927 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447206784.333:709446): pid=31927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=31927 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447206784.333:709447): pid=31927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=31927 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447206784.378:709448): pid=31926 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=31927 suid=74 rport=56600 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447206784.378:709449): pid=31926 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=31927 suid=74 rport=56600 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447206784.508:709450): pid=31926 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=56600 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447206784.508:709451): pid=31926 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=56600 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447206784.518:709452): pid=31926 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447206784.520:709453): pid=31926 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=31927 suid=74 rport=56600 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447206784.522:709454): pid=31926 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447206784.522:709455): pid=31926 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447206784.522:709456): pid=31926 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23548 res=1
type=USER_ROLE_CHANGE msg=audit(1447206784.587:709457): pid=31926 uid=0 auid=0 ses=23548 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447206784.604:709458): pid=31926 uid=0 auid=0 ses=23548 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447206784.607:709459): pid=31926 uid=0 auid=0 ses=23548 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447206784.607:709460): pid=31926 uid=0 auid=0 ses=23548 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447206784.608:709461): pid=31929 uid=0 auid=0 ses=23548 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=31929 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447206784.608:709462): pid=31929 uid=0 auid=0 ses=23548 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=31929 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447206784.609:709463): pid=31929 uid=0 auid=0 ses=23548 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=31929 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447206784.609:709464): pid=31929 uid=0 auid=0 ses=23548 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447206784.625:709465): pid=31926 uid=0 auid=0 ses=23548 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447206784.625:709466): pid=31926 uid=0 auid=0 ses=23548 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447206784.629:709467): pid=31926 uid=0 auid=0 ses=23548 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447206784.629:709468): pid=31926 uid=0 auid=0 ses=23548 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447206784.630:709469): pid=31926 uid=0 auid=0 ses=23548 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=31926 suid=0 rport=56600 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447206784.630:709470): pid=31926 uid=0 auid=0 ses=23548 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=31926 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447206784.630:709471): pid=31926 uid=0 auid=0 ses=23548 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=31926 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447206784.630:709472): pid=31926 uid=0 auid=0 ses=23548 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=31926 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447207201.489:709473): pid=868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447207201.489:709474): pid=869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447207201.489:709475): pid=868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447207201.489:709476): pid=869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447207201.490:709477): pid=869 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23549 res=1
type=LOGIN msg=audit(1447207201.490:709478): pid=868 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23550 res=1
type=USER_START msg=audit(1447207201.509:709479): pid=869 uid=0 auid=0 ses=23549 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447207201.509:709480): pid=868 uid=0 auid=0 ses=23550 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447207201.510:709481): pid=869 uid=0 auid=0 ses=23549 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447207201.510:709482): pid=868 uid=0 auid=0 ses=23550 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447207201.518:709483): pid=869 uid=0 auid=0 ses=23549 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447207201.520:709484): pid=869 uid=0 auid=0 ses=23549 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447207201.529:709485): pid=868 uid=0 auid=0 ses=23550 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447207201.531:709486): pid=868 uid=0 auid=0 ses=23550 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447207261.551:709487): pid=1080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447207261.551:709488): pid=1080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447207261.551:709489): pid=1080 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23551 res=1
type=USER_START msg=audit(1447207261.563:709490): pid=1080 uid=0 auid=0 ses=23551 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447207261.563:709491): pid=1080 uid=0 auid=0 ses=23551 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447207261.594:709492): pid=1080 uid=0 auid=0 ses=23551 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447207261.595:709493): pid=1080 uid=0 auid=0 ses=23551 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1447207432.667:709494): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447207801.609:709495): pid=2784 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447207801.609:709496): pid=2785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447207801.609:709497): pid=2784 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447207801.609:709498): pid=2785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447207801.609:709499): pid=2785 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23552 res=1
type=LOGIN msg=audit(1447207801.609:709500): pid=2784 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23553 res=1
type=USER_START msg=audit(1447207801.625:709501): pid=2784 uid=0 auid=0 ses=23553 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447207801.625:709502): pid=2785 uid=0 auid=0 ses=23552 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447207801.625:709503): pid=2785 uid=0 auid=0 ses=23552 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447207801.625:709504): pid=2784 uid=0 auid=0 ses=23553 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447207801.636:709505): pid=2784 uid=0 auid=0 ses=23553 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447207801.636:709506): pid=2785 uid=0 auid=0 ses=23552 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447207801.638:709507): pid=2785 uid=0 auid=0 ses=23552 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447207801.638:709508): pid=2784 uid=0 auid=0 ses=23553 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447207982.840:709509): pid=3345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=3345 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447207982.841:709510): pid=3345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=3345 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447207982.841:709511): pid=3345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=3345 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447207982.885:709512): pid=3344 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=3345 suid=74 rport=58578 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447207982.885:709513): pid=3344 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=3345 suid=74 rport=58578 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447207983.012:709514): pid=3344 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=58578 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447207983.012:709515): pid=3344 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=58578 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447207983.022:709516): pid=3344 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447207983.024:709517): pid=3344 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3345 suid=74 rport=58578 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447207983.026:709518): pid=3344 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447207983.026:709519): pid=3344 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447207983.026:709520): pid=3344 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23554 res=1
type=USER_ROLE_CHANGE msg=audit(1447207983.097:709521): pid=3344 uid=0 auid=0 ses=23554 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447207983.125:709522): pid=3344 uid=0 auid=0 ses=23554 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447207983.127:709523): pid=3344 uid=0 auid=0 ses=23554 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447207983.127:709524): pid=3344 uid=0 auid=0 ses=23554 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447207983.129:709525): pid=3347 uid=0 auid=0 ses=23554 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=3347 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447207983.129:709526): pid=3347 uid=0 auid=0 ses=23554 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=3347 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447207983.129:709527): pid=3347 uid=0 auid=0 ses=23554 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=3347 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447207983.130:709528): pid=3347 uid=0 auid=0 ses=23554 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447207983.150:709529): pid=3344 uid=0 auid=0 ses=23554 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447207983.150:709530): pid=3344 uid=0 auid=0 ses=23554 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447207983.156:709531): pid=3344 uid=0 auid=0 ses=23554 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447207983.156:709532): pid=3344 uid=0 auid=0 ses=23554 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447207983.157:709533): pid=3344 uid=0 auid=0 ses=23554 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3344 suid=0 rport=58578 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447207983.157:709534): pid=3344 uid=0 auid=0 ses=23554 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=3344 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447207983.157:709535): pid=3344 uid=0 auid=0 ses=23554 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=3344 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447207983.157:709536): pid=3344 uid=0 auid=0 ses=23554 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=3344 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447207983.176:709537): pid=3355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=3355 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447207983.176:709538): pid=3355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=3355 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447207983.176:709539): pid=3355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=3355 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447207983.221:709540): pid=3354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=3355 suid=74 rport=58579 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447207983.221:709541): pid=3354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=3355 suid=74 rport=58579 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447207983.350:709542): pid=3354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=58579 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447207983.350:709543): pid=3354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=58579 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447207983.358:709544): pid=3354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447207983.359:709545): pid=3354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3355 suid=74 rport=58579 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447207983.361:709546): pid=3354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447207983.361:709547): pid=3354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447207983.361:709548): pid=3354 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23555 res=1
type=USER_ROLE_CHANGE msg=audit(1447207983.427:709549): pid=3354 uid=0 auid=0 ses=23555 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447207983.449:709550): pid=3354 uid=0 auid=0 ses=23555 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447207983.453:709551): pid=3354 uid=0 auid=0 ses=23555 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447207983.453:709552): pid=3354 uid=0 auid=0 ses=23555 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447207983.455:709553): pid=3357 uid=0 auid=0 ses=23555 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=3357 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447207983.455:709554): pid=3357 uid=0 auid=0 ses=23555 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=3357 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447207983.455:709555): pid=3357 uid=0 auid=0 ses=23555 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=3357 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447207983.456:709556): pid=3357 uid=0 auid=0 ses=23555 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447207984.723:709557): pid=3354 uid=0 auid=0 ses=23555 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447207984.724:709558): pid=3354 uid=0 auid=0 ses=23555 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447207984.729:709559): pid=3354 uid=0 auid=0 ses=23555 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447207984.729:709560): pid=3354 uid=0 auid=0 ses=23555 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447207984.730:709561): pid=3354 uid=0 auid=0 ses=23555 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3354 suid=0 rport=58579 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447207984.730:709562): pid=3354 uid=0 auid=0 ses=23555 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=3354 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447207984.730:709563): pid=3354 uid=0 auid=0 ses=23555 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=3354 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447207984.730:709564): pid=3354 uid=0 auid=0 ses=23555 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=3354 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447207984.759:709565): pid=3411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=3411 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447207984.759:709566): pid=3411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=3411 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447207984.759:709567): pid=3411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=3411 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447207984.802:709568): pid=3410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=3411 suid=74 rport=58581 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447207984.803:709569): pid=3410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=3411 suid=74 rport=58581 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447207984.932:709570): pid=3410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=58581 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447207984.932:709571): pid=3410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=58581 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447207984.939:709572): pid=3410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447207984.940:709573): pid=3410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3411 suid=74 rport=58581 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447207984.941:709574): pid=3410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447207984.941:709575): pid=3410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447207984.941:709576): pid=3410 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23556 res=1
type=USER_ROLE_CHANGE msg=audit(1447207985.009:709577): pid=3410 uid=0 auid=0 ses=23556 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447207985.040:709578): pid=3410 uid=0 auid=0 ses=23556 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447207985.044:709579): pid=3410 uid=0 auid=0 ses=23556 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447207985.044:709580): pid=3410 uid=0 auid=0 ses=23556 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447207985.046:709581): pid=3413 uid=0 auid=0 ses=23556 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=3413 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447207985.046:709582): pid=3413 uid=0 auid=0 ses=23556 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=3413 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447207985.046:709583): pid=3413 uid=0 auid=0 ses=23556 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=3413 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447207985.047:709584): pid=3413 uid=0 auid=0 ses=23556 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447207985.065:709585): pid=3410 uid=0 auid=0 ses=23556 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447207985.065:709586): pid=3410 uid=0 auid=0 ses=23556 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447207985.070:709587): pid=3410 uid=0 auid=0 ses=23556 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447207985.070:709588): pid=3410 uid=0 auid=0 ses=23556 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447207985.071:709589): pid=3410 uid=0 auid=0 ses=23556 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3410 suid=0 rport=58581 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447207985.071:709590): pid=3410 uid=0 auid=0 ses=23556 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=3410 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447207985.071:709591): pid=3410 uid=0 auid=0 ses=23556 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=3410 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447207985.071:709592): pid=3410 uid=0 auid=0 ses=23556 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=3410 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447208401.659:709593): pid=4738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447208401.659:709594): pid=4738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447208401.659:709595): pid=4737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447208401.660:709596): pid=4737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447208401.661:709597): pid=4738 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23557 res=1
type=LOGIN msg=audit(1447208401.661:709598): pid=4737 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23558 res=1
type=USER_START msg=audit(1447208401.678:709599): pid=4738 uid=0 auid=0 ses=23557 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447208401.678:709600): pid=4738 uid=0 auid=0 ses=23557 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447208401.679:709601): pid=4737 uid=0 auid=0 ses=23558 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447208401.680:709602): pid=4737 uid=0 auid=0 ses=23558 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447208401.689:709603): pid=4738 uid=0 auid=0 ses=23557 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447208401.690:709604): pid=4738 uid=0 auid=0 ses=23557 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447208401.698:709605): pid=4737 uid=0 auid=0 ses=23558 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447208401.699:709606): pid=4737 uid=0 auid=0 ses=23558 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1447208483.758:709607): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447209001.713:709608): pid=6570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447209001.713:709609): pid=6569 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447209001.714:709610): pid=6570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447209001.714:709611): pid=6569 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447209001.714:709612): pid=6570 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23559 res=1
type=LOGIN msg=audit(1447209001.714:709613): pid=6569 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23560 res=1
type=USER_START msg=audit(1447209001.733:709614): pid=6569 uid=0 auid=0 ses=23560 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447209001.733:709615): pid=6570 uid=0 auid=0 ses=23559 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447209001.733:709616): pid=6569 uid=0 auid=0 ses=23560 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447209001.733:709617): pid=6570 uid=0 auid=0 ses=23559 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447209001.743:709618): pid=6570 uid=0 auid=0 ses=23559 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447209001.745:709619): pid=6570 uid=0 auid=0 ses=23559 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447209001.750:709620): pid=6569 uid=0 auid=0 ses=23560 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447209001.754:709621): pid=6569 uid=0 auid=0 ses=23560 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447209183.318:709622): pid=7143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=7143 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447209183.318:709623): pid=7143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=7143 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447209183.318:709624): pid=7143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=7143 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447209183.361:709625): pid=7142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=7143 suid=74 rport=60561 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447209183.361:709626): pid=7142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=7143 suid=74 rport=60561 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447209183.482:709627): pid=7142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60561 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447209183.482:709628): pid=7142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=60561 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447209183.486:709629): pid=7142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447209183.487:709630): pid=7142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7143 suid=74 rport=60561 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447209183.489:709631): pid=7142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447209183.490:709632): pid=7142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447209183.490:709633): pid=7142 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23561 res=1
type=USER_ROLE_CHANGE msg=audit(1447209183.558:709634): pid=7142 uid=0 auid=0 ses=23561 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447209183.581:709635): pid=7142 uid=0 auid=0 ses=23561 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447209183.583:709636): pid=7142 uid=0 auid=0 ses=23561 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447209183.583:709637): pid=7142 uid=0 auid=0 ses=23561 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447209183.585:709638): pid=7145 uid=0 auid=0 ses=23561 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=7145 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447209183.585:709639): pid=7145 uid=0 auid=0 ses=23561 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=7145 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447209183.585:709640): pid=7145 uid=0 auid=0 ses=23561 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=7145 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447209183.587:709641): pid=7145 uid=0 auid=0 ses=23561 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447209183.611:709642): pid=7142 uid=0 auid=0 ses=23561 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447209183.611:709643): pid=7142 uid=0 auid=0 ses=23561 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447209183.616:709644): pid=7142 uid=0 auid=0 ses=23561 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447209183.616:709645): pid=7142 uid=0 auid=0 ses=23561 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447209183.617:709646): pid=7142 uid=0 auid=0 ses=23561 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7142 suid=0 rport=60561 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447209183.617:709647): pid=7142 uid=0 auid=0 ses=23561 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=7142 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447209183.617:709648): pid=7142 uid=0 auid=0 ses=23561 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=7142 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447209183.617:709649): pid=7142 uid=0 auid=0 ses=23561 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=7142 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447209183.637:709650): pid=7153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=7153 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447209183.638:709651): pid=7153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=7153 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447209183.638:709652): pid=7153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=7153 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447209183.681:709653): pid=7152 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=7153 suid=74 rport=60563 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447209183.682:709654): pid=7152 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=7153 suid=74 rport=60563 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447209183.811:709655): pid=7152 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60563 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447209183.811:709656): pid=7152 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=60563 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447209183.820:709657): pid=7152 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447209183.821:709658): pid=7152 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7153 suid=74 rport=60563 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447209183.823:709659): pid=7152 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447209183.824:709660): pid=7152 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447209183.824:709661): pid=7152 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23562 res=1
type=USER_ROLE_CHANGE msg=audit(1447209183.892:709662): pid=7152 uid=0 auid=0 ses=23562 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447209183.914:709663): pid=7152 uid=0 auid=0 ses=23562 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447209183.917:709664): pid=7152 uid=0 auid=0 ses=23562 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447209183.917:709665): pid=7152 uid=0 auid=0 ses=23562 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447209183.918:709666): pid=7155 uid=0 auid=0 ses=23562 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=7155 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447209183.918:709667): pid=7155 uid=0 auid=0 ses=23562 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=7155 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447209183.918:709668): pid=7155 uid=0 auid=0 ses=23562 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=7155 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447209183.919:709669): pid=7155 uid=0 auid=0 ses=23562 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447209185.176:709670): pid=7152 uid=0 auid=0 ses=23562 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447209185.176:709671): pid=7152 uid=0 auid=0 ses=23562 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447209185.181:709672): pid=7152 uid=0 auid=0 ses=23562 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447209185.181:709673): pid=7152 uid=0 auid=0 ses=23562 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447209185.181:709674): pid=7152 uid=0 auid=0 ses=23562 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7152 suid=0 rport=60563 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447209185.181:709675): pid=7152 uid=0 auid=0 ses=23562 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=7152 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447209185.181:709676): pid=7152 uid=0 auid=0 ses=23562 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=7152 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447209185.181:709677): pid=7152 uid=0 auid=0 ses=23562 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=7152 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447209185.224:709678): pid=7215 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=7215 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447209185.224:709679): pid=7215 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=7215 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447209185.225:709680): pid=7215 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=7215 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447209185.268:709681): pid=7214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=7215 suid=74 rport=60567 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447209185.269:709682): pid=7214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=7215 suid=74 rport=60567 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447209185.397:709683): pid=7214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60567 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447209185.398:709684): pid=7214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=60567 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447209185.408:709685): pid=7214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447209185.409:709686): pid=7214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7215 suid=74 rport=60567 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447209185.411:709687): pid=7214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447209185.411:709688): pid=7214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447209185.411:709689): pid=7214 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23563 res=1
type=USER_ROLE_CHANGE msg=audit(1447209185.477:709690): pid=7214 uid=0 auid=0 ses=23563 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447209185.507:709691): pid=7214 uid=0 auid=0 ses=23563 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447209185.509:709692): pid=7214 uid=0 auid=0 ses=23563 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447209185.509:709693): pid=7214 uid=0 auid=0 ses=23563 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447209185.511:709694): pid=7217 uid=0 auid=0 ses=23563 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=7217 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447209185.511:709695): pid=7217 uid=0 auid=0 ses=23563 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=7217 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447209185.511:709696): pid=7217 uid=0 auid=0 ses=23563 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=7217 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447209185.512:709697): pid=7217 uid=0 auid=0 ses=23563 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447209185.535:709698): pid=7214 uid=0 auid=0 ses=23563 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447209185.536:709699): pid=7214 uid=0 auid=0 ses=23563 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447209185.540:709700): pid=7214 uid=0 auid=0 ses=23563 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447209185.540:709701): pid=7214 uid=0 auid=0 ses=23563 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447209185.541:709702): pid=7214 uid=0 auid=0 ses=23563 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7214 suid=0 rport=60567 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447209185.541:709703): pid=7214 uid=0 auid=0 ses=23563 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=7214 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447209185.541:709704): pid=7214 uid=0 auid=0 ses=23563 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=7214 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447209185.541:709705): pid=7214 uid=0 auid=0 ses=23563 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=7214 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447209340.231:709706): pid=7704 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=7704 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447209340.232:709707): pid=7704 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=7704 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447209340.232:709708): pid=7704 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=7704 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447209340.275:709709): pid=7703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=7704 suid=74 rport=61127 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447209340.276:709710): pid=7703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=7704 suid=74 rport=61127 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447209340.406:709711): pid=7703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=61127 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447209340.406:709712): pid=7703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=61127 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447209340.415:709713): pid=7703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447209340.416:709714): pid=7703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7704 suid=74 rport=61127 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447209340.418:709715): pid=7703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447209340.418:709716): pid=7703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447209340.418:709717): pid=7703 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23564 res=1
type=USER_ROLE_CHANGE msg=audit(1447209340.488:709718): pid=7703 uid=0 auid=0 ses=23564 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447209340.508:709719): pid=7703 uid=0 auid=0 ses=23564 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447209340.513:709720): pid=7703 uid=0 auid=0 ses=23564 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447209340.513:709721): pid=7703 uid=0 auid=0 ses=23564 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447209340.515:709722): pid=7706 uid=0 auid=0 ses=23564 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=7706 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447209340.515:709723): pid=7706 uid=0 auid=0 ses=23564 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=7706 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447209340.515:709724): pid=7706 uid=0 auid=0 ses=23564 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=7706 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447209340.516:709725): pid=7706 uid=0 auid=0 ses=23564 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447209340.540:709726): pid=7703 uid=0 auid=0 ses=23564 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447209340.540:709727): pid=7703 uid=0 auid=0 ses=23564 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447209340.545:709728): pid=7703 uid=0 auid=0 ses=23564 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447209340.545:709729): pid=7703 uid=0 auid=0 ses=23564 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447209340.545:709730): pid=7703 uid=0 auid=0 ses=23564 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7703 suid=0 rport=61127 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447209340.545:709731): pid=7703 uid=0 auid=0 ses=23564 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=7703 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447209340.545:709732): pid=7703 uid=0 auid=0 ses=23564 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=7703 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447209340.545:709733): pid=7703 uid=0 auid=0 ses=23564 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=7703 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447209340.567:709734): pid=7714 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=7714 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447209340.567:709735): pid=7714 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=7714 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447209340.567:709736): pid=7714 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=7714 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447209340.612:709737): pid=7713 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=7714 suid=74 rport=61128 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447209340.612:709738): pid=7713 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=7714 suid=74 rport=61128 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447209340.732:709739): pid=7713 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=61128 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447209340.732:709740): pid=7713 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=61128 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447209340.736:709741): pid=7713 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447209340.737:709742): pid=7713 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7714 suid=74 rport=61128 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447209340.738:709743): pid=7713 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447209340.739:709744): pid=7713 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447209340.739:709745): pid=7713 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23565 res=1
type=USER_ROLE_CHANGE msg=audit(1447209340.803:709746): pid=7713 uid=0 auid=0 ses=23565 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447209340.823:709747): pid=7713 uid=0 auid=0 ses=23565 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447209340.825:709748): pid=7713 uid=0 auid=0 ses=23565 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447209340.825:709749): pid=7713 uid=0 auid=0 ses=23565 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447209340.827:709750): pid=7716 uid=0 auid=0 ses=23565 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=7716 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447209340.827:709751): pid=7716 uid=0 auid=0 ses=23565 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=7716 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447209340.827:709752): pid=7716 uid=0 auid=0 ses=23565 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=7716 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447209340.828:709753): pid=7716 uid=0 auid=0 ses=23565 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=SYSCALL msg=audit(1447209341.742:709754): arch=c000003e syscall=59 success=yes exit=0 a0=23c1500 a1=23be680 a2=23b65e0 a3=7fffd0e1fbb0 items=3 ppid=7716 pid=7784 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23565 comm="service" exe="/usr/bin/bash" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key="privileged"
type=EXECVE msg=audit(1447209341.742:709754): argc=4 a0="/bin/sh" a1="/sbin/service" a2="snmpd" a3="status"
type=CWD msg=audit(1447209341.742:709754):  cwd="/root"
type=PATH msg=audit(1447209341.742:709754): item=0 name="/sbin/service" inode=663302 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:bin_t:s0 objtype=NORMAL
type=PATH msg=audit(1447209341.742:709754): item=1 name=(null) inode=25167244 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:shell_exec_t:s0 objtype=NORMAL
type=PATH msg=audit(1447209341.742:709754): item=2 name=(null) inode=2292 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=SYSCALL msg=audit(1447209341.764:709755): arch=c000003e syscall=59 success=yes exit=0 a0=dd7740 a1=e00e90 a2=dd8f50 a3=7fffa1427530 items=2 ppid=7716 pid=7784 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23565 comm="systemctl" exe="/usr/bin/systemctl" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key="privileged"
type=EXECVE msg=audit(1447209341.764:709755): argc=3 a0="/bin/systemctl" a1="status" a2="snmpd.service"
type=CWD msg=audit(1447209341.764:709755):  cwd="/"
type=PATH msg=audit(1447209341.764:709755): item=0 name="/bin/systemctl" inode=25275302 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:systemd_systemctl_exec_t:s0 objtype=NORMAL
type=PATH msg=audit(1447209341.764:709755): item=1 name=(null) inode=2292 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=SYSCALL msg=audit(1447209341.784:709756): arch=c000003e syscall=59 success=yes exit=0 a0=23c1130 a1=23c1b90 a2=23b65e0 a3=7fffd0e1f600 items=2 ppid=7716 pid=7798 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23565 comm="systemctl" exe="/usr/bin/systemctl" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key="privileged"
type=EXECVE msg=audit(1447209341.784:709756): argc=3 a0="/bin/systemctl" a1="is-enabled" a2="snmpd"
type=CWD msg=audit(1447209341.784:709756):  cwd="/root"
type=PATH msg=audit(1447209341.784:709756): item=0 name="/bin/systemctl" inode=25275302 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:systemd_systemctl_exec_t:s0 objtype=NORMAL
type=PATH msg=audit(1447209341.784:709756): item=1 name=(null) inode=2292 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=SYSCALL msg=audit(1447209341.788:709757): arch=c000003e syscall=59 success=yes exit=0 a0=23b4c30 a1=23be680 a2=23b65e0 a3=7fffd0e1fbb0 items=3 ppid=7716 pid=7799 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23565 comm="service" exe="/usr/bin/bash" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key="privileged"
type=EXECVE msg=audit(1447209341.788:709757): argc=4 a0="/bin/sh" a1="/sbin/service" a2="crond" a3="status"
type=CWD msg=audit(1447209341.788:709757):  cwd="/root"
type=PATH msg=audit(1447209341.788:709757): item=0 name="/sbin/service" inode=663302 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:bin_t:s0 objtype=NORMAL
type=PATH msg=audit(1447209341.788:709757): item=1 name=(null) inode=25167244 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:shell_exec_t:s0 objtype=NORMAL
type=PATH msg=audit(1447209341.788:709757): item=2 name=(null) inode=2292 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=SYSCALL msg=audit(1447209341.804:709758): arch=c000003e syscall=59 success=yes exit=0 a0=86f740 a1=898e90 a2=870f50 a3=7fff453e3f30 items=2 ppid=7716 pid=7799 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23565 comm="systemctl" exe="/usr/bin/systemctl" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key="privileged"
type=EXECVE msg=audit(1447209341.804:709758): argc=3 a0="/bin/systemctl" a1="status" a2="crond.service"
type=CWD msg=audit(1447209341.804:709758):  cwd="/"
type=PATH msg=audit(1447209341.804:709758): item=0 name="/bin/systemctl" inode=25275302 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:systemd_systemctl_exec_t:s0 objtype=NORMAL
type=PATH msg=audit(1447209341.804:709758): item=1 name=(null) inode=2292 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=SYSCALL msg=audit(1447209341.812:709759): arch=c000003e syscall=59 success=yes exit=0 a0=23c1f70 a1=23c1b90 a2=23b65e0 a3=7fffd0e1f600 items=2 ppid=7716 pid=7813 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23565 comm="systemctl" exe="/usr/bin/systemctl" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key="privileged"
type=EXECVE msg=audit(1447209341.812:709759): argc=3 a0="/bin/systemctl" a1="is-enabled" a2="crond"
type=CWD msg=audit(1447209341.812:709759):  cwd="/root"
type=PATH msg=audit(1447209341.812:709759): item=0 name="/bin/systemctl" inode=25275302 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:systemd_systemctl_exec_t:s0 objtype=NORMAL
type=PATH msg=audit(1447209341.812:709759): item=1 name=(null) inode=2292 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=SYSCALL msg=audit(1447209341.815:709760): arch=c000003e syscall=59 success=yes exit=0 a0=23c14c0 a1=23be680 a2=23b65e0 a3=7fffd0e1fbb0 items=3 ppid=7716 pid=7814 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23565 comm="service" exe="/usr/bin/bash" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key="privileged"
type=EXECVE msg=audit(1447209341.815:709760): argc=4 a0="/bin/sh" a1="/sbin/service" a2="firewalld" a3="status"
type=CWD msg=audit(1447209341.815:709760):  cwd="/root"
type=PATH msg=audit(1447209341.815:709760): item=0 name="/sbin/service" inode=663302 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:bin_t:s0 objtype=NORMAL
type=PATH msg=audit(1447209341.815:709760): item=1 name=(null) inode=25167244 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:shell_exec_t:s0 objtype=NORMAL
type=PATH msg=audit(1447209341.815:709760): item=2 name=(null) inode=2292 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=SYSCALL msg=audit(1447209341.830:709761): arch=c000003e syscall=59 success=yes exit=0 a0=834740 a1=85de90 a2=835f50 a3=7fffd8d3a960 items=2 ppid=7716 pid=7814 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23565 comm="systemctl" exe="/usr/bin/systemctl" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key="privileged"
type=EXECVE msg=audit(1447209341.830:709761): argc=3 a0="/bin/systemctl" a1="status" a2="firewalld.service"
type=CWD msg=audit(1447209341.830:709761):  cwd="/"
type=PATH msg=audit(1447209341.830:709761): item=0 name="/bin/systemctl" inode=25275302 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:systemd_systemctl_exec_t:s0 objtype=NORMAL
type=PATH msg=audit(1447209341.830:709761): item=1 name=(null) inode=2292 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=SYSCALL msg=audit(1447209341.837:709762): arch=c000003e syscall=59 success=yes exit=0 a0=23c14e0 a1=23c1bf0 a2=23b65e0 a3=7fffd0e1f600 items=2 ppid=7716 pid=7828 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23565 comm="systemctl" exe="/usr/bin/systemctl" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key="privileged"
type=EXECVE msg=audit(1447209341.837:709762): argc=3 a0="/bin/systemctl" a1="is-enabled" a2="firewalld"
type=CWD msg=audit(1447209341.837:709762):  cwd="/root"
type=PATH msg=audit(1447209341.837:709762): item=0 name="/bin/systemctl" inode=25275302 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:systemd_systemctl_exec_t:s0 objtype=NORMAL
type=PATH msg=audit(1447209341.837:709762): item=1 name=(null) inode=2292 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=SYSCALL msg=audit(1447209341.840:709763): arch=c000003e syscall=59 success=yes exit=0 a0=23c0fd0 a1=23be680 a2=23b65e0 a3=7fffd0e1fbb0 items=3 ppid=7716 pid=7829 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23565 comm="service" exe="/usr/bin/bash" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key="privileged"
type=EXECVE msg=audit(1447209341.840:709763): argc=4 a0="/bin/sh" a1="/sbin/service" a2="ntpd" a3="status"
type=CWD msg=audit(1447209341.840:709763):  cwd="/root"
type=PATH msg=audit(1447209341.840:709763): item=0 name="/sbin/service" inode=663302 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:bin_t:s0 objtype=NORMAL
type=PATH msg=audit(1447209341.840:709763): item=1 name=(null) inode=25167244 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:shell_exec_t:s0 objtype=NORMAL
type=PATH msg=audit(1447209341.840:709763): item=2 name=(null) inode=2292 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=SYSCALL msg=audit(1447209341.855:709764): arch=c000003e syscall=59 success=yes exit=0 a0=2014740 a1=203de90 a2=2015f50 a3=7fff7eea4b10 items=2 ppid=7716 pid=7829 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23565 comm="systemctl" exe="/usr/bin/systemctl" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key="privileged"
type=EXECVE msg=audit(1447209341.855:709764): argc=3 a0="/bin/systemctl" a1="status" a2="ntpd.service"
type=CWD msg=audit(1447209341.855:709764):  cwd="/"
type=PATH msg=audit(1447209341.855:709764): item=0 name="/bin/systemctl" inode=25275302 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:systemd_systemctl_exec_t:s0 objtype=NORMAL
type=PATH msg=audit(1447209341.855:709764): item=1 name=(null) inode=2292 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=SYSCALL msg=audit(1447209341.903:709765): arch=c000003e syscall=59 success=yes exit=0 a0=23c18a0 a1=23bed00 a2=23b65e0 a3=7fffd0e1f600 items=2 ppid=7716 pid=7852 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23565 comm="systemctl" exe="/usr/bin/systemctl" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key="privileged"
type=EXECVE msg=audit(1447209341.903:709765): argc=3 a0="/bin/systemctl" a1="is-enabled" a2="ntpd"
type=CWD msg=audit(1447209341.903:709765):  cwd="/root"
type=PATH msg=audit(1447209341.903:709765): item=0 name="/bin/systemctl" inode=25275302 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:systemd_systemctl_exec_t:s0 objtype=NORMAL
type=PATH msg=audit(1447209341.903:709765): item=1 name=(null) inode=2292 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=SYSCALL msg=audit(1447209342.775:709766): arch=c000003e syscall=59 success=yes exit=0 a0=23b4bd0 a1=23c49a0 a2=23b65e0 a3=7fffd0e1ddb0 items=2 ppid=7716 pid=7941 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23565 comm="systemctl" exe="/usr/bin/systemctl" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key="privileged"
type=EXECVE msg=audit(1447209342.775:709766): argc=3 a0="/bin/systemctl" a1="is-enabled" a2="auditd"
type=CWD msg=audit(1447209342.775:709766):  cwd="/root"
type=PATH msg=audit(1447209342.775:709766): item=0 name="/bin/systemctl" inode=25275302 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:systemd_systemctl_exec_t:s0 objtype=NORMAL
type=PATH msg=audit(1447209342.775:709766): item=1 name=(null) inode=2292 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=SYSCALL msg=audit(1447209342.779:709767): arch=c000003e syscall=59 success=yes exit=0 a0=23c4cd0 a1=23c3040 a2=23b65e0 a3=7fffd0e1e450 items=3 ppid=7716 pid=7942 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23565 comm="service" exe="/usr/bin/bash" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key="privileged"
type=EXECVE msg=audit(1447209342.779:709767): argc=4 a0="/bin/sh" a1="/sbin/service" a2="auditd" a3="status"
type=CWD msg=audit(1447209342.779:709767):  cwd="/root"
type=PATH msg=audit(1447209342.779:709767): item=0 name="/sbin/service" inode=663302 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:bin_t:s0 objtype=NORMAL
type=PATH msg=audit(1447209342.779:709767): item=1 name=(null) inode=25167244 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:shell_exec_t:s0 objtype=NORMAL
type=PATH msg=audit(1447209342.779:709767): item=2 name=(null) inode=2292 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=SYSCALL msg=audit(1447209342.796:709768): arch=c000003e syscall=59 success=yes exit=0 a0=1bb8740 a1=1be1e90 a2=1bb9f50 a3=7fffd4dd9d00 items=2 ppid=7716 pid=7942 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23565 comm="systemctl" exe="/usr/bin/systemctl" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key="privileged"
type=EXECVE msg=audit(1447209342.796:709768): argc=3 a0="/bin/systemctl" a1="status" a2="auditd.service"
type=CWD msg=audit(1447209342.796:709768):  cwd="/"
type=PATH msg=audit(1447209342.796:709768): item=0 name="/bin/systemctl" inode=25275302 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:systemd_systemctl_exec_t:s0 objtype=NORMAL
type=PATH msg=audit(1447209342.796:709768): item=1 name=(null) inode=2292 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=SYSCALL msg=audit(1447209343.065:709769): arch=c000003e syscall=59 success=yes exit=0 a0=23c3800 a1=23b6bd0 a2=23b65e0 a3=7fffd0e1fbb0 items=2 ppid=7716 pid=8087 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23565 comm="systemctl" exe="/usr/bin/systemctl" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key="privileged"
type=EXECVE msg=audit(1447209343.065:709769): argc=3 a0="/bin/systemctl" a1="is-enabled" a2="os_watcher"
type=CWD msg=audit(1447209343.065:709769):  cwd="/root"
type=PATH msg=audit(1447209343.065:709769): item=0 name="/bin/systemctl" inode=25275302 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:systemd_systemctl_exec_t:s0 objtype=NORMAL
type=PATH msg=audit(1447209343.065:709769): item=1 name=(null) inode=2292 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=USER_END msg=audit(1447209343.142:709770): pid=7713 uid=0 auid=0 ses=23565 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447209343.142:709771): pid=7713 uid=0 auid=0 ses=23565 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447209343.146:709772): pid=7713 uid=0 auid=0 ses=23565 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447209343.146:709773): pid=7713 uid=0 auid=0 ses=23565 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447209343.146:709774): pid=7713 uid=0 auid=0 ses=23565 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7713 suid=0 rport=61128 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447209343.147:709775): pid=7713 uid=0 auid=0 ses=23565 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=7713 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447209343.147:709776): pid=7713 uid=0 auid=0 ses=23565 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=7713 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447209343.147:709777): pid=7713 uid=0 auid=0 ses=23565 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=7713 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447209343.173:709778): pid=8173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=8173 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447209343.173:709779): pid=8173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=8173 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447209343.173:709780): pid=8173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=8173 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447209343.219:709781): pid=8172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=8173 suid=74 rport=61136 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447209343.219:709782): pid=8172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=8173 suid=74 rport=61136 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447209343.348:709783): pid=8172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=61136 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447209343.348:709784): pid=8172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=61136 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447209343.358:709785): pid=8172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447209343.359:709786): pid=8172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8173 suid=74 rport=61136 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447209343.360:709787): pid=8172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447209343.360:709788): pid=8172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447209343.360:709789): pid=8172 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23566 res=1
type=USER_ROLE_CHANGE msg=audit(1447209343.429:709790): pid=8172 uid=0 auid=0 ses=23566 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447209343.451:709791): pid=8172 uid=0 auid=0 ses=23566 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447209343.454:709792): pid=8172 uid=0 auid=0 ses=23566 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447209343.454:709793): pid=8172 uid=0 auid=0 ses=23566 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447209343.455:709794): pid=8175 uid=0 auid=0 ses=23566 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=8175 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447209343.455:709795): pid=8175 uid=0 auid=0 ses=23566 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=8175 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447209343.455:709796): pid=8175 uid=0 auid=0 ses=23566 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=8175 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447209343.456:709797): pid=8175 uid=0 auid=0 ses=23566 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447209343.476:709798): pid=8172 uid=0 auid=0 ses=23566 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447209343.476:709799): pid=8172 uid=0 auid=0 ses=23566 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447209343.480:709800): pid=8172 uid=0 auid=0 ses=23566 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447209343.481:709801): pid=8172 uid=0 auid=0 ses=23566 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447209343.482:709802): pid=8172 uid=0 auid=0 ses=23566 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8172 suid=0 rport=61136 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447209343.482:709803): pid=8172 uid=0 auid=0 ses=23566 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=8172 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447209343.482:709804): pid=8172 uid=0 auid=0 ses=23566 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=8172 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447209343.482:709805): pid=8172 uid=0 auid=0 ses=23566 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=8172 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=SYSCALL msg=audit(1447209554.689:709806): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447209601.771:709808): pid=8927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447209601.771:709807): pid=8926 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447209601.771:709809): pid=8927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447209601.771:709810): pid=8926 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447209601.772:709811): pid=8927 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23567 res=1
type=LOGIN msg=audit(1447209601.772:709812): pid=8926 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23568 res=1
type=USER_START msg=audit(1447209601.795:709813): pid=8927 uid=0 auid=0 ses=23567 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447209601.795:709814): pid=8926 uid=0 auid=0 ses=23568 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447209601.796:709815): pid=8927 uid=0 auid=0 ses=23567 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447209601.796:709816): pid=8926 uid=0 auid=0 ses=23568 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447209601.805:709817): pid=8927 uid=0 auid=0 ses=23567 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447209601.807:709818): pid=8927 uid=0 auid=0 ses=23567 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447209601.810:709819): pid=8926 uid=0 auid=0 ses=23568 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447209626.842:709820): pid=8926 uid=0 auid=0 ses=23568 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=USER_ACCT msg=audit(1447210201.858:709821): pid=10772 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447210201.858:709822): pid=10773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447210201.858:709823): pid=10773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447210201.858:709824): pid=10772 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447210201.858:709825): pid=10773 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23569 res=1
type=LOGIN msg=audit(1447210201.858:709826): pid=10772 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23570 res=1
type=USER_START msg=audit(1447210201.873:709827): pid=10772 uid=0 auid=0 ses=23570 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447210201.873:709828): pid=10773 uid=0 auid=0 ses=23569 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447210201.873:709829): pid=10772 uid=0 auid=0 ses=23570 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447210201.873:709830): pid=10773 uid=0 auid=0 ses=23569 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447210201.881:709831): pid=10773 uid=0 auid=0 ses=23569 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447210201.883:709832): pid=10773 uid=0 auid=0 ses=23569 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447210201.887:709833): pid=10772 uid=0 auid=0 ses=23570 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447210201.889:709834): pid=10772 uid=0 auid=0 ses=23570 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447210383.049:709835): pid=11333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=11333 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447210383.050:709836): pid=11333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=11333 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447210383.050:709837): pid=11333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=11333 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447210383.093:709838): pid=11332 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=11333 suid=74 rport=62698 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447210383.093:709839): pid=11332 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=11333 suid=74 rport=62698 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447210383.223:709840): pid=11332 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=62698 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447210383.223:709841): pid=11332 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=62698 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447210383.231:709842): pid=11332 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447210383.233:709843): pid=11332 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11333 suid=74 rport=62698 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447210383.233:709844): pid=11332 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447210383.234:709845): pid=11332 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447210383.234:709846): pid=11332 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23571 res=1
type=USER_ROLE_CHANGE msg=audit(1447210383.304:709847): pid=11332 uid=0 auid=0 ses=23571 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447210383.330:709848): pid=11332 uid=0 auid=0 ses=23571 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447210383.333:709849): pid=11332 uid=0 auid=0 ses=23571 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447210383.333:709850): pid=11332 uid=0 auid=0 ses=23571 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447210383.334:709851): pid=11335 uid=0 auid=0 ses=23571 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=11335 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447210383.334:709852): pid=11335 uid=0 auid=0 ses=23571 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=11335 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447210383.334:709853): pid=11335 uid=0 auid=0 ses=23571 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=11335 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447210383.335:709854): pid=11335 uid=0 auid=0 ses=23571 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447210383.353:709855): pid=11332 uid=0 auid=0 ses=23571 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447210383.353:709856): pid=11332 uid=0 auid=0 ses=23571 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447210383.357:709857): pid=11332 uid=0 auid=0 ses=23571 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447210383.357:709858): pid=11332 uid=0 auid=0 ses=23571 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447210383.357:709859): pid=11332 uid=0 auid=0 ses=23571 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11332 suid=0 rport=62698 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447210383.357:709860): pid=11332 uid=0 auid=0 ses=23571 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=11332 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447210383.357:709861): pid=11332 uid=0 auid=0 ses=23571 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=11332 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447210383.357:709862): pid=11332 uid=0 auid=0 ses=23571 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=11332 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447210383.386:709863): pid=11344 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=11344 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447210383.386:709864): pid=11344 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=11344 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447210383.386:709865): pid=11344 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=11344 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447210383.432:709866): pid=11343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=11344 suid=74 rport=62700 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447210383.433:709867): pid=11343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=11344 suid=74 rport=62700 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447210383.561:709868): pid=11343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=62700 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447210383.561:709869): pid=11343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=62700 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447210383.570:709870): pid=11343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447210383.571:709871): pid=11343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11344 suid=74 rport=62700 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447210383.572:709872): pid=11343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447210383.572:709873): pid=11343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447210383.572:709874): pid=11343 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23572 res=1
type=USER_ROLE_CHANGE msg=audit(1447210383.635:709875): pid=11343 uid=0 auid=0 ses=23572 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447210383.658:709876): pid=11343 uid=0 auid=0 ses=23572 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447210383.660:709877): pid=11343 uid=0 auid=0 ses=23572 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447210383.660:709878): pid=11343 uid=0 auid=0 ses=23572 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447210383.662:709879): pid=11346 uid=0 auid=0 ses=23572 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=11346 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447210383.662:709880): pid=11346 uid=0 auid=0 ses=23572 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=11346 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447210383.662:709881): pid=11346 uid=0 auid=0 ses=23572 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=11346 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447210383.662:709882): pid=11346 uid=0 auid=0 ses=23572 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447210384.949:709883): pid=11343 uid=0 auid=0 ses=23572 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447210384.949:709884): pid=11343 uid=0 auid=0 ses=23572 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447210384.954:709885): pid=11343 uid=0 auid=0 ses=23572 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447210384.954:709886): pid=11343 uid=0 auid=0 ses=23572 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447210384.955:709887): pid=11343 uid=0 auid=0 ses=23572 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11343 suid=0 rport=62700 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447210384.955:709888): pid=11343 uid=0 auid=0 ses=23572 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=11343 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447210384.955:709889): pid=11343 uid=0 auid=0 ses=23572 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=11343 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447210384.955:709890): pid=11343 uid=0 auid=0 ses=23572 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=11343 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447210384.989:709891): pid=11396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=11396 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447210384.989:709892): pid=11396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=11396 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447210384.990:709893): pid=11396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=11396 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447210385.035:709894): pid=11395 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=11396 suid=74 rport=62702 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447210385.035:709895): pid=11395 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=11396 suid=74 rport=62702 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447210385.160:709896): pid=11395 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=62702 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447210385.160:709897): pid=11395 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=62702 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447210385.165:709898): pid=11395 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447210385.166:709899): pid=11395 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11396 suid=74 rport=62702 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447210385.168:709900): pid=11395 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447210385.168:709901): pid=11395 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447210385.169:709902): pid=11395 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23573 res=1
type=USER_ROLE_CHANGE msg=audit(1447210385.231:709903): pid=11395 uid=0 auid=0 ses=23573 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447210385.254:709904): pid=11395 uid=0 auid=0 ses=23573 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447210385.257:709905): pid=11395 uid=0 auid=0 ses=23573 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447210385.257:709906): pid=11395 uid=0 auid=0 ses=23573 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447210385.258:709907): pid=11398 uid=0 auid=0 ses=23573 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=11398 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447210385.259:709908): pid=11398 uid=0 auid=0 ses=23573 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=11398 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447210385.259:709909): pid=11398 uid=0 auid=0 ses=23573 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=11398 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447210385.259:709910): pid=11398 uid=0 auid=0 ses=23573 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447210385.275:709911): pid=11395 uid=0 auid=0 ses=23573 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447210385.275:709912): pid=11395 uid=0 auid=0 ses=23573 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447210385.278:709913): pid=11395 uid=0 auid=0 ses=23573 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447210385.278:709914): pid=11395 uid=0 auid=0 ses=23573 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447210385.278:709915): pid=11395 uid=0 auid=0 ses=23573 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11395 suid=0 rport=62702 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447210385.279:709916): pid=11395 uid=0 auid=0 ses=23573 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=11395 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447210385.279:709917): pid=11395 uid=0 auid=0 ses=23573 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=11395 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447210385.279:709918): pid=11395 uid=0 auid=0 ses=23573 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=11395 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447210801.912:709919): pid=12690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447210801.912:709920): pid=12691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447210801.912:709921): pid=12690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447210801.912:709922): pid=12691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447210801.913:709923): pid=12691 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23574 res=1
type=LOGIN msg=audit(1447210801.913:709924): pid=12690 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23575 res=1
type=USER_START msg=audit(1447210801.930:709925): pid=12691 uid=0 auid=0 ses=23574 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447210801.930:709926): pid=12690 uid=0 auid=0 ses=23575 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447210801.931:709927): pid=12691 uid=0 auid=0 ses=23574 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447210801.931:709928): pid=12690 uid=0 auid=0 ses=23575 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447210801.940:709929): pid=12691 uid=0 auid=0 ses=23574 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447210801.945:709930): pid=12690 uid=0 auid=0 ses=23575 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447210801.945:709931): pid=12691 uid=0 auid=0 ses=23574 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447210801.950:709932): pid=12690 uid=0 auid=0 ses=23575 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447210861.963:709933): pid=12927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447210861.964:709934): pid=12927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447210861.964:709935): pid=12927 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23576 res=1
type=USER_START msg=audit(1447210861.975:709936): pid=12927 uid=0 auid=0 ses=23576 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447210861.975:709937): pid=12927 uid=0 auid=0 ses=23576 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447210862.003:709938): pid=12927 uid=0 auid=0 ses=23576 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447210862.004:709939): pid=12927 uid=0 auid=0 ses=23576 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447211401.019:709940): pid=14705 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447211401.019:709941): pid=14706 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447211401.019:709942): pid=14706 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447211401.019:709943): pid=14705 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447211401.019:709944): pid=14706 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23577 res=1
type=LOGIN msg=audit(1447211401.019:709945): pid=14705 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23578 res=1
type=USER_START msg=audit(1447211401.032:709946): pid=14705 uid=0 auid=0 ses=23578 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447211401.032:709947): pid=14706 uid=0 auid=0 ses=23577 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447211401.033:709948): pid=14705 uid=0 auid=0 ses=23578 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447211401.033:709949): pid=14706 uid=0 auid=0 ses=23577 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447211401.038:709950): pid=14706 uid=0 auid=0 ses=23577 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447211401.040:709951): pid=14706 uid=0 auid=0 ses=23577 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447211401.048:709952): pid=14705 uid=0 auid=0 ses=23578 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447211401.050:709953): pid=14705 uid=0 auid=0 ses=23578 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447211582.991:709954): pid=15268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=15268 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447211582.991:709955): pid=15268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=15268 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447211582.991:709956): pid=15268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=15268 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447211583.035:709957): pid=15267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=15268 suid=74 rport=64677 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447211583.035:709958): pid=15267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=15268 suid=74 rport=64677 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447211583.158:709959): pid=15267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=64677 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447211583.158:709960): pid=15267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=64677 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447211583.163:709961): pid=15267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447211583.164:709962): pid=15267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15268 suid=74 rport=64677 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447211583.165:709963): pid=15267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447211583.165:709964): pid=15267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447211583.165:709965): pid=15267 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23579 res=1
type=USER_ROLE_CHANGE msg=audit(1447211583.239:709966): pid=15267 uid=0 auid=0 ses=23579 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447211583.258:709967): pid=15267 uid=0 auid=0 ses=23579 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447211583.261:709968): pid=15267 uid=0 auid=0 ses=23579 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447211583.261:709969): pid=15267 uid=0 auid=0 ses=23579 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447211583.262:709970): pid=15270 uid=0 auid=0 ses=23579 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=15270 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447211583.263:709971): pid=15270 uid=0 auid=0 ses=23579 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=15270 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447211583.263:709972): pid=15270 uid=0 auid=0 ses=23579 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=15270 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447211583.264:709973): pid=15270 uid=0 auid=0 ses=23579 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447211583.282:709974): pid=15267 uid=0 auid=0 ses=23579 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447211583.282:709975): pid=15267 uid=0 auid=0 ses=23579 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447211583.286:709976): pid=15267 uid=0 auid=0 ses=23579 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447211583.286:709977): pid=15267 uid=0 auid=0 ses=23579 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447211583.286:709978): pid=15267 uid=0 auid=0 ses=23579 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15267 suid=0 rport=64677 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447211583.287:709979): pid=15267 uid=0 auid=0 ses=23579 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=15267 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447211583.287:709980): pid=15267 uid=0 auid=0 ses=23579 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=15267 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447211583.287:709981): pid=15267 uid=0 auid=0 ses=23579 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=15267 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447211583.308:709982): pid=15277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=15277 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447211583.308:709983): pid=15277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=15277 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447211583.308:709984): pid=15277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=15277 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447211583.351:709985): pid=15276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=15277 suid=74 rport=64680 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447211583.352:709986): pid=15276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=15277 suid=74 rport=64680 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447211583.481:709987): pid=15276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=64680 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447211583.481:709988): pid=15276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=64680 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447211583.489:709989): pid=15276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447211583.490:709990): pid=15276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15277 suid=74 rport=64680 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447211583.493:709991): pid=15276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447211583.493:709992): pid=15276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447211583.493:709993): pid=15276 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23580 res=1
type=USER_ROLE_CHANGE msg=audit(1447211583.563:709994): pid=15276 uid=0 auid=0 ses=23580 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447211583.583:709995): pid=15276 uid=0 auid=0 ses=23580 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447211583.586:709996): pid=15276 uid=0 auid=0 ses=23580 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447211583.586:709997): pid=15276 uid=0 auid=0 ses=23580 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447211583.588:709998): pid=15279 uid=0 auid=0 ses=23580 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=15279 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447211583.588:709999): pid=15279 uid=0 auid=0 ses=23580 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=15279 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447211583.588:710000): pid=15279 uid=0 auid=0 ses=23580 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=15279 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447211583.589:710001): pid=15279 uid=0 auid=0 ses=23580 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447211584.879:710002): pid=15276 uid=0 auid=0 ses=23580 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447211584.879:710003): pid=15276 uid=0 auid=0 ses=23580 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447211584.883:710004): pid=15276 uid=0 auid=0 ses=23580 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447211584.883:710005): pid=15276 uid=0 auid=0 ses=23580 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447211584.884:710006): pid=15276 uid=0 auid=0 ses=23580 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15276 suid=0 rport=64680 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447211584.884:710007): pid=15276 uid=0 auid=0 ses=23580 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=15276 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447211584.884:710008): pid=15276 uid=0 auid=0 ses=23580 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=15276 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447211584.884:710009): pid=15276 uid=0 auid=0 ses=23580 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=15276 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447211584.915:710010): pid=15328 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=15328 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447211584.915:710011): pid=15328 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=15328 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447211584.915:710012): pid=15328 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=15328 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447211584.959:710013): pid=15327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=15328 suid=74 rport=64682 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447211584.959:710014): pid=15327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=15328 suid=74 rport=64682 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447211585.083:710015): pid=15327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=64682 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447211585.083:710016): pid=15327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=64682 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447211585.089:710017): pid=15327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447211585.091:710018): pid=15327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15328 suid=74 rport=64682 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447211585.092:710019): pid=15327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447211585.092:710020): pid=15327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447211585.092:710021): pid=15327 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23581 res=1
type=USER_ROLE_CHANGE msg=audit(1447211585.158:710022): pid=15327 uid=0 auid=0 ses=23581 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447211585.176:710023): pid=15327 uid=0 auid=0 ses=23581 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447211585.179:710024): pid=15327 uid=0 auid=0 ses=23581 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447211585.179:710025): pid=15327 uid=0 auid=0 ses=23581 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447211585.180:710026): pid=15330 uid=0 auid=0 ses=23581 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=15330 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447211585.180:710027): pid=15330 uid=0 auid=0 ses=23581 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=15330 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447211585.180:710028): pid=15330 uid=0 auid=0 ses=23581 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=15330 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447211585.181:710029): pid=15330 uid=0 auid=0 ses=23581 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447211585.199:710030): pid=15327 uid=0 auid=0 ses=23581 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447211585.199:710031): pid=15327 uid=0 auid=0 ses=23581 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447211585.203:710032): pid=15327 uid=0 auid=0 ses=23581 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447211585.203:710033): pid=15327 uid=0 auid=0 ses=23581 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447211585.203:710034): pid=15327 uid=0 auid=0 ses=23581 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15327 suid=0 rport=64682 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447211585.203:710035): pid=15327 uid=0 auid=0 ses=23581 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=15327 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447211585.203:710036): pid=15327 uid=0 auid=0 ses=23581 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=15327 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447211585.204:710037): pid=15327 uid=0 auid=0 ses=23581 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=15327 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=SYSCALL msg=audit(1447211682.717:710038): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447212001.069:710039): pid=16623 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447212001.069:710040): pid=16624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447212001.069:710041): pid=16623 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447212001.069:710042): pid=16624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447212001.070:710043): pid=16624 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23582 res=1
type=LOGIN msg=audit(1447212001.070:710044): pid=16623 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23583 res=1
type=USER_START msg=audit(1447212001.085:710045): pid=16624 uid=0 auid=0 ses=23582 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447212001.086:710046): pid=16624 uid=0 auid=0 ses=23582 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447212001.087:710047): pid=16623 uid=0 auid=0 ses=23583 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447212001.088:710048): pid=16623 uid=0 auid=0 ses=23583 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447212001.096:710049): pid=16624 uid=0 auid=0 ses=23582 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447212001.104:710050): pid=16623 uid=0 auid=0 ses=23583 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447212001.105:710051): pid=16624 uid=0 auid=0 ses=23582 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447212001.110:710052): pid=16623 uid=0 auid=0 ses=23583 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447212601.133:710053): pid=18470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447212601.133:710054): pid=18470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447212601.133:710055): pid=18470 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23584 res=1
type=USER_START msg=audit(1447212601.144:710056): pid=18470 uid=0 auid=0 ses=23584 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447212601.145:710057): pid=18470 uid=0 auid=0 ses=23584 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447212601.156:710058): pid=18470 uid=0 auid=0 ses=23584 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447212601.157:710059): pid=18471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447212601.157:710060): pid=18471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447212601.157:710061): pid=18470 uid=0 auid=0 ses=23584 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447212601.158:710062): pid=18471 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23585 res=1
type=USER_START msg=audit(1447212601.170:710063): pid=18471 uid=0 auid=0 ses=23585 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447212601.170:710064): pid=18471 uid=0 auid=0 ses=23585 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447212601.176:710065): pid=18471 uid=0 auid=0 ses=23585 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447212601.177:710066): pid=18471 uid=0 auid=0 ses=23585 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447212783.203:710067): pid=19032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=19032 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447212783.203:710068): pid=19032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=19032 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447212783.203:710069): pid=19032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=19032 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447212783.247:710070): pid=19031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=19032 suid=74 rport=33893 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447212783.247:710071): pid=19031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=19032 suid=74 rport=33893 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447212783.378:710072): pid=19031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33893 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447212783.378:710073): pid=19031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=33893 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447212783.385:710074): pid=19031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447212783.386:710075): pid=19031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19032 suid=74 rport=33893 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447212783.387:710076): pid=19031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447212783.387:710077): pid=19031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447212783.387:710078): pid=19031 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23586 res=1
type=USER_ROLE_CHANGE msg=audit(1447212783.456:710079): pid=19031 uid=0 auid=0 ses=23586 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447212783.472:710080): pid=19031 uid=0 auid=0 ses=23586 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447212783.474:710081): pid=19031 uid=0 auid=0 ses=23586 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447212783.474:710082): pid=19031 uid=0 auid=0 ses=23586 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447212783.476:710083): pid=19034 uid=0 auid=0 ses=23586 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=19034 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447212783.476:710084): pid=19034 uid=0 auid=0 ses=23586 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=19034 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447212783.477:710085): pid=19034 uid=0 auid=0 ses=23586 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=19034 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447212783.478:710086): pid=19034 uid=0 auid=0 ses=23586 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447212783.502:710087): pid=19031 uid=0 auid=0 ses=23586 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447212783.502:710088): pid=19031 uid=0 auid=0 ses=23586 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447212783.506:710089): pid=19031 uid=0 auid=0 ses=23586 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447212783.507:710090): pid=19031 uid=0 auid=0 ses=23586 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447212783.507:710091): pid=19031 uid=0 auid=0 ses=23586 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19031 suid=0 rport=33893 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447212783.507:710092): pid=19031 uid=0 auid=0 ses=23586 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=19031 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447212783.507:710093): pid=19031 uid=0 auid=0 ses=23586 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=19031 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447212783.507:710094): pid=19031 uid=0 auid=0 ses=23586 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=19031 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447212783.530:710095): pid=19041 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=19041 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447212783.531:710096): pid=19041 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=19041 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447212783.531:710097): pid=19041 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=19041 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447212783.576:710098): pid=19040 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=19041 suid=74 rport=33894 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447212783.576:710099): pid=19040 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=19041 suid=74 rport=33894 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447212783.704:710100): pid=19040 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33894 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447212783.705:710101): pid=19040 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=33894 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447212783.714:710102): pid=19040 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447212783.715:710103): pid=19040 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19041 suid=74 rport=33894 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447212783.717:710104): pid=19040 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447212783.718:710105): pid=19040 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447212783.718:710106): pid=19040 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23587 res=1
type=USER_ROLE_CHANGE msg=audit(1447212783.783:710107): pid=19040 uid=0 auid=0 ses=23587 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447212783.807:710108): pid=19040 uid=0 auid=0 ses=23587 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447212783.810:710109): pid=19040 uid=0 auid=0 ses=23587 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447212783.810:710110): pid=19040 uid=0 auid=0 ses=23587 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447212783.812:710111): pid=19043 uid=0 auid=0 ses=23587 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=19043 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447212783.812:710112): pid=19043 uid=0 auid=0 ses=23587 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=19043 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447212783.812:710113): pid=19043 uid=0 auid=0 ses=23587 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=19043 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447212783.812:710114): pid=19043 uid=0 auid=0 ses=23587 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447212785.097:710115): pid=19040 uid=0 auid=0 ses=23587 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447212785.097:710116): pid=19040 uid=0 auid=0 ses=23587 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447212785.102:710117): pid=19040 uid=0 auid=0 ses=23587 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447212785.102:710118): pid=19040 uid=0 auid=0 ses=23587 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447212785.103:710119): pid=19040 uid=0 auid=0 ses=23587 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19040 suid=0 rport=33894 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447212785.103:710120): pid=19040 uid=0 auid=0 ses=23587 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=19040 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447212785.103:710121): pid=19040 uid=0 auid=0 ses=23587 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=19040 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447212785.103:710122): pid=19040 uid=0 auid=0 ses=23587 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=19040 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447212785.140:710123): pid=19092 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=19092 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447212785.140:710124): pid=19092 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=19092 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447212785.141:710125): pid=19092 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=19092 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447212785.185:710126): pid=19091 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=19092 suid=74 rport=33898 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447212785.186:710127): pid=19091 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=19092 suid=74 rport=33898 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447212785.308:710128): pid=19091 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33898 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447212785.308:710129): pid=19091 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=33898 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447212785.313:710130): pid=19091 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447212785.314:710131): pid=19091 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19092 suid=74 rport=33898 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447212785.316:710132): pid=19091 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447212785.316:710133): pid=19091 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447212785.316:710134): pid=19091 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23588 res=1
type=USER_ROLE_CHANGE msg=audit(1447212785.382:710135): pid=19091 uid=0 auid=0 ses=23588 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447212785.399:710136): pid=19091 uid=0 auid=0 ses=23588 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447212785.402:710137): pid=19091 uid=0 auid=0 ses=23588 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447212785.402:710138): pid=19091 uid=0 auid=0 ses=23588 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447212785.403:710139): pid=19094 uid=0 auid=0 ses=23588 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=19094 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447212785.404:710140): pid=19094 uid=0 auid=0 ses=23588 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=19094 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447212785.404:710141): pid=19094 uid=0 auid=0 ses=23588 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=19094 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447212785.404:710142): pid=19094 uid=0 auid=0 ses=23588 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447212785.420:710143): pid=19091 uid=0 auid=0 ses=23588 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447212785.420:710144): pid=19091 uid=0 auid=0 ses=23588 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447212785.423:710145): pid=19091 uid=0 auid=0 ses=23588 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447212785.423:710146): pid=19091 uid=0 auid=0 ses=23588 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447212785.424:710147): pid=19091 uid=0 auid=0 ses=23588 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19091 suid=0 rport=33898 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447212785.424:710148): pid=19091 uid=0 auid=0 ses=23588 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=19091 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447212785.424:710149): pid=19091 uid=0 auid=0 ses=23588 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=19091 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447212785.424:710150): pid=19091 uid=0 auid=0 ses=23588 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=19091 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447213201.198:710151): pid=20383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447213201.198:710152): pid=20383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447213201.199:710153): pid=20383 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23589 res=1
type=USER_ACCT msg=audit(1447213201.202:710154): pid=20382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447213201.202:710155): pid=20382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447213201.202:710156): pid=20382 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23590 res=1
type=USER_START msg=audit(1447213201.217:710157): pid=20383 uid=0 auid=0 ses=23589 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447213201.217:710158): pid=20382 uid=0 auid=0 ses=23590 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447213201.217:710159): pid=20382 uid=0 auid=0 ses=23590 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447213201.217:710160): pid=20383 uid=0 auid=0 ses=23589 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447213201.225:710161): pid=20383 uid=0 auid=0 ses=23589 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447213201.227:710162): pid=20383 uid=0 auid=0 ses=23589 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447213201.235:710163): pid=20382 uid=0 auid=0 ses=23590 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447213201.236:710164): pid=20382 uid=0 auid=0 ses=23590 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1447213786.720:710165): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447213801.255:710166): pid=22262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447213801.255:710167): pid=22262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447213801.255:710168): pid=22261 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447213801.256:710169): pid=22261 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447213801.257:710170): pid=22262 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23591 res=1
type=LOGIN msg=audit(1447213801.257:710171): pid=22261 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23592 res=1
type=USER_START msg=audit(1447213801.276:710172): pid=22262 uid=0 auid=0 ses=23591 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447213801.277:710173): pid=22261 uid=0 auid=0 ses=23592 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447213801.277:710174): pid=22262 uid=0 auid=0 ses=23591 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447213801.277:710175): pid=22261 uid=0 auid=0 ses=23592 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447213801.287:710176): pid=22262 uid=0 auid=0 ses=23591 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447213801.292:710177): pid=22262 uid=0 auid=0 ses=23591 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447213801.292:710178): pid=22261 uid=0 auid=0 ses=23592 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447213801.296:710179): pid=22261 uid=0 auid=0 ses=23592 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447213982.915:710180): pid=22821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=22821 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447213982.915:710181): pid=22821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=22821 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447213982.915:710182): pid=22821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=22821 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447213982.959:710183): pid=22820 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=22821 suid=74 rport=35874 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447213982.960:710184): pid=22820 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=22821 suid=74 rport=35874 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447213983.089:710185): pid=22820 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=35874 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447213983.089:710186): pid=22820 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=35874 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447213983.098:710187): pid=22820 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447213983.099:710188): pid=22820 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22821 suid=74 rport=35874 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447213983.102:710189): pid=22820 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447213983.103:710190): pid=22820 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447213983.103:710191): pid=22820 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23593 res=1
type=USER_ROLE_CHANGE msg=audit(1447213983.174:710192): pid=22820 uid=0 auid=0 ses=23593 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447213983.191:710193): pid=22820 uid=0 auid=0 ses=23593 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447213983.194:710194): pid=22820 uid=0 auid=0 ses=23593 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447213983.194:710195): pid=22820 uid=0 auid=0 ses=23593 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447213983.196:710196): pid=22823 uid=0 auid=0 ses=23593 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=22823 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447213983.196:710197): pid=22823 uid=0 auid=0 ses=23593 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=22823 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447213983.196:710198): pid=22823 uid=0 auid=0 ses=23593 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=22823 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447213983.197:710199): pid=22823 uid=0 auid=0 ses=23593 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447213983.217:710200): pid=22820 uid=0 auid=0 ses=23593 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447213983.217:710201): pid=22820 uid=0 auid=0 ses=23593 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447213983.221:710202): pid=22820 uid=0 auid=0 ses=23593 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447213983.221:710203): pid=22820 uid=0 auid=0 ses=23593 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447213983.222:710204): pid=22820 uid=0 auid=0 ses=23593 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22820 suid=0 rport=35874 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447213983.222:710205): pid=22820 uid=0 auid=0 ses=23593 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=22820 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447213983.222:710206): pid=22820 uid=0 auid=0 ses=23593 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=22820 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447213983.222:710207): pid=22820 uid=0 auid=0 ses=23593 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=22820 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447213983.243:710208): pid=22830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=22830 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447213983.244:710209): pid=22830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=22830 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447213983.244:710210): pid=22830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=22830 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447213983.288:710211): pid=22829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=22830 suid=74 rport=35875 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447213983.288:710212): pid=22829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=22830 suid=74 rport=35875 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447213983.417:710213): pid=22829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=35875 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447213983.417:710214): pid=22829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=35875 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447213983.423:710215): pid=22829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447213983.424:710216): pid=22829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22830 suid=74 rport=35875 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447213983.426:710217): pid=22829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447213983.427:710218): pid=22829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447213983.427:710219): pid=22829 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23594 res=1
type=USER_ROLE_CHANGE msg=audit(1447213983.489:710220): pid=22829 uid=0 auid=0 ses=23594 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447213983.513:710221): pid=22829 uid=0 auid=0 ses=23594 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447213983.517:710222): pid=22829 uid=0 auid=0 ses=23594 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447213983.517:710223): pid=22829 uid=0 auid=0 ses=23594 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447213983.519:710224): pid=22832 uid=0 auid=0 ses=23594 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=22832 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447213983.519:710225): pid=22832 uid=0 auid=0 ses=23594 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=22832 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447213983.519:710226): pid=22832 uid=0 auid=0 ses=23594 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=22832 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447213983.519:710227): pid=22832 uid=0 auid=0 ses=23594 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447213984.799:710228): pid=22829 uid=0 auid=0 ses=23594 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447213984.799:710229): pid=22829 uid=0 auid=0 ses=23594 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447213984.803:710230): pid=22829 uid=0 auid=0 ses=23594 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447213984.803:710231): pid=22829 uid=0 auid=0 ses=23594 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447213984.803:710232): pid=22829 uid=0 auid=0 ses=23594 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22829 suid=0 rport=35875 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447213984.803:710233): pid=22829 uid=0 auid=0 ses=23594 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=22829 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447213984.804:710234): pid=22829 uid=0 auid=0 ses=23594 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=22829 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447213984.804:710235): pid=22829 uid=0 auid=0 ses=23594 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=22829 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447213984.838:710236): pid=22881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=22881 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447213984.838:710237): pid=22881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=22881 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447213984.838:710238): pid=22881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=22881 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447213984.884:710239): pid=22880 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=22881 suid=74 rport=35878 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447213984.884:710240): pid=22880 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=22881 suid=74 rport=35878 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447213985.004:710241): pid=22880 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=35878 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447213985.004:710242): pid=22880 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=35878 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447213985.008:710243): pid=22880 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447213985.009:710244): pid=22880 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22881 suid=74 rport=35878 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447213985.011:710245): pid=22880 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447213985.012:710246): pid=22880 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447213985.012:710247): pid=22880 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23595 res=1
type=USER_ROLE_CHANGE msg=audit(1447213985.080:710248): pid=22880 uid=0 auid=0 ses=23595 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447213985.099:710249): pid=22880 uid=0 auid=0 ses=23595 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447213985.102:710250): pid=22880 uid=0 auid=0 ses=23595 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447213985.102:710251): pid=22880 uid=0 auid=0 ses=23595 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447213985.104:710252): pid=22883 uid=0 auid=0 ses=23595 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=22883 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447213985.104:710253): pid=22883 uid=0 auid=0 ses=23595 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=22883 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447213985.104:710254): pid=22883 uid=0 auid=0 ses=23595 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=22883 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447213985.105:710255): pid=22883 uid=0 auid=0 ses=23595 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447213985.121:710256): pid=22880 uid=0 auid=0 ses=23595 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447213985.121:710257): pid=22880 uid=0 auid=0 ses=23595 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447213985.125:710258): pid=22880 uid=0 auid=0 ses=23595 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447213985.125:710259): pid=22880 uid=0 auid=0 ses=23595 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447213985.125:710260): pid=22880 uid=0 auid=0 ses=23595 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22880 suid=0 rport=35878 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447213985.125:710261): pid=22880 uid=0 auid=0 ses=23595 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=22880 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447213985.126:710262): pid=22880 uid=0 auid=0 ses=23595 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=22880 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447213985.126:710263): pid=22880 uid=0 auid=0 ses=23595 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=22880 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447214401.320:710264): pid=24174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447214401.320:710265): pid=24174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447214401.320:710266): pid=24175 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447214401.320:710267): pid=24175 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447214401.321:710268): pid=24174 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23596 res=1
type=LOGIN msg=audit(1447214401.321:710269): pid=24175 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23597 res=1
type=USER_START msg=audit(1447214401.337:710270): pid=24175 uid=0 auid=0 ses=23597 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447214401.337:710271): pid=24174 uid=0 auid=0 ses=23596 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447214401.338:710272): pid=24175 uid=0 auid=0 ses=23597 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447214401.338:710273): pid=24174 uid=0 auid=0 ses=23596 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447214401.346:710274): pid=24175 uid=0 auid=0 ses=23597 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447214401.347:710275): pid=24175 uid=0 auid=0 ses=23597 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447214401.356:710276): pid=24174 uid=0 auid=0 ses=23596 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447214401.357:710277): pid=24174 uid=0 auid=0 ses=23596 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447214461.373:710278): pid=24377 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447214461.374:710279): pid=24377 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447214461.375:710280): pid=24377 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23598 res=1
type=USER_START msg=audit(1447214461.387:710281): pid=24377 uid=0 auid=0 ses=23598 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447214461.387:710282): pid=24377 uid=0 auid=0 ses=23598 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447214461.413:710283): pid=24377 uid=0 auid=0 ses=23598 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447214461.415:710284): pid=24377 uid=0 auid=0 ses=23598 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447215001.430:710285): pid=26081 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447215001.430:710286): pid=26082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447215001.430:710287): pid=26081 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447215001.430:710288): pid=26082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447215001.430:710289): pid=26081 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23599 res=1
type=LOGIN msg=audit(1447215001.430:710290): pid=26082 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23600 res=1
type=USER_START msg=audit(1447215001.446:710291): pid=26081 uid=0 auid=0 ses=23599 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447215001.447:710292): pid=26081 uid=0 auid=0 ses=23599 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447215001.448:710293): pid=26082 uid=0 auid=0 ses=23600 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447215001.448:710294): pid=26082 uid=0 auid=0 ses=23600 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447215001.458:710295): pid=26081 uid=0 auid=0 ses=23599 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447215001.460:710296): pid=26082 uid=0 auid=0 ses=23600 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447215001.461:710297): pid=26082 uid=0 auid=0 ses=23600 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447215001.461:710298): pid=26081 uid=0 auid=0 ses=23599 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447215182.891:710299): pid=26642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=26642 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447215182.892:710300): pid=26642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=26642 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447215182.892:710301): pid=26642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=26642 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447215182.934:710302): pid=26641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=26642 suid=74 rport=37855 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447215182.935:710303): pid=26641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=26642 suid=74 rport=37855 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447215183.061:710304): pid=26641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=37855 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447215183.061:710305): pid=26641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=37855 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447215183.066:710306): pid=26641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447215183.067:710307): pid=26641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26642 suid=74 rport=37855 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447215183.069:710308): pid=26641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447215183.069:710309): pid=26641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447215183.070:710310): pid=26641 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23601 res=1
type=USER_ROLE_CHANGE msg=audit(1447215183.142:710311): pid=26641 uid=0 auid=0 ses=23601 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447215183.170:710312): pid=26641 uid=0 auid=0 ses=23601 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447215183.173:710313): pid=26641 uid=0 auid=0 ses=23601 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447215183.173:710314): pid=26641 uid=0 auid=0 ses=23601 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447215183.174:710315): pid=26644 uid=0 auid=0 ses=23601 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=26644 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447215183.174:710316): pid=26644 uid=0 auid=0 ses=23601 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=26644 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447215183.174:710317): pid=26644 uid=0 auid=0 ses=23601 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=26644 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447215183.175:710318): pid=26644 uid=0 auid=0 ses=23601 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447215183.193:710319): pid=26641 uid=0 auid=0 ses=23601 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447215183.193:710320): pid=26641 uid=0 auid=0 ses=23601 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447215183.198:710321): pid=26641 uid=0 auid=0 ses=23601 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447215183.198:710322): pid=26641 uid=0 auid=0 ses=23601 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447215183.198:710323): pid=26641 uid=0 auid=0 ses=23601 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26641 suid=0 rport=37855 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447215183.198:710324): pid=26641 uid=0 auid=0 ses=23601 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=26641 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447215183.198:710325): pid=26641 uid=0 auid=0 ses=23601 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=26641 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447215183.198:710326): pid=26641 uid=0 auid=0 ses=23601 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=26641 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447215183.220:710327): pid=26652 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=26652 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447215183.220:710328): pid=26652 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=26652 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447215183.220:710329): pid=26652 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=26652 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447215183.264:710330): pid=26651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=26652 suid=74 rport=37856 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447215183.264:710331): pid=26651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=26652 suid=74 rport=37856 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447215183.393:710332): pid=26651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=37856 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447215183.393:710333): pid=26651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=37856 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447215183.404:710334): pid=26651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447215183.405:710335): pid=26651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26652 suid=74 rport=37856 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447215183.407:710336): pid=26651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447215183.407:710337): pid=26651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447215183.407:710338): pid=26651 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23602 res=1
type=USER_ROLE_CHANGE msg=audit(1447215183.474:710339): pid=26651 uid=0 auid=0 ses=23602 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447215183.497:710340): pid=26651 uid=0 auid=0 ses=23602 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447215183.500:710341): pid=26651 uid=0 auid=0 ses=23602 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447215183.500:710342): pid=26651 uid=0 auid=0 ses=23602 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447215183.501:710343): pid=26654 uid=0 auid=0 ses=23602 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=26654 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447215183.501:710344): pid=26654 uid=0 auid=0 ses=23602 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=26654 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447215183.501:710345): pid=26654 uid=0 auid=0 ses=23602 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=26654 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447215183.502:710346): pid=26654 uid=0 auid=0 ses=23602 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447215184.781:710347): pid=26651 uid=0 auid=0 ses=23602 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447215184.781:710348): pid=26651 uid=0 auid=0 ses=23602 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447215184.785:710349): pid=26651 uid=0 auid=0 ses=23602 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447215184.785:710350): pid=26651 uid=0 auid=0 ses=23602 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447215184.786:710351): pid=26651 uid=0 auid=0 ses=23602 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26651 suid=0 rport=37856 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447215184.787:710352): pid=26651 uid=0 auid=0 ses=23602 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=26651 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447215184.787:710353): pid=26651 uid=0 auid=0 ses=23602 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=26651 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447215184.787:710354): pid=26651 uid=0 auid=0 ses=23602 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=26651 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447215184.818:710355): pid=26704 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=26704 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447215184.819:710356): pid=26704 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=26704 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447215184.819:710357): pid=26704 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=26704 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447215184.865:710358): pid=26703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=26704 suid=74 rport=37859 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447215184.865:710359): pid=26703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=26704 suid=74 rport=37859 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447215184.993:710360): pid=26703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=37859 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447215184.993:710361): pid=26703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=37859 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447215185.003:710362): pid=26703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447215185.003:710363): pid=26703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26704 suid=74 rport=37859 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447215185.005:710364): pid=26703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447215185.005:710365): pid=26703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447215185.005:710366): pid=26703 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23603 res=1
type=USER_ROLE_CHANGE msg=audit(1447215185.070:710367): pid=26703 uid=0 auid=0 ses=23603 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447215185.097:710368): pid=26703 uid=0 auid=0 ses=23603 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447215185.099:710369): pid=26703 uid=0 auid=0 ses=23603 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447215185.099:710370): pid=26703 uid=0 auid=0 ses=23603 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447215185.101:710371): pid=26706 uid=0 auid=0 ses=23603 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=26706 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447215185.101:710372): pid=26706 uid=0 auid=0 ses=23603 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=26706 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447215185.101:710373): pid=26706 uid=0 auid=0 ses=23603 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=26706 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447215185.102:710374): pid=26706 uid=0 auid=0 ses=23603 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447215185.121:710375): pid=26703 uid=0 auid=0 ses=23603 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447215185.121:710376): pid=26703 uid=0 auid=0 ses=23603 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447215185.124:710377): pid=26703 uid=0 auid=0 ses=23603 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447215185.124:710378): pid=26703 uid=0 auid=0 ses=23603 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447215185.124:710379): pid=26703 uid=0 auid=0 ses=23603 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26703 suid=0 rport=37859 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447215185.125:710380): pid=26703 uid=0 auid=0 ses=23603 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=26703 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447215185.125:710381): pid=26703 uid=0 auid=0 ses=23603 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=26703 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447215185.125:710382): pid=26703 uid=0 auid=0 ses=23603 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=26703 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447215601.485:710384): pid=28004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447215601.485:710383): pid=28003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447215601.486:710385): pid=28004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447215601.486:710386): pid=28003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447215601.486:710387): pid=28004 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23604 res=1
type=LOGIN msg=audit(1447215601.486:710388): pid=28003 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23605 res=1
type=USER_START msg=audit(1447215601.503:710389): pid=28003 uid=0 auid=0 ses=23605 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447215601.503:710390): pid=28004 uid=0 auid=0 ses=23604 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447215601.504:710391): pid=28003 uid=0 auid=0 ses=23605 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447215601.504:710392): pid=28004 uid=0 auid=0 ses=23604 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447215601.515:710393): pid=28004 uid=0 auid=0 ses=23604 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447215601.516:710394): pid=28004 uid=0 auid=0 ses=23604 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447215601.519:710395): pid=28003 uid=0 auid=0 ses=23605 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447215601.524:710396): pid=28003 uid=0 auid=0 ses=23605 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1447215902.736:710397): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447216201.537:710398): pid=29786 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447216201.537:710399): pid=29785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447216201.538:710400): pid=29786 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447216201.538:710401): pid=29785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447216201.538:710402): pid=29786 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23606 res=1
type=LOGIN msg=audit(1447216201.538:710403): pid=29785 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23607 res=1
type=USER_START msg=audit(1447216201.556:710404): pid=29785 uid=0 auid=0 ses=23607 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447216201.556:710405): pid=29785 uid=0 auid=0 ses=23607 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447216201.557:710406): pid=29786 uid=0 auid=0 ses=23606 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447216201.557:710407): pid=29786 uid=0 auid=0 ses=23606 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447216201.563:710408): pid=29786 uid=0 auid=0 ses=23606 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447216201.565:710409): pid=29786 uid=0 auid=0 ses=23606 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447216201.569:710410): pid=29785 uid=0 auid=0 ses=23607 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447216201.573:710411): pid=29785 uid=0 auid=0 ses=23607 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447216382.663:710412): pid=30388 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=30388 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447216382.663:710413): pid=30388 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=30388 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447216382.663:710414): pid=30388 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=30388 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447216382.707:710415): pid=30387 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=30388 suid=74 rport=39837 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447216382.708:710416): pid=30387 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=30388 suid=74 rport=39837 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447216382.836:710417): pid=30387 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=39837 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447216382.836:710418): pid=30387 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=39837 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447216382.844:710419): pid=30387 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447216382.846:710420): pid=30387 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=30388 suid=74 rport=39837 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447216382.847:710421): pid=30387 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447216382.847:710422): pid=30387 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447216382.847:710423): pid=30387 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23608 res=1
type=USER_ROLE_CHANGE msg=audit(1447216382.916:710424): pid=30387 uid=0 auid=0 ses=23608 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447216382.938:710425): pid=30387 uid=0 auid=0 ses=23608 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447216382.941:710426): pid=30387 uid=0 auid=0 ses=23608 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447216382.941:710427): pid=30387 uid=0 auid=0 ses=23608 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447216382.943:710428): pid=30390 uid=0 auid=0 ses=23608 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=30390 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447216382.943:710429): pid=30390 uid=0 auid=0 ses=23608 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=30390 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447216382.943:710430): pid=30390 uid=0 auid=0 ses=23608 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=30390 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447216382.944:710431): pid=30390 uid=0 auid=0 ses=23608 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447216382.961:710432): pid=30387 uid=0 auid=0 ses=23608 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447216382.961:710433): pid=30387 uid=0 auid=0 ses=23608 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447216382.963:710434): pid=30387 uid=0 auid=0 ses=23608 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447216382.964:710435): pid=30387 uid=0 auid=0 ses=23608 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447216382.964:710436): pid=30387 uid=0 auid=0 ses=23608 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=30387 suid=0 rport=39837 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447216382.964:710437): pid=30387 uid=0 auid=0 ses=23608 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=30387 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447216382.964:710438): pid=30387 uid=0 auid=0 ses=23608 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=30387 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447216382.965:710439): pid=30387 uid=0 auid=0 ses=23608 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=30387 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447216382.992:710440): pid=30398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=30398 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447216382.992:710441): pid=30398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=30398 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447216382.992:710442): pid=30398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=30398 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447216383.036:710443): pid=30397 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=30398 suid=74 rport=39838 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447216383.037:710444): pid=30397 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=30398 suid=74 rport=39838 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447216383.166:710445): pid=30397 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=39838 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447216383.166:710446): pid=30397 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=39838 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447216383.175:710447): pid=30397 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447216383.176:710448): pid=30397 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=30398 suid=74 rport=39838 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447216383.178:710449): pid=30397 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447216383.179:710450): pid=30397 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447216383.179:710451): pid=30397 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23609 res=1
type=USER_ROLE_CHANGE msg=audit(1447216383.243:710452): pid=30397 uid=0 auid=0 ses=23609 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447216383.265:710453): pid=30397 uid=0 auid=0 ses=23609 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447216383.268:710454): pid=30397 uid=0 auid=0 ses=23609 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447216383.268:710455): pid=30397 uid=0 auid=0 ses=23609 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447216383.270:710456): pid=30400 uid=0 auid=0 ses=23609 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=30400 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447216383.270:710457): pid=30400 uid=0 auid=0 ses=23609 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=30400 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447216383.270:710458): pid=30400 uid=0 auid=0 ses=23609 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=30400 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447216383.271:710459): pid=30400 uid=0 auid=0 ses=23609 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447216384.523:710460): pid=30397 uid=0 auid=0 ses=23609 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447216384.523:710461): pid=30397 uid=0 auid=0 ses=23609 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447216384.527:710462): pid=30397 uid=0 auid=0 ses=23609 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447216384.528:710463): pid=30397 uid=0 auid=0 ses=23609 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447216384.529:710464): pid=30397 uid=0 auid=0 ses=23609 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=30397 suid=0 rport=39838 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447216384.529:710465): pid=30397 uid=0 auid=0 ses=23609 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=30397 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447216384.529:710466): pid=30397 uid=0 auid=0 ses=23609 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=30397 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447216384.529:710467): pid=30397 uid=0 auid=0 ses=23609 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=30397 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447216384.558:710468): pid=30472 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=30472 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447216384.558:710469): pid=30472 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=30472 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447216384.558:710470): pid=30472 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=30472 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447216384.603:710471): pid=30471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=30472 suid=74 rport=39841 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447216384.603:710472): pid=30471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=30472 suid=74 rport=39841 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447216384.722:710473): pid=30471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=39841 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447216384.723:710474): pid=30471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=39841 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447216384.727:710475): pid=30471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447216384.728:710476): pid=30471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=30472 suid=74 rport=39841 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447216384.729:710477): pid=30471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447216384.729:710478): pid=30471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447216384.729:710479): pid=30471 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23610 res=1
type=USER_ROLE_CHANGE msg=audit(1447216384.796:710480): pid=30471 uid=0 auid=0 ses=23610 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447216384.822:710481): pid=30471 uid=0 auid=0 ses=23610 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447216384.824:710482): pid=30471 uid=0 auid=0 ses=23610 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447216384.825:710483): pid=30471 uid=0 auid=0 ses=23610 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447216384.826:710484): pid=30474 uid=0 auid=0 ses=23610 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=30474 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447216384.826:710485): pid=30474 uid=0 auid=0 ses=23610 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=30474 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447216384.826:710486): pid=30474 uid=0 auid=0 ses=23610 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=30474 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447216384.827:710487): pid=30474 uid=0 auid=0 ses=23610 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447216384.844:710488): pid=30471 uid=0 auid=0 ses=23610 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447216384.844:710489): pid=30471 uid=0 auid=0 ses=23610 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447216384.848:710490): pid=30471 uid=0 auid=0 ses=23610 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447216384.848:710491): pid=30471 uid=0 auid=0 ses=23610 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447216384.849:710492): pid=30471 uid=0 auid=0 ses=23610 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=30471 suid=0 rport=39841 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447216384.849:710493): pid=30471 uid=0 auid=0 ses=23610 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=30471 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447216384.849:710494): pid=30471 uid=0 auid=0 ses=23610 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=30471 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447216384.850:710495): pid=30471 uid=0 auid=0 ses=23610 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=30471 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447216801.594:710496): pid=31701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447216801.594:710497): pid=31701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447216801.595:710498): pid=31701 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23611 res=1
type=USER_ACCT msg=audit(1447216801.597:710499): pid=31702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447216801.597:710500): pid=31702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447216801.597:710501): pid=31702 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23612 res=1
type=USER_START msg=audit(1447216801.612:710502): pid=31701 uid=0 auid=0 ses=23611 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447216801.612:710503): pid=31702 uid=0 auid=0 ses=23612 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447216801.612:710504): pid=31701 uid=0 auid=0 ses=23611 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447216801.612:710505): pid=31702 uid=0 auid=0 ses=23612 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447216801.622:710506): pid=31702 uid=0 auid=0 ses=23612 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447216801.624:710507): pid=31702 uid=0 auid=0 ses=23612 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447216801.627:710508): pid=31701 uid=0 auid=0 ses=23611 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447216801.629:710509): pid=31701 uid=0 auid=0 ses=23611 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1447216977.757:710510): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447217401.646:710511): pid=1201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447217401.646:710512): pid=1201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447217401.646:710513): pid=1201 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23613 res=1
type=USER_ACCT msg=audit(1447217401.648:710514): pid=1200 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447217401.648:710515): pid=1200 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447217401.648:710516): pid=1200 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23614 res=1
type=USER_START msg=audit(1447217401.665:710517): pid=1200 uid=0 auid=0 ses=23614 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447217401.665:710518): pid=1201 uid=0 auid=0 ses=23613 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447217401.665:710519): pid=1200 uid=0 auid=0 ses=23614 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447217401.665:710520): pid=1201 uid=0 auid=0 ses=23613 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447217401.672:710521): pid=1201 uid=0 auid=0 ses=23613 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447217401.673:710522): pid=1201 uid=0 auid=0 ses=23613 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447217401.684:710523): pid=1200 uid=0 auid=0 ses=23614 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447217401.685:710524): pid=1200 uid=0 auid=0 ses=23614 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447217582.923:710525): pid=1762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=1762 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447217582.923:710526): pid=1762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=1762 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447217582.923:710527): pid=1762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=1762 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447217582.967:710528): pid=1761 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=1762 suid=74 rport=41817 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447217582.967:710529): pid=1761 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=1762 suid=74 rport=41817 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447217583.096:710530): pid=1761 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=41817 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447217583.096:710531): pid=1761 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=41817 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447217583.105:710532): pid=1761 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447217583.106:710533): pid=1761 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1762 suid=74 rport=41817 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447217583.107:710534): pid=1761 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447217583.107:710535): pid=1761 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447217583.107:710536): pid=1761 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23615 res=1
type=USER_ROLE_CHANGE msg=audit(1447217583.176:710537): pid=1761 uid=0 auid=0 ses=23615 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447217583.199:710538): pid=1761 uid=0 auid=0 ses=23615 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447217583.202:710539): pid=1761 uid=0 auid=0 ses=23615 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447217583.202:710540): pid=1761 uid=0 auid=0 ses=23615 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447217583.204:710541): pid=1764 uid=0 auid=0 ses=23615 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=1764 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447217583.204:710542): pid=1764 uid=0 auid=0 ses=23615 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=1764 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447217583.204:710543): pid=1764 uid=0 auid=0 ses=23615 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=1764 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447217583.206:710544): pid=1764 uid=0 auid=0 ses=23615 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447217583.225:710545): pid=1761 uid=0 auid=0 ses=23615 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447217583.225:710546): pid=1761 uid=0 auid=0 ses=23615 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447217583.229:710547): pid=1761 uid=0 auid=0 ses=23615 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447217583.230:710548): pid=1761 uid=0 auid=0 ses=23615 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447217583.230:710549): pid=1761 uid=0 auid=0 ses=23615 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1761 suid=0 rport=41817 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447217583.230:710550): pid=1761 uid=0 auid=0 ses=23615 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=1761 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447217583.231:710551): pid=1761 uid=0 auid=0 ses=23615 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=1761 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447217583.231:710552): pid=1761 uid=0 auid=0 ses=23615 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=1761 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447217583.253:710553): pid=1772 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=1772 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447217583.253:710554): pid=1772 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=1772 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447217583.253:710555): pid=1772 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=1772 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447217583.299:710556): pid=1771 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=1772 suid=74 rport=41818 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447217583.299:710557): pid=1771 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=1772 suid=74 rport=41818 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447217583.425:710558): pid=1771 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=41818 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447217583.425:710559): pid=1771 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=41818 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447217583.433:710560): pid=1771 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447217583.435:710561): pid=1771 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1772 suid=74 rport=41818 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447217583.436:710562): pid=1771 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447217583.437:710563): pid=1771 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447217583.437:710564): pid=1771 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23616 res=1
type=USER_ROLE_CHANGE msg=audit(1447217583.509:710565): pid=1771 uid=0 auid=0 ses=23616 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447217583.529:710566): pid=1771 uid=0 auid=0 ses=23616 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447217583.531:710567): pid=1771 uid=0 auid=0 ses=23616 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447217583.531:710568): pid=1771 uid=0 auid=0 ses=23616 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447217583.533:710569): pid=1774 uid=0 auid=0 ses=23616 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=1774 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447217583.533:710570): pid=1774 uid=0 auid=0 ses=23616 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=1774 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447217583.533:710571): pid=1774 uid=0 auid=0 ses=23616 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=1774 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447217583.534:710572): pid=1774 uid=0 auid=0 ses=23616 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447217584.811:710573): pid=1771 uid=0 auid=0 ses=23616 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447217584.812:710574): pid=1771 uid=0 auid=0 ses=23616 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447217584.817:710575): pid=1771 uid=0 auid=0 ses=23616 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447217584.817:710576): pid=1771 uid=0 auid=0 ses=23616 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447217584.818:710577): pid=1771 uid=0 auid=0 ses=23616 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1771 suid=0 rport=41818 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447217584.819:710578): pid=1771 uid=0 auid=0 ses=23616 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=1771 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447217584.819:710579): pid=1771 uid=0 auid=0 ses=23616 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=1771 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447217584.819:710580): pid=1771 uid=0 auid=0 ses=23616 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=1771 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447217584.848:710581): pid=1824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=1824 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447217584.848:710582): pid=1824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=1824 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447217584.848:710583): pid=1824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=1824 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447217584.892:710584): pid=1823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=1824 suid=74 rport=41821 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447217584.893:710585): pid=1823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=1824 suid=74 rport=41821 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447217585.022:710586): pid=1823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=41821 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447217585.023:710587): pid=1823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=41821 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447217585.031:710588): pid=1823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447217585.032:710589): pid=1823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1824 suid=74 rport=41821 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447217585.033:710590): pid=1823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447217585.034:710591): pid=1823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447217585.034:710592): pid=1823 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23617 res=1
type=USER_ROLE_CHANGE msg=audit(1447217585.099:710593): pid=1823 uid=0 auid=0 ses=23617 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447217585.125:710594): pid=1823 uid=0 auid=0 ses=23617 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447217585.127:710595): pid=1823 uid=0 auid=0 ses=23617 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447217585.128:710596): pid=1823 uid=0 auid=0 ses=23617 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447217585.129:710597): pid=1826 uid=0 auid=0 ses=23617 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=1826 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447217585.129:710598): pid=1826 uid=0 auid=0 ses=23617 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=1826 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447217585.129:710599): pid=1826 uid=0 auid=0 ses=23617 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=1826 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447217585.130:710600): pid=1826 uid=0 auid=0 ses=23617 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447217585.150:710601): pid=1823 uid=0 auid=0 ses=23617 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447217585.150:710602): pid=1823 uid=0 auid=0 ses=23617 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447217585.156:710603): pid=1823 uid=0 auid=0 ses=23617 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447217585.156:710604): pid=1823 uid=0 auid=0 ses=23617 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447217585.157:710605): pid=1823 uid=0 auid=0 ses=23617 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1823 suid=0 rport=41821 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447217585.157:710606): pid=1823 uid=0 auid=0 ses=23617 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=1823 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447217585.157:710607): pid=1823 uid=0 auid=0 ses=23617 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=1823 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447217585.157:710608): pid=1823 uid=0 auid=0 ses=23617 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=1823 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447218001.712:710609): pid=3118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447218001.712:710610): pid=3118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447218001.713:710611): pid=3118 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23618 res=1
type=USER_ACCT msg=audit(1447218001.716:710612): pid=3119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447218001.716:710613): pid=3119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447218001.716:710614): pid=3119 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23619 res=1
type=USER_START msg=audit(1447218001.734:710615): pid=3118 uid=0 auid=0 ses=23618 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447218001.735:710616): pid=3119 uid=0 auid=0 ses=23619 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447218001.735:710617): pid=3118 uid=0 auid=0 ses=23618 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447218001.735:710618): pid=3119 uid=0 auid=0 ses=23619 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447218001.744:710619): pid=3119 uid=0 auid=0 ses=23619 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447218001.748:710620): pid=3119 uid=0 auid=0 ses=23619 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447218001.751:710621): pid=3118 uid=0 auid=0 ses=23618 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1447218002.736:710622): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_END msg=audit(1447218026.779:710623): pid=3118 uid=0 auid=0 ses=23618 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=USER_ACCT msg=audit(1447218061.792:710624): pid=3354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447218061.792:710625): pid=3354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447218061.793:710626): pid=3354 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23620 res=1
type=USER_START msg=audit(1447218061.804:710627): pid=3354 uid=0 auid=0 ses=23620 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447218061.804:710628): pid=3354 uid=0 auid=0 ses=23620 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447218061.830:710629): pid=3354 uid=0 auid=0 ses=23620 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447218061.831:710630): pid=3354 uid=0 auid=0 ses=23620 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447218601.841:710631): pid=5024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447218601.841:710632): pid=5024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447218601.842:710633): pid=5024 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23621 res=1
type=USER_ACCT msg=audit(1447218601.842:710634): pid=5025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447218601.842:710635): pid=5025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447218601.842:710636): pid=5025 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23622 res=1
type=USER_START msg=audit(1447218601.858:710637): pid=5025 uid=0 auid=0 ses=23622 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447218601.858:710638): pid=5025 uid=0 auid=0 ses=23622 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447218601.861:710639): pid=5024 uid=0 auid=0 ses=23621 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447218601.861:710640): pid=5024 uid=0 auid=0 ses=23621 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447218601.866:710641): pid=5025 uid=0 auid=0 ses=23622 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447218601.867:710642): pid=5025 uid=0 auid=0 ses=23622 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447218601.876:710643): pid=5024 uid=0 auid=0 ses=23621 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447218601.877:710644): pid=5024 uid=0 auid=0 ses=23621 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447218782.773:710645): pid=5585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=5585 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447218782.773:710646): pid=5585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=5585 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447218782.773:710647): pid=5585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=5585 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447218782.817:710648): pid=5584 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=5585 suid=74 rport=43797 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447218782.817:710649): pid=5584 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=5585 suid=74 rport=43797 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447218782.943:710650): pid=5584 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=43797 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447218782.943:710651): pid=5584 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=43797 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447218782.952:710652): pid=5584 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447218782.954:710653): pid=5584 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5585 suid=74 rport=43797 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447218782.954:710654): pid=5584 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447218782.955:710655): pid=5584 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447218782.955:710656): pid=5584 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23623 res=1
type=USER_ROLE_CHANGE msg=audit(1447218783.032:710657): pid=5584 uid=0 auid=0 ses=23623 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447218783.052:710658): pid=5584 uid=0 auid=0 ses=23623 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447218783.055:710659): pid=5584 uid=0 auid=0 ses=23623 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447218783.055:710660): pid=5584 uid=0 auid=0 ses=23623 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447218783.056:710661): pid=5587 uid=0 auid=0 ses=23623 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=5587 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447218783.057:710662): pid=5587 uid=0 auid=0 ses=23623 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=5587 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447218783.057:710663): pid=5587 uid=0 auid=0 ses=23623 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=5587 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447218783.057:710664): pid=5587 uid=0 auid=0 ses=23623 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447218783.076:710665): pid=5584 uid=0 auid=0 ses=23623 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447218783.076:710666): pid=5584 uid=0 auid=0 ses=23623 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447218783.079:710667): pid=5584 uid=0 auid=0 ses=23623 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447218783.080:710668): pid=5584 uid=0 auid=0 ses=23623 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447218783.080:710669): pid=5584 uid=0 auid=0 ses=23623 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5584 suid=0 rport=43797 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447218783.080:710670): pid=5584 uid=0 auid=0 ses=23623 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=5584 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447218783.080:710671): pid=5584 uid=0 auid=0 ses=23623 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=5584 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447218783.080:710672): pid=5584 uid=0 auid=0 ses=23623 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=5584 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447218783.103:710673): pid=5595 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=5595 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447218783.103:710674): pid=5595 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=5595 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447218783.103:710675): pid=5595 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=5595 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447218783.147:710676): pid=5594 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=5595 suid=74 rport=43799 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447218783.147:710677): pid=5594 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=5595 suid=74 rport=43799 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447218783.268:710678): pid=5594 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=43799 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447218783.268:710679): pid=5594 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=43799 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447218783.273:710680): pid=5594 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447218783.273:710681): pid=5594 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5595 suid=74 rport=43799 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447218783.275:710682): pid=5594 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447218783.275:710683): pid=5594 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447218783.275:710684): pid=5594 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23624 res=1
type=USER_ROLE_CHANGE msg=audit(1447218783.341:710685): pid=5594 uid=0 auid=0 ses=23624 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447218783.362:710686): pid=5594 uid=0 auid=0 ses=23624 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447218783.365:710687): pid=5594 uid=0 auid=0 ses=23624 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447218783.365:710688): pid=5594 uid=0 auid=0 ses=23624 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447218783.367:710689): pid=5597 uid=0 auid=0 ses=23624 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=5597 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447218783.367:710690): pid=5597 uid=0 auid=0 ses=23624 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=5597 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447218783.367:710691): pid=5597 uid=0 auid=0 ses=23624 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=5597 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447218783.368:710692): pid=5597 uid=0 auid=0 ses=23624 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447218784.614:710693): pid=5594 uid=0 auid=0 ses=23624 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447218784.614:710694): pid=5594 uid=0 auid=0 ses=23624 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447218784.620:710695): pid=5594 uid=0 auid=0 ses=23624 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447218784.620:710696): pid=5594 uid=0 auid=0 ses=23624 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447218784.620:710697): pid=5594 uid=0 auid=0 ses=23624 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5594 suid=0 rport=43799 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447218784.620:710698): pid=5594 uid=0 auid=0 ses=23624 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=5594 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447218784.620:710699): pid=5594 uid=0 auid=0 ses=23624 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=5594 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447218784.620:710700): pid=5594 uid=0 auid=0 ses=23624 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=5594 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447218784.651:710701): pid=5647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=5647 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447218784.651:710702): pid=5647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=5647 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447218784.651:710703): pid=5647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=5647 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447218784.696:710704): pid=5646 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=5647 suid=74 rport=43800 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447218784.697:710705): pid=5646 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=5647 suid=74 rport=43800 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447218784.826:710706): pid=5646 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=43800 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447218784.826:710707): pid=5646 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=43800 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447218784.835:710708): pid=5646 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447218784.836:710709): pid=5646 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5647 suid=74 rport=43800 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447218784.839:710710): pid=5646 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447218784.839:710711): pid=5646 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447218784.840:710712): pid=5646 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23625 res=1
type=USER_ROLE_CHANGE msg=audit(1447218784.912:710713): pid=5646 uid=0 auid=0 ses=23625 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447218784.938:710714): pid=5646 uid=0 auid=0 ses=23625 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447218784.940:710715): pid=5646 uid=0 auid=0 ses=23625 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447218784.940:710716): pid=5646 uid=0 auid=0 ses=23625 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447218784.942:710717): pid=5649 uid=0 auid=0 ses=23625 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=5649 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447218784.942:710718): pid=5649 uid=0 auid=0 ses=23625 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=5649 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447218784.942:710719): pid=5649 uid=0 auid=0 ses=23625 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=5649 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447218784.943:710720): pid=5649 uid=0 auid=0 ses=23625 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447218784.963:710721): pid=5646 uid=0 auid=0 ses=23625 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447218784.963:710722): pid=5646 uid=0 auid=0 ses=23625 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447218784.968:710723): pid=5646 uid=0 auid=0 ses=23625 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447218784.968:710724): pid=5646 uid=0 auid=0 ses=23625 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447218784.968:710725): pid=5646 uid=0 auid=0 ses=23625 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5646 suid=0 rport=43800 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447218784.968:710726): pid=5646 uid=0 auid=0 ses=23625 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=5646 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447218784.968:710727): pid=5646 uid=0 auid=0 ses=23625 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=5646 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447218784.968:710728): pid=5646 uid=0 auid=0 ses=23625 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=5646 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=SYSCALL msg=audit(1447219039.759:710729): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447219201.898:710730): pid=6951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447219201.898:710731): pid=6951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447219201.899:710732): pid=6952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447219201.899:710733): pid=6951 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23626 res=1
type=CRED_ACQ msg=audit(1447219201.900:710734): pid=6952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447219201.900:710735): pid=6952 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23627 res=1
type=USER_START msg=audit(1447219201.917:710736): pid=6952 uid=0 auid=0 ses=23627 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447219201.918:710737): pid=6951 uid=0 auid=0 ses=23626 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447219201.918:710738): pid=6952 uid=0 auid=0 ses=23627 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447219201.918:710739): pid=6951 uid=0 auid=0 ses=23626 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447219201.926:710740): pid=6952 uid=0 auid=0 ses=23627 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447219201.927:710741): pid=6952 uid=0 auid=0 ses=23627 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447219201.934:710742): pid=6951 uid=0 auid=0 ses=23626 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447219201.935:710743): pid=6951 uid=0 auid=0 ses=23626 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447219801.952:710744): pid=8799 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447219801.952:710745): pid=8798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447219801.952:710746): pid=8799 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447219801.952:710747): pid=8798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447219801.952:710748): pid=8799 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23628 res=1
type=LOGIN msg=audit(1447219801.952:710749): pid=8798 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23629 res=1
type=USER_START msg=audit(1447219801.968:710750): pid=8799 uid=0 auid=0 ses=23628 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447219801.968:710751): pid=8799 uid=0 auid=0 ses=23628 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447219801.968:710752): pid=8798 uid=0 auid=0 ses=23629 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447219801.969:710753): pid=8798 uid=0 auid=0 ses=23629 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447219801.976:710754): pid=8799 uid=0 auid=0 ses=23628 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447219801.976:710755): pid=8799 uid=0 auid=0 ses=23628 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447219801.982:710756): pid=8798 uid=0 auid=0 ses=23629 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447219801.984:710757): pid=8798 uid=0 auid=0 ses=23629 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447219982.775:710758): pid=9360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=9360 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447219982.775:710759): pid=9360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=9360 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447219982.775:710760): pid=9360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=9360 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447219982.820:710761): pid=9359 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=9360 suid=74 rport=45778 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447219982.820:710762): pid=9359 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=9360 suid=74 rport=45778 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447219982.940:710763): pid=9359 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=45778 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447219982.940:710764): pid=9359 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=45778 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447219982.945:710765): pid=9359 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447219982.946:710766): pid=9359 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9360 suid=74 rport=45778 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447219982.947:710767): pid=9359 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447219982.947:710768): pid=9359 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447219982.947:710769): pid=9359 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23630 res=1
type=USER_ROLE_CHANGE msg=audit(1447219983.017:710770): pid=9359 uid=0 auid=0 ses=23630 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447219983.042:710771): pid=9359 uid=0 auid=0 ses=23630 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447219983.044:710772): pid=9359 uid=0 auid=0 ses=23630 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447219983.044:710773): pid=9359 uid=0 auid=0 ses=23630 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447219983.046:710774): pid=9362 uid=0 auid=0 ses=23630 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=9362 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447219983.046:710775): pid=9362 uid=0 auid=0 ses=23630 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=9362 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447219983.046:710776): pid=9362 uid=0 auid=0 ses=23630 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=9362 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447219983.047:710777): pid=9362 uid=0 auid=0 ses=23630 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447219983.067:710778): pid=9359 uid=0 auid=0 ses=23630 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447219983.067:710779): pid=9359 uid=0 auid=0 ses=23630 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447219983.071:710780): pid=9359 uid=0 auid=0 ses=23630 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447219983.071:710781): pid=9359 uid=0 auid=0 ses=23630 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447219983.072:710782): pid=9359 uid=0 auid=0 ses=23630 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9359 suid=0 rport=45778 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447219983.072:710783): pid=9359 uid=0 auid=0 ses=23630 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=9359 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447219983.072:710784): pid=9359 uid=0 auid=0 ses=23630 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=9359 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447219983.072:710785): pid=9359 uid=0 auid=0 ses=23630 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=9359 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447219983.092:710786): pid=9370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=9370 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447219983.092:710787): pid=9370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=9370 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447219983.092:710788): pid=9370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=9370 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447219983.136:710789): pid=9369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=9370 suid=74 rport=45779 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447219983.137:710790): pid=9369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=9370 suid=74 rport=45779 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447219983.265:710791): pid=9369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=45779 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447219983.265:710792): pid=9369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=45779 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447219983.275:710793): pid=9369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447219983.275:710794): pid=9369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9370 suid=74 rport=45779 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447219983.278:710795): pid=9369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447219983.278:710796): pid=9369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447219983.278:710797): pid=9369 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23631 res=1
type=USER_ROLE_CHANGE msg=audit(1447219983.344:710798): pid=9369 uid=0 auid=0 ses=23631 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447219983.366:710799): pid=9369 uid=0 auid=0 ses=23631 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447219983.369:710800): pid=9369 uid=0 auid=0 ses=23631 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447219983.369:710801): pid=9369 uid=0 auid=0 ses=23631 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447219983.370:710802): pid=9372 uid=0 auid=0 ses=23631 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=9372 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447219983.370:710803): pid=9372 uid=0 auid=0 ses=23631 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=9372 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447219983.370:710804): pid=9372 uid=0 auid=0 ses=23631 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=9372 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447219983.371:710805): pid=9372 uid=0 auid=0 ses=23631 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447219984.654:710806): pid=9369 uid=0 auid=0 ses=23631 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447219984.654:710807): pid=9369 uid=0 auid=0 ses=23631 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447219984.657:710808): pid=9369 uid=0 auid=0 ses=23631 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447219984.658:710809): pid=9369 uid=0 auid=0 ses=23631 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447219984.658:710810): pid=9369 uid=0 auid=0 ses=23631 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9369 suid=0 rport=45779 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447219984.658:710811): pid=9369 uid=0 auid=0 ses=23631 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=9369 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447219984.658:710812): pid=9369 uid=0 auid=0 ses=23631 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=9369 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447219984.658:710813): pid=9369 uid=0 auid=0 ses=23631 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=9369 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447219984.687:710814): pid=9422 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=9422 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447219984.687:710815): pid=9422 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=9422 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447219984.687:710816): pid=9422 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=9422 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447219984.731:710817): pid=9421 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=9422 suid=74 rport=45781 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447219984.731:710818): pid=9421 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=9422 suid=74 rport=45781 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447219984.854:710819): pid=9421 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=45781 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447219984.854:710820): pid=9421 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=45781 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447219984.864:710821): pid=9421 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447219984.866:710822): pid=9421 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9422 suid=74 rport=45781 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447219984.867:710823): pid=9421 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447219984.867:710824): pid=9421 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447219984.867:710825): pid=9421 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23632 res=1
type=USER_ROLE_CHANGE msg=audit(1447219984.933:710826): pid=9421 uid=0 auid=0 ses=23632 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447219984.955:710827): pid=9421 uid=0 auid=0 ses=23632 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447219984.959:710828): pid=9421 uid=0 auid=0 ses=23632 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447219984.959:710829): pid=9421 uid=0 auid=0 ses=23632 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447219984.961:710830): pid=9424 uid=0 auid=0 ses=23632 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=9424 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447219984.961:710831): pid=9424 uid=0 auid=0 ses=23632 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=9424 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447219984.961:710832): pid=9424 uid=0 auid=0 ses=23632 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=9424 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447219984.962:710833): pid=9424 uid=0 auid=0 ses=23632 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447219984.981:710834): pid=9421 uid=0 auid=0 ses=23632 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447219984.981:710835): pid=9421 uid=0 auid=0 ses=23632 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447219984.985:710836): pid=9421 uid=0 auid=0 ses=23632 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447219984.985:710837): pid=9421 uid=0 auid=0 ses=23632 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447219984.986:710838): pid=9421 uid=0 auid=0 ses=23632 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9421 suid=0 rport=45781 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447219984.986:710839): pid=9421 uid=0 auid=0 ses=23632 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=9421 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447219984.986:710840): pid=9421 uid=0 auid=0 ses=23632 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=9421 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447219984.986:710841): pid=9421 uid=0 auid=0 ses=23632 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=9421 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=SYSCALL msg=audit(1447220086.721:710842): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447220402.007:710843): pid=10714 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447220402.007:710844): pid=10714 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447220402.007:710845): pid=10715 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447220402.007:710846): pid=10715 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447220402.008:710847): pid=10714 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23633 res=1
type=LOGIN msg=audit(1447220402.008:710848): pid=10715 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23634 res=1
type=USER_START msg=audit(1447220402.028:710849): pid=10715 uid=0 auid=0 ses=23634 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447220402.028:710850): pid=10714 uid=0 auid=0 ses=23633 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447220402.028:710851): pid=10714 uid=0 auid=0 ses=23633 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447220402.029:710852): pid=10715 uid=0 auid=0 ses=23634 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447220402.037:710853): pid=10715 uid=0 auid=0 ses=23634 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447220402.038:710854): pid=10715 uid=0 auid=0 ses=23634 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447220402.046:710855): pid=10714 uid=0 auid=0 ses=23633 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447220402.047:710856): pid=10714 uid=0 auid=0 ses=23633 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447221001.068:710857): pid=12559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447221001.068:710858): pid=12558 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447221001.068:710859): pid=12558 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447221001.068:710860): pid=12559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447221001.068:710861): pid=12559 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23635 res=1
type=LOGIN msg=audit(1447221001.068:710862): pid=12558 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23636 res=1
type=USER_START msg=audit(1447221001.083:710863): pid=12558 uid=0 auid=0 ses=23636 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447221001.084:710864): pid=12558 uid=0 auid=0 ses=23636 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447221001.084:710865): pid=12559 uid=0 auid=0 ses=23635 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447221001.084:710866): pid=12559 uid=0 auid=0 ses=23635 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447221001.092:710867): pid=12559 uid=0 auid=0 ses=23635 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447221001.093:710868): pid=12559 uid=0 auid=0 ses=23635 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447221001.098:710869): pid=12558 uid=0 auid=0 ses=23636 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447221001.100:710870): pid=12558 uid=0 auid=0 ses=23636 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447221183.048:710871): pid=13123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=13123 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447221183.048:710872): pid=13123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=13123 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447221183.048:710873): pid=13123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=13123 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447221183.092:710874): pid=13122 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=13123 suid=74 rport=47759 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447221183.093:710875): pid=13122 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=13123 suid=74 rport=47759 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447221183.218:710876): pid=13122 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=47759 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447221183.218:710877): pid=13122 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=47759 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447221183.224:710878): pid=13122 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447221183.225:710879): pid=13122 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13123 suid=74 rport=47759 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447221183.226:710880): pid=13122 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447221183.226:710881): pid=13122 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447221183.226:710882): pid=13122 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23637 res=1
type=USER_ROLE_CHANGE msg=audit(1447221183.297:710883): pid=13122 uid=0 auid=0 ses=23637 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447221183.318:710884): pid=13122 uid=0 auid=0 ses=23637 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447221183.320:710885): pid=13122 uid=0 auid=0 ses=23637 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447221183.320:710886): pid=13122 uid=0 auid=0 ses=23637 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447221183.322:710887): pid=13125 uid=0 auid=0 ses=23637 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=13125 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447221183.322:710888): pid=13125 uid=0 auid=0 ses=23637 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=13125 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447221183.323:710889): pid=13125 uid=0 auid=0 ses=23637 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=13125 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447221183.324:710890): pid=13125 uid=0 auid=0 ses=23637 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447221183.346:710891): pid=13122 uid=0 auid=0 ses=23637 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447221183.346:710892): pid=13122 uid=0 auid=0 ses=23637 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447221183.351:710893): pid=13122 uid=0 auid=0 ses=23637 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447221183.351:710894): pid=13122 uid=0 auid=0 ses=23637 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447221183.353:710895): pid=13122 uid=0 auid=0 ses=23637 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13122 suid=0 rport=47759 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447221183.353:710896): pid=13122 uid=0 auid=0 ses=23637 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=13122 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447221183.353:710897): pid=13122 uid=0 auid=0 ses=23637 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=13122 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447221183.353:710898): pid=13122 uid=0 auid=0 ses=23637 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=13122 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447221183.372:710899): pid=13133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=13133 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447221183.372:710900): pid=13133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=13133 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447221183.372:710901): pid=13133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=13133 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447221183.417:710902): pid=13132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=13133 suid=74 rport=47760 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447221183.418:710903): pid=13132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=13133 suid=74 rport=47760 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447221183.547:710904): pid=13132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=47760 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447221183.548:710905): pid=13132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=47760 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447221183.557:710906): pid=13132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447221183.557:710907): pid=13132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13133 suid=74 rport=47760 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447221183.558:710908): pid=13132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447221183.559:710909): pid=13132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447221183.559:710910): pid=13132 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23638 res=1
type=USER_ROLE_CHANGE msg=audit(1447221183.628:710911): pid=13132 uid=0 auid=0 ses=23638 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447221183.651:710912): pid=13132 uid=0 auid=0 ses=23638 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447221183.655:710913): pid=13132 uid=0 auid=0 ses=23638 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447221183.655:710914): pid=13132 uid=0 auid=0 ses=23638 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447221183.657:710915): pid=13135 uid=0 auid=0 ses=23638 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=13135 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447221183.657:710916): pid=13135 uid=0 auid=0 ses=23638 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=13135 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447221183.657:710917): pid=13135 uid=0 auid=0 ses=23638 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=13135 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447221183.657:710918): pid=13135 uid=0 auid=0 ses=23638 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447221184.955:710919): pid=13132 uid=0 auid=0 ses=23638 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447221184.955:710920): pid=13132 uid=0 auid=0 ses=23638 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447221184.959:710921): pid=13132 uid=0 auid=0 ses=23638 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447221184.960:710922): pid=13132 uid=0 auid=0 ses=23638 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447221184.960:710923): pid=13132 uid=0 auid=0 ses=23638 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13132 suid=0 rport=47760 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447221184.960:710924): pid=13132 uid=0 auid=0 ses=23638 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=13132 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447221184.960:710925): pid=13132 uid=0 auid=0 ses=23638 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=13132 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447221184.960:710926): pid=13132 uid=0 auid=0 ses=23638 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=13132 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447221184.989:710927): pid=13185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=13185 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447221184.989:710928): pid=13185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=13185 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447221184.989:710929): pid=13185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=13185 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447221185.035:710930): pid=13184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=13185 suid=74 rport=47762 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447221185.035:710931): pid=13184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=13185 suid=74 rport=47762 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447221185.158:710932): pid=13184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=47762 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447221185.158:710933): pid=13184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=47762 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447221185.166:710934): pid=13184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447221185.166:710935): pid=13184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13185 suid=74 rport=47762 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447221185.168:710936): pid=13184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447221185.169:710937): pid=13184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447221185.169:710938): pid=13184 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23639 res=1
type=USER_ROLE_CHANGE msg=audit(1447221185.232:710939): pid=13184 uid=0 auid=0 ses=23639 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447221185.249:710940): pid=13184 uid=0 auid=0 ses=23639 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447221185.252:710941): pid=13184 uid=0 auid=0 ses=23639 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447221185.252:710942): pid=13184 uid=0 auid=0 ses=23639 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447221185.253:710943): pid=13187 uid=0 auid=0 ses=23639 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=13187 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447221185.253:710944): pid=13187 uid=0 auid=0 ses=23639 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=13187 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447221185.253:710945): pid=13187 uid=0 auid=0 ses=23639 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=13187 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447221185.254:710946): pid=13187 uid=0 auid=0 ses=23639 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447221185.269:710947): pid=13184 uid=0 auid=0 ses=23639 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447221185.269:710948): pid=13184 uid=0 auid=0 ses=23639 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447221185.272:710949): pid=13184 uid=0 auid=0 ses=23639 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447221185.272:710950): pid=13184 uid=0 auid=0 ses=23639 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447221185.273:710951): pid=13184 uid=0 auid=0 ses=23639 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13184 suid=0 rport=47762 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447221185.273:710952): pid=13184 uid=0 auid=0 ses=23639 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=13184 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447221185.273:710953): pid=13184 uid=0 auid=0 ses=23639 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=13184 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447221185.273:710954): pid=13184 uid=0 auid=0 ses=23639 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=13184 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447221601.118:710955): pid=14591 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447221601.118:710956): pid=14590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447221601.119:710957): pid=14590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447221601.119:710958): pid=14591 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447221601.120:710959): pid=14591 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23640 res=1
type=LOGIN msg=audit(1447221601.120:710960): pid=14590 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23641 res=1
type=USER_START msg=audit(1447221601.138:710961): pid=14591 uid=0 auid=0 ses=23640 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447221601.139:710962): pid=14591 uid=0 auid=0 ses=23640 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447221601.139:710963): pid=14590 uid=0 auid=0 ses=23641 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447221601.140:710964): pid=14590 uid=0 auid=0 ses=23641 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447221601.150:710965): pid=14591 uid=0 auid=0 ses=23640 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447221601.152:710966): pid=14591 uid=0 auid=0 ses=23640 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447221601.156:710967): pid=14590 uid=0 auid=0 ses=23641 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447221601.163:710968): pid=14590 uid=0 auid=0 ses=23641 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447221661.180:710969): pid=14826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447221661.180:710970): pid=14826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447221661.180:710971): pid=14826 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23642 res=1
type=USER_START msg=audit(1447221661.192:710972): pid=14826 uid=0 auid=0 ses=23642 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447221661.192:710973): pid=14826 uid=0 auid=0 ses=23642 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447221661.216:710974): pid=14826 uid=0 auid=0 ses=23642 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447221661.218:710975): pid=14826 uid=0 auid=0 ses=23642 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447222201.229:710976): pid=16493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447222201.229:710977): pid=16493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447222201.230:710978): pid=16494 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447222201.230:710979): pid=16493 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23643 res=1
type=CRED_ACQ msg=audit(1447222201.230:710980): pid=16494 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447222201.230:710981): pid=16494 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23644 res=1
type=USER_START msg=audit(1447222201.244:710982): pid=16494 uid=0 auid=0 ses=23644 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447222201.244:710983): pid=16493 uid=0 auid=0 ses=23643 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447222201.244:710984): pid=16493 uid=0 auid=0 ses=23643 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447222201.244:710985): pid=16494 uid=0 auid=0 ses=23644 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447222201.253:710986): pid=16494 uid=0 auid=0 ses=23644 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447222201.257:710987): pid=16493 uid=0 auid=0 ses=23643 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447222201.257:710988): pid=16494 uid=0 auid=0 ses=23644 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447222201.261:710989): pid=16493 uid=0 auid=0 ses=23643 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1447222216.750:710990): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=CRYPTO_KEY_USER msg=audit(1447222383.353:710991): pid=17057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=17057 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447222383.353:710992): pid=17057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=17057 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447222383.354:710993): pid=17057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=17057 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447222383.397:710994): pid=17056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=17057 suid=74 rport=49740 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447222383.398:710995): pid=17056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=17057 suid=74 rport=49740 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447222383.523:710996): pid=17056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=49740 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447222383.523:710997): pid=17056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=49740 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447222383.532:710998): pid=17056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447222383.534:710999): pid=17056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=17057 suid=74 rport=49740 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447222383.536:711000): pid=17056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447222383.536:711001): pid=17056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447222383.537:711002): pid=17056 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23645 res=1
type=USER_ROLE_CHANGE msg=audit(1447222383.606:711003): pid=17056 uid=0 auid=0 ses=23645 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447222383.632:711004): pid=17056 uid=0 auid=0 ses=23645 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447222383.635:711005): pid=17056 uid=0 auid=0 ses=23645 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447222383.636:711006): pid=17056 uid=0 auid=0 ses=23645 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447222383.637:711007): pid=17059 uid=0 auid=0 ses=23645 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=17059 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447222383.638:711008): pid=17059 uid=0 auid=0 ses=23645 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=17059 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447222383.638:711009): pid=17059 uid=0 auid=0 ses=23645 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=17059 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447222383.638:711010): pid=17059 uid=0 auid=0 ses=23645 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447222383.657:711011): pid=17056 uid=0 auid=0 ses=23645 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447222383.658:711012): pid=17056 uid=0 auid=0 ses=23645 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447222383.663:711013): pid=17056 uid=0 auid=0 ses=23645 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447222383.663:711014): pid=17056 uid=0 auid=0 ses=23645 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447222383.664:711015): pid=17056 uid=0 auid=0 ses=23645 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=17056 suid=0 rport=49740 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447222383.664:711016): pid=17056 uid=0 auid=0 ses=23645 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=17056 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447222383.664:711017): pid=17056 uid=0 auid=0 ses=23645 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=17056 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447222383.664:711018): pid=17056 uid=0 auid=0 ses=23645 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=17056 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447222383.683:711019): pid=17067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=17067 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447222383.684:711020): pid=17067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=17067 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447222383.684:711021): pid=17067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=17067 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447222383.728:711022): pid=17066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=17067 suid=74 rport=49741 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447222383.728:711023): pid=17066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=17067 suid=74 rport=49741 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447222383.856:711024): pid=17066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=49741 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447222383.856:711025): pid=17066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=49741 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447222383.861:711026): pid=17066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447222383.863:711027): pid=17066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=17067 suid=74 rport=49741 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447222383.865:711028): pid=17066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447222383.865:711029): pid=17066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447222383.865:711030): pid=17066 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23646 res=1
type=USER_ROLE_CHANGE msg=audit(1447222383.933:711031): pid=17066 uid=0 auid=0 ses=23646 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447222383.954:711032): pid=17066 uid=0 auid=0 ses=23646 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447222383.957:711033): pid=17066 uid=0 auid=0 ses=23646 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447222383.957:711034): pid=17066 uid=0 auid=0 ses=23646 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447222383.959:711035): pid=17069 uid=0 auid=0 ses=23646 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=17069 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447222383.959:711036): pid=17069 uid=0 auid=0 ses=23646 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=17069 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447222383.959:711037): pid=17069 uid=0 auid=0 ses=23646 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=17069 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447222383.960:711038): pid=17069 uid=0 auid=0 ses=23646 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447222385.210:711039): pid=17066 uid=0 auid=0 ses=23646 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447222385.210:711040): pid=17066 uid=0 auid=0 ses=23646 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447222385.216:711041): pid=17066 uid=0 auid=0 ses=23646 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447222385.216:711042): pid=17066 uid=0 auid=0 ses=23646 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447222385.216:711043): pid=17066 uid=0 auid=0 ses=23646 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=17066 suid=0 rport=49741 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447222385.216:711044): pid=17066 uid=0 auid=0 ses=23646 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=17066 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447222385.216:711045): pid=17066 uid=0 auid=0 ses=23646 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=17066 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447222385.216:711046): pid=17066 uid=0 auid=0 ses=23646 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=17066 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447222385.251:711047): pid=17119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=17119 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447222385.251:711048): pid=17119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=17119 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447222385.251:711049): pid=17119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=17119 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447222385.296:711050): pid=17118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=17119 suid=74 rport=49743 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447222385.296:711051): pid=17118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=17119 suid=74 rport=49743 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447222385.425:711052): pid=17118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=49743 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447222385.426:711053): pid=17118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=49743 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447222385.434:711054): pid=17118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447222385.435:711055): pid=17118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=17119 suid=74 rport=49743 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447222385.437:711056): pid=17118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447222385.438:711057): pid=17118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447222385.438:711058): pid=17118 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23647 res=1
type=USER_ROLE_CHANGE msg=audit(1447222385.508:711059): pid=17118 uid=0 auid=0 ses=23647 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447222385.530:711060): pid=17118 uid=0 auid=0 ses=23647 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447222385.533:711061): pid=17118 uid=0 auid=0 ses=23647 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447222385.533:711062): pid=17118 uid=0 auid=0 ses=23647 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447222385.534:711063): pid=17121 uid=0 auid=0 ses=23647 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=17121 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447222385.534:711064): pid=17121 uid=0 auid=0 ses=23647 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=17121 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447222385.535:711065): pid=17121 uid=0 auid=0 ses=23647 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=17121 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447222385.535:711066): pid=17121 uid=0 auid=0 ses=23647 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447222385.552:711067): pid=17118 uid=0 auid=0 ses=23647 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447222385.552:711068): pid=17118 uid=0 auid=0 ses=23647 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447222385.555:711069): pid=17118 uid=0 auid=0 ses=23647 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447222385.555:711070): pid=17118 uid=0 auid=0 ses=23647 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447222385.556:711071): pid=17118 uid=0 auid=0 ses=23647 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=17118 suid=0 rport=49743 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447222385.556:711072): pid=17118 uid=0 auid=0 ses=23647 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=17118 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447222385.556:711073): pid=17118 uid=0 auid=0 ses=23647 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=17118 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447222385.556:711074): pid=17118 uid=0 auid=0 ses=23647 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=17118 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447222801.279:711075): pid=18406 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447222801.279:711076): pid=18407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447222801.280:711077): pid=18407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447222801.280:711078): pid=18406 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447222801.281:711079): pid=18407 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23648 res=1
type=LOGIN msg=audit(1447222801.281:711080): pid=18406 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23649 res=1
type=USER_START msg=audit(1447222801.298:711081): pid=18407 uid=0 auid=0 ses=23648 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447222801.299:711082): pid=18407 uid=0 auid=0 ses=23648 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447222801.302:711083): pid=18406 uid=0 auid=0 ses=23649 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447222801.302:711084): pid=18406 uid=0 auid=0 ses=23649 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447222801.308:711085): pid=18407 uid=0 auid=0 ses=23648 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447222801.309:711086): pid=18407 uid=0 auid=0 ses=23648 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447222801.318:711087): pid=18406 uid=0 auid=0 ses=23649 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447222801.320:711088): pid=18406 uid=0 auid=0 ses=23649 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447223401.337:711089): pid=20199 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447223401.337:711090): pid=20198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447223401.337:711091): pid=20199 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447223401.337:711092): pid=20198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447223401.337:711093): pid=20199 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23650 res=1
type=LOGIN msg=audit(1447223401.337:711094): pid=20198 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23651 res=1
type=USER_START msg=audit(1447223401.353:711095): pid=20198 uid=0 auid=0 ses=23651 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447223401.354:711096): pid=20198 uid=0 auid=0 ses=23651 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447223401.355:711097): pid=20199 uid=0 auid=0 ses=23650 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447223401.355:711098): pid=20199 uid=0 auid=0 ses=23650 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447223401.362:711099): pid=20199 uid=0 auid=0 ses=23650 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447223401.368:711100): pid=20198 uid=0 auid=0 ses=23651 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447223401.369:711101): pid=20199 uid=0 auid=0 ses=23650 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447223401.379:711102): pid=20198 uid=0 auid=0 ses=23651 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447223582.664:711103): pid=20764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=20764 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447223582.664:711104): pid=20764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=20764 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447223582.664:711105): pid=20764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=20764 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447223582.708:711106): pid=20763 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=20764 suid=74 rport=51774 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447223582.708:711107): pid=20763 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=20764 suid=74 rport=51774 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447223582.830:711108): pid=20763 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=51774 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447223582.830:711109): pid=20763 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=51774 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447223582.836:711110): pid=20763 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447223582.837:711111): pid=20763 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20764 suid=74 rport=51774 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447223582.838:711112): pid=20763 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447223582.839:711113): pid=20763 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447223582.839:711114): pid=20763 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23652 res=1
type=USER_ROLE_CHANGE msg=audit(1447223582.910:711115): pid=20763 uid=0 auid=0 ses=23652 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447223582.929:711116): pid=20763 uid=0 auid=0 ses=23652 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447223582.931:711117): pid=20763 uid=0 auid=0 ses=23652 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447223582.931:711118): pid=20763 uid=0 auid=0 ses=23652 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447223582.933:711119): pid=20767 uid=0 auid=0 ses=23652 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=20767 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447223582.933:711120): pid=20767 uid=0 auid=0 ses=23652 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=20767 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447223582.933:711121): pid=20767 uid=0 auid=0 ses=23652 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=20767 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447223582.934:711122): pid=20767 uid=0 auid=0 ses=23652 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447223582.955:711123): pid=20763 uid=0 auid=0 ses=23652 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447223582.955:711124): pid=20763 uid=0 auid=0 ses=23652 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447223582.958:711125): pid=20763 uid=0 auid=0 ses=23652 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447223582.958:711126): pid=20763 uid=0 auid=0 ses=23652 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447223582.961:711127): pid=20763 uid=0 auid=0 ses=23652 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20763 suid=0 rport=51774 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447223582.961:711128): pid=20763 uid=0 auid=0 ses=23652 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=20763 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447223582.961:711129): pid=20763 uid=0 auid=0 ses=23652 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=20763 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447223582.961:711130): pid=20763 uid=0 auid=0 ses=23652 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=20763 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447223582.992:711131): pid=20783 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=20783 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447223582.993:711132): pid=20783 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=20783 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447223582.993:711133): pid=20783 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=20783 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447223583.039:711134): pid=20774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=20783 suid=74 rport=51777 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447223583.039:711135): pid=20774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=20783 suid=74 rport=51777 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447223583.164:711136): pid=20774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=51777 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447223583.164:711137): pid=20774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=51777 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447223583.174:711138): pid=20774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447223583.176:711139): pid=20774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20783 suid=74 rport=51777 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447223583.178:711140): pid=20774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447223583.178:711141): pid=20774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447223583.179:711142): pid=20774 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23653 res=1
type=USER_ROLE_CHANGE msg=audit(1447223583.249:711143): pid=20774 uid=0 auid=0 ses=23653 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447223583.272:711144): pid=20774 uid=0 auid=0 ses=23653 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447223583.274:711145): pid=20774 uid=0 auid=0 ses=23653 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447223583.274:711146): pid=20774 uid=0 auid=0 ses=23653 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447223583.276:711147): pid=20816 uid=0 auid=0 ses=23653 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=20816 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447223583.276:711148): pid=20816 uid=0 auid=0 ses=23653 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=20816 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447223583.276:711149): pid=20816 uid=0 auid=0 ses=23653 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=20816 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447223583.277:711150): pid=20816 uid=0 auid=0 ses=23653 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447223584.570:711151): pid=20774 uid=0 auid=0 ses=23653 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447223584.570:711152): pid=20774 uid=0 auid=0 ses=23653 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447223584.574:711153): pid=20774 uid=0 auid=0 ses=23653 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447223584.574:711154): pid=20774 uid=0 auid=0 ses=23653 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447223584.574:711155): pid=20774 uid=0 auid=0 ses=23653 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20774 suid=0 rport=51777 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447223584.574:711156): pid=20774 uid=0 auid=0 ses=23653 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=20774 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447223584.574:711157): pid=20774 uid=0 auid=0 ses=23653 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=20774 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447223584.575:711158): pid=20774 uid=0 auid=0 ses=23653 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=20774 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447223584.605:711159): pid=20878 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=20878 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447223584.606:711160): pid=20878 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=20878 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447223584.606:711161): pid=20878 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=20878 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447223584.650:711162): pid=20877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=20878 suid=74 rport=51779 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447223584.651:711163): pid=20877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=20878 suid=74 rport=51779 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447223584.771:711164): pid=20877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=51779 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447223584.772:711165): pid=20877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=51779 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447223584.778:711166): pid=20877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447223584.780:711167): pid=20877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20878 suid=74 rport=51779 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447223584.780:711168): pid=20877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447223584.781:711169): pid=20877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447223584.781:711170): pid=20877 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23654 res=1
type=USER_ROLE_CHANGE msg=audit(1447223584.846:711171): pid=20877 uid=0 auid=0 ses=23654 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447223584.863:711172): pid=20877 uid=0 auid=0 ses=23654 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447223584.866:711173): pid=20877 uid=0 auid=0 ses=23654 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447223584.866:711174): pid=20877 uid=0 auid=0 ses=23654 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447223584.867:711175): pid=20880 uid=0 auid=0 ses=23654 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=20880 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447223584.867:711176): pid=20880 uid=0 auid=0 ses=23654 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=20880 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447223584.867:711177): pid=20880 uid=0 auid=0 ses=23654 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=20880 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447223584.868:711178): pid=20880 uid=0 auid=0 ses=23654 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447223584.884:711179): pid=20877 uid=0 auid=0 ses=23654 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447223584.885:711180): pid=20877 uid=0 auid=0 ses=23654 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447223584.888:711181): pid=20877 uid=0 auid=0 ses=23654 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447223584.888:711182): pid=20877 uid=0 auid=0 ses=23654 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447223584.888:711183): pid=20877 uid=0 auid=0 ses=23654 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20877 suid=0 rport=51779 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447223584.888:711184): pid=20877 uid=0 auid=0 ses=23654 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=20877 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447223584.889:711185): pid=20877 uid=0 auid=0 ses=23654 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=20877 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447223584.889:711186): pid=20877 uid=0 auid=0 ses=23654 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=20877 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447223771.451:711187): pid=21449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=21449 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447223771.451:711188): pid=21449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=21449 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447223771.451:711189): pid=21449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=21449 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447223771.495:711190): pid=21448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=21449 suid=74 rport=52436 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447223771.495:711191): pid=21448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=21449 suid=74 rport=52436 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447223771.616:711192): pid=21448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52436 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447223771.616:711193): pid=21448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=52436 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447223771.621:711194): pid=21448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447223771.621:711195): pid=21448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21449 suid=74 rport=52436 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447223771.624:711196): pid=21448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447223771.624:711197): pid=21448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447223771.624:711198): pid=21448 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23655 res=1
type=USER_ROLE_CHANGE msg=audit(1447223771.691:711199): pid=21448 uid=0 auid=0 ses=23655 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447223771.709:711200): pid=21448 uid=0 auid=0 ses=23655 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447223771.712:711201): pid=21448 uid=0 auid=0 ses=23655 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447223771.712:711202): pid=21448 uid=0 auid=0 ses=23655 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447223771.713:711203): pid=21451 uid=0 auid=0 ses=23655 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=21451 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447223771.713:711204): pid=21451 uid=0 auid=0 ses=23655 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=21451 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447223771.713:711205): pid=21451 uid=0 auid=0 ses=23655 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=21451 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447223771.714:711206): pid=21451 uid=0 auid=0 ses=23655 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447223771.772:711207): pid=21448 uid=0 auid=0 ses=23655 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447223771.772:711208): pid=21448 uid=0 auid=0 ses=23655 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447223771.776:711209): pid=21448 uid=0 auid=0 ses=23655 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447223771.776:711210): pid=21448 uid=0 auid=0 ses=23655 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447223771.777:711211): pid=21448 uid=0 auid=0 ses=23655 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21448 suid=0 rport=52436 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447223771.777:711212): pid=21448 uid=0 auid=0 ses=23655 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=21448 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447223771.778:711213): pid=21448 uid=0 auid=0 ses=23655 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=21448 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447223771.778:711214): pid=21448 uid=0 auid=0 ses=23655 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=21448 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447223771.801:711215): pid=21459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=21459 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447223771.801:711216): pid=21459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=21459 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447223771.801:711217): pid=21459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=21459 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447223771.846:711218): pid=21458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=21459 suid=74 rport=52437 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447223771.846:711219): pid=21458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=21459 suid=74 rport=52437 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447223771.967:711220): pid=21458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52437 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447223771.967:711221): pid=21458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=52437 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447223771.971:711222): pid=21458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447223771.972:711223): pid=21458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21459 suid=74 rport=52437 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447223771.973:711224): pid=21458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447223771.974:711225): pid=21458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447223771.974:711226): pid=21458 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23656 res=1
type=USER_ROLE_CHANGE msg=audit(1447223772.038:711227): pid=21458 uid=0 auid=0 ses=23656 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447223772.057:711228): pid=21458 uid=0 auid=0 ses=23656 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447223772.059:711229): pid=21458 uid=0 auid=0 ses=23656 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447223772.059:711230): pid=21458 uid=0 auid=0 ses=23656 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447223772.061:711231): pid=21461 uid=0 auid=0 ses=23656 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=21461 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447223772.061:711232): pid=21461 uid=0 auid=0 ses=23656 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=21461 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447223772.061:711233): pid=21461 uid=0 auid=0 ses=23656 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=21461 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447223772.062:711234): pid=21461 uid=0 auid=0 ses=23656 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447223774.208:711235): pid=21458 uid=0 auid=0 ses=23656 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447223774.208:711236): pid=21458 uid=0 auid=0 ses=23656 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447223774.212:711237): pid=21458 uid=0 auid=0 ses=23656 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447223774.212:711238): pid=21458 uid=0 auid=0 ses=23656 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447223774.213:711239): pid=21458 uid=0 auid=0 ses=23656 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21458 suid=0 rport=52437 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447223774.213:711240): pid=21458 uid=0 auid=0 ses=23656 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=21458 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447223774.213:711241): pid=21458 uid=0 auid=0 ses=23656 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=21458 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447223774.213:711242): pid=21458 uid=0 auid=0 ses=23656 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=21458 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447223774.240:711243): pid=22306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=22306 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447223774.241:711244): pid=22306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=22306 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447223774.241:711245): pid=22306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=22306 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447223774.286:711246): pid=22305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=22306 suid=74 rport=52453 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447223774.286:711247): pid=22305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=22306 suid=74 rport=52453 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447223774.410:711248): pid=22305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52453 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447223774.410:711249): pid=22305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=52453 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447223774.418:711250): pid=22305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447223774.418:711251): pid=22305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22306 suid=74 rport=52453 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447223774.419:711252): pid=22305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447223774.419:711253): pid=22305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447223774.419:711254): pid=22305 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23657 res=1
type=USER_ROLE_CHANGE msg=audit(1447223774.487:711255): pid=22305 uid=0 auid=0 ses=23657 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447223774.507:711256): pid=22305 uid=0 auid=0 ses=23657 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447223774.511:711257): pid=22305 uid=0 auid=0 ses=23657 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447223774.511:711258): pid=22305 uid=0 auid=0 ses=23657 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447223774.512:711259): pid=22308 uid=0 auid=0 ses=23657 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=22308 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447223774.512:711260): pid=22308 uid=0 auid=0 ses=23657 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=22308 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447223774.512:711261): pid=22308 uid=0 auid=0 ses=23657 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=22308 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447223774.512:711262): pid=22308 uid=0 auid=0 ses=23657 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447223774.528:711263): pid=22305 uid=0 auid=0 ses=23657 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447223774.528:711264): pid=22305 uid=0 auid=0 ses=23657 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447223774.532:711265): pid=22305 uid=0 auid=0 ses=23657 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447223774.532:711266): pid=22305 uid=0 auid=0 ses=23657 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447223774.532:711267): pid=22305 uid=0 auid=0 ses=23657 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22305 suid=0 rport=52453 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447223774.532:711268): pid=22305 uid=0 auid=0 ses=23657 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=22305 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447223774.532:711269): pid=22305 uid=0 auid=0 ses=23657 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=22305 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447223774.532:711270): pid=22305 uid=0 auid=0 ses=23657 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=22305 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447224001.404:711271): pid=22981 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447224001.404:711272): pid=22981 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447224001.405:711273): pid=22981 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23658 res=1
type=USER_ACCT msg=audit(1447224001.410:711274): pid=22982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447224001.410:711275): pid=22982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447224001.410:711276): pid=22982 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23659 res=1
type=USER_START msg=audit(1447224001.428:711277): pid=22981 uid=0 auid=0 ses=23658 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447224001.428:711278): pid=22982 uid=0 auid=0 ses=23659 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447224001.428:711279): pid=22982 uid=0 auid=0 ses=23659 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447224001.428:711280): pid=22981 uid=0 auid=0 ses=23658 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447224001.439:711281): pid=22982 uid=0 auid=0 ses=23659 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447224001.442:711282): pid=22982 uid=0 auid=0 ses=23659 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447224001.444:711283): pid=22981 uid=0 auid=0 ses=23658 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447224026.473:711284): pid=22981 uid=0 auid=0 ses=23658 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=SYSCALL msg=audit(1447224332.758:711285): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447224601.492:711286): pid=24828 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447224601.492:711287): pid=24827 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447224601.492:711288): pid=24828 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447224601.492:711289): pid=24827 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447224601.493:711290): pid=24828 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23660 res=1
type=LOGIN msg=audit(1447224601.493:711291): pid=24827 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23661 res=1
type=USER_START msg=audit(1447224601.508:711292): pid=24828 uid=0 auid=0 ses=23660 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447224601.508:711293): pid=24827 uid=0 auid=0 ses=23661 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447224601.510:711294): pid=24828 uid=0 auid=0 ses=23660 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447224601.510:711295): pid=24827 uid=0 auid=0 ses=23661 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447224601.517:711296): pid=24828 uid=0 auid=0 ses=23660 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447224601.518:711297): pid=24828 uid=0 auid=0 ses=23660 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447224601.520:711298): pid=24827 uid=0 auid=0 ses=23661 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447224601.523:711299): pid=24827 uid=0 auid=0 ses=23661 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447224783.364:711300): pid=25387 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=25387 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447224783.364:711301): pid=25387 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=25387 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447224783.364:711302): pid=25387 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=25387 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447224783.408:711303): pid=25386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=25387 suid=74 rport=54139 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447224783.408:711304): pid=25386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=25387 suid=74 rport=54139 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447224783.540:711305): pid=25386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=54139 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447224783.540:711306): pid=25386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=54139 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447224783.547:711307): pid=25386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447224783.549:711308): pid=25386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25387 suid=74 rport=54139 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447224783.551:711309): pid=25386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447224783.551:711310): pid=25386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447224783.552:711311): pid=25386 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23662 res=1
type=USER_ROLE_CHANGE msg=audit(1447224783.621:711312): pid=25386 uid=0 auid=0 ses=23662 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447224783.640:711313): pid=25386 uid=0 auid=0 ses=23662 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447224783.643:711314): pid=25386 uid=0 auid=0 ses=23662 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447224783.643:711315): pid=25386 uid=0 auid=0 ses=23662 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447224783.644:711316): pid=25389 uid=0 auid=0 ses=23662 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=25389 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447224783.644:711317): pid=25389 uid=0 auid=0 ses=23662 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=25389 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447224783.644:711318): pid=25389 uid=0 auid=0 ses=23662 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=25389 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447224783.645:711319): pid=25389 uid=0 auid=0 ses=23662 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447224783.664:711320): pid=25386 uid=0 auid=0 ses=23662 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447224783.664:711321): pid=25386 uid=0 auid=0 ses=23662 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447224783.668:711322): pid=25386 uid=0 auid=0 ses=23662 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447224783.668:711323): pid=25386 uid=0 auid=0 ses=23662 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447224783.670:711324): pid=25386 uid=0 auid=0 ses=23662 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25386 suid=0 rport=54139 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447224783.670:711325): pid=25386 uid=0 auid=0 ses=23662 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=25386 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447224783.670:711326): pid=25386 uid=0 auid=0 ses=23662 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=25386 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447224783.670:711327): pid=25386 uid=0 auid=0 ses=23662 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=25386 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447224783.698:711328): pid=25397 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=25397 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447224783.698:711329): pid=25397 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=25397 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447224783.699:711330): pid=25397 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=25397 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447224783.743:711331): pid=25396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=25397 suid=74 rport=54141 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447224783.744:711332): pid=25396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=25397 suid=74 rport=54141 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447224783.872:711333): pid=25396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=54141 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447224783.872:711334): pid=25396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=54141 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447224783.880:711335): pid=25396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447224783.881:711336): pid=25396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25397 suid=74 rport=54141 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447224783.883:711337): pid=25396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447224783.884:711338): pid=25396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447224783.884:711339): pid=25396 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23663 res=1
type=USER_ROLE_CHANGE msg=audit(1447224783.951:711340): pid=25396 uid=0 auid=0 ses=23663 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447224783.969:711341): pid=25396 uid=0 auid=0 ses=23663 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447224783.972:711342): pid=25396 uid=0 auid=0 ses=23663 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447224783.972:711343): pid=25396 uid=0 auid=0 ses=23663 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447224783.974:711344): pid=25399 uid=0 auid=0 ses=23663 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=25399 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447224783.974:711345): pid=25399 uid=0 auid=0 ses=23663 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=25399 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447224783.974:711346): pid=25399 uid=0 auid=0 ses=23663 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=25399 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447224783.976:711347): pid=25399 uid=0 auid=0 ses=23663 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447224785.271:711348): pid=25396 uid=0 auid=0 ses=23663 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447224785.272:711349): pid=25396 uid=0 auid=0 ses=23663 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447224785.279:711350): pid=25396 uid=0 auid=0 ses=23663 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447224785.279:711351): pid=25396 uid=0 auid=0 ses=23663 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447224785.280:711352): pid=25396 uid=0 auid=0 ses=23663 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25396 suid=0 rport=54141 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447224785.280:711353): pid=25396 uid=0 auid=0 ses=23663 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=25396 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447224785.280:711354): pid=25396 uid=0 auid=0 ses=23663 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=25396 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447224785.280:711355): pid=25396 uid=0 auid=0 ses=23663 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=25396 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447224785.307:711356): pid=25450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=25450 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447224785.307:711357): pid=25450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=25450 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447224785.308:711358): pid=25450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=25450 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447224785.352:711359): pid=25449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=25450 suid=74 rport=54142 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447224785.352:711360): pid=25449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=25450 suid=74 rport=54142 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447224785.481:711361): pid=25449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=54142 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447224785.482:711362): pid=25449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=54142 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447224785.490:711363): pid=25449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447224785.490:711364): pid=25449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25450 suid=74 rport=54142 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447224785.492:711365): pid=25449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447224785.493:711366): pid=25449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447224785.493:711367): pid=25449 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23664 res=1
type=USER_ROLE_CHANGE msg=audit(1447224785.557:711368): pid=25449 uid=0 auid=0 ses=23664 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447224785.575:711369): pid=25449 uid=0 auid=0 ses=23664 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447224785.577:711370): pid=25449 uid=0 auid=0 ses=23664 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447224785.577:711371): pid=25449 uid=0 auid=0 ses=23664 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447224785.579:711372): pid=25452 uid=0 auid=0 ses=23664 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=25452 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447224785.579:711373): pid=25452 uid=0 auid=0 ses=23664 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=25452 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447224785.579:711374): pid=25452 uid=0 auid=0 ses=23664 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=25452 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447224785.580:711375): pid=25452 uid=0 auid=0 ses=23664 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447224785.597:711376): pid=25449 uid=0 auid=0 ses=23664 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447224785.597:711377): pid=25449 uid=0 auid=0 ses=23664 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447224785.600:711378): pid=25449 uid=0 auid=0 ses=23664 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447224785.600:711379): pid=25449 uid=0 auid=0 ses=23664 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447224785.601:711380): pid=25449 uid=0 auid=0 ses=23664 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25449 suid=0 rport=54142 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447224785.601:711381): pid=25449 uid=0 auid=0 ses=23664 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=25449 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447224785.601:711382): pid=25449 uid=0 auid=0 ses=23664 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=25449 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447224785.602:711383): pid=25449 uid=0 auid=0 ses=23664 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=25449 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447225201.546:711385): pid=26745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447225201.546:711384): pid=26744 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447225201.546:711386): pid=26745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447225201.546:711387): pid=26744 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447225201.548:711389): pid=26745 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23666 res=1
type=LOGIN msg=audit(1447225201.548:711388): pid=26744 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23665 res=1
type=USER_START msg=audit(1447225201.567:711390): pid=26744 uid=0 auid=0 ses=23665 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447225201.568:711391): pid=26744 uid=0 auid=0 ses=23665 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447225201.568:711392): pid=26745 uid=0 auid=0 ses=23666 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447225201.569:711393): pid=26745 uid=0 auid=0 ses=23666 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447225201.577:711394): pid=26745 uid=0 auid=0 ses=23666 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447225201.578:711395): pid=26745 uid=0 auid=0 ses=23666 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447225201.589:711396): pid=26744 uid=0 auid=0 ses=23665 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447225201.590:711397): pid=26744 uid=0 auid=0 ses=23665 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447225261.605:711398): pid=26980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447225261.605:711399): pid=26980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447225261.606:711400): pid=26980 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23667 res=1
type=USER_START msg=audit(1447225261.616:711401): pid=26980 uid=0 auid=0 ses=23667 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447225261.616:711402): pid=26980 uid=0 auid=0 ses=23667 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447225261.640:711403): pid=26980 uid=0 auid=0 ses=23667 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447225261.642:711404): pid=26980 uid=0 auid=0 ses=23667 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447225449.099:711405): pid=27553 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=27553 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447225449.099:711406): pid=27553 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=27553 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447225449.099:711407): pid=27553 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27553 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447225449.101:711408): pid=27552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-cbc ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=27553 suid=74 rport=40871 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447225449.101:711409): pid=27552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-cbc ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=27553 suid=74 rport=40871 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_AUTH msg=audit(1447225449.184:711410): pid=27552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=40871 acct="svnadm" exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_AUTH msg=audit(1447225449.184:711411): pid=27552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-dss size=1024 fp=41:85:f9:50:1a:0f:bb:e4:07:e8:23:7a:13:fa:b2:e5 rport=40871 acct="svnadm" exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_ACCT msg=audit(1447225449.192:711412): pid=27552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447225449.193:711413): pid=27552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27553 suid=74 rport=40871 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_AUTH msg=audit(1447225449.195:711414): pid=27552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="svnadm" exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447225449.196:711415): pid=27552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=LOGIN msg=audit(1447225449.196:711416): pid=27552 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1001 old-ses=4294967295 ses=23668 res=1
type=USER_ROLE_CHANGE msg=audit(1447225449.264:711417): pid=27552 uid=0 auid=1001 ses=23668 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=USER_START msg=audit(1447225449.283:711418): pid=27552 uid=0 auid=1001 ses=23668 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447225449.283:711419): pid=27552 uid=0 auid=1001 ses=23668 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27552 suid=0 rport=40871 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447225449.283:711420): pid=27555 uid=0 auid=1001 ses=23668 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=27555 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447225449.284:711421): pid=27555 uid=0 auid=1001 ses=23668 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=27555 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447225449.284:711422): pid=27555 uid=0 auid=1001 ses=23668 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27555 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRED_ACQ msg=audit(1447225449.284:711423): pid=27555 uid=0 auid=1001 ses=23668 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447225449.287:711424): pid=27552 uid=0 auid=1001 ses=23668 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1001 exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=USER_START msg=audit(1447225449.288:711425): pid=27552 uid=0 auid=1001 ses=23668 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1001 exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447225449.289:711426): pid=27552 uid=0 auid=1001 ses=23668 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27556 suid=1001  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_END msg=audit(1447225449.306:711427): pid=27552 uid=0 auid=1001 ses=23668 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1001 exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447225449.306:711428): pid=27552 uid=0 auid=1001 ses=23668 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1001 exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447225449.306:711429): pid=27552 uid=0 auid=1001 ses=23668 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27555 suid=1001 rport=40871 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447225449.306:711430): pid=27552 uid=0 auid=1001 ses=23668 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27555 suid=1001  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_END msg=audit(1447225449.309:711431): pid=27552 uid=0 auid=1001 ses=23668 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447225449.309:711432): pid=27552 uid=0 auid=1001 ses=23668 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447225449.309:711433): pid=27552 uid=0 auid=1001 ses=23668 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=27552 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447225449.310:711434): pid=27552 uid=0 auid=1001 ses=23668 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=27552 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447225449.310:711435): pid=27552 uid=0 auid=1001 ses=23668 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27552 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447225449.324:711436): pid=27566 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=27566 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447225449.324:711437): pid=27566 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=27566 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447225449.324:711438): pid=27566 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27566 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447225449.325:711439): pid=27565 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-cbc ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=27566 suid=74 rport=40872 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447225449.325:711440): pid=27565 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-cbc ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=27566 suid=74 rport=40872 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_AUTH msg=audit(1447225449.384:711441): pid=27565 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=40872 acct="svnadm" exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_AUTH msg=audit(1447225449.384:711442): pid=27565 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-dss size=1024 fp=41:85:f9:50:1a:0f:bb:e4:07:e8:23:7a:13:fa:b2:e5 rport=40872 acct="svnadm" exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_ACCT msg=audit(1447225449.392:711443): pid=27565 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447225449.393:711444): pid=27565 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27566 suid=74 rport=40872 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_AUTH msg=audit(1447225449.394:711445): pid=27565 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="svnadm" exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447225449.395:711446): pid=27565 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=LOGIN msg=audit(1447225449.395:711447): pid=27565 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1001 old-ses=4294967295 ses=23669 res=1
type=USER_ROLE_CHANGE msg=audit(1447225449.465:711448): pid=27565 uid=0 auid=1001 ses=23669 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=USER_START msg=audit(1447225449.489:711449): pid=27565 uid=0 auid=1001 ses=23669 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447225449.489:711450): pid=27565 uid=0 auid=1001 ses=23669 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27565 suid=0 rport=40872 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447225449.490:711451): pid=27568 uid=0 auid=1001 ses=23669 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=27568 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447225449.490:711452): pid=27568 uid=0 auid=1001 ses=23669 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=27568 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447225449.490:711453): pid=27568 uid=0 auid=1001 ses=23669 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27568 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRED_ACQ msg=audit(1447225449.490:711454): pid=27568 uid=0 auid=1001 ses=23669 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447225449.493:711455): pid=27565 uid=0 auid=1001 ses=23669 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1001 exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=USER_START msg=audit(1447225449.493:711456): pid=27565 uid=0 auid=1001 ses=23669 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1001 exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447225449.494:711457): pid=27565 uid=0 auid=1001 ses=23669 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27569 suid=1001  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=SYSCALL msg=audit(1447225449.512:711458): arch=c000003e syscall=263 success=yes exit=0 a0=ffffffffffffff9c a1=e670c0 a2=0 a3=7fff212eb9d0 items=2 ppid=27568 pid=27569 auid=1001 uid=1001 gid=1003 euid=1001 suid=1001 fsuid=1001 egid=1003 sgid=1003 fsgid=1003 tty=(none) ses=23669 comm="rm" exe="/usr/bin/rm" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key="delete"
type=CWD msg=audit(1447225449.512:711458):  cwd="/home/svnadm"
type=PATH msg=audit(1447225449.512:711458): item=0 name="/usr/local/test/titan/" inode=9255149 dev=08:02 mode=040777 ouid=0 ogid=0 rdev=00:00 obj=unconfined_u:object_r:usr_t:s0 objtype=PARENT
type=PATH msg=audit(1447225449.512:711458): item=1 name="/usr/local/test/titan/NNI-titan-master-7.6.3-4287.linux-x64.sh" inode=9255147 dev=08:02 mode=0100755 ouid=1001 ogid=1003 rdev=00:00 obj=unconfined_u:object_r:usr_t:s0 objtype=DELETE
type=USER_END msg=audit(1447225449.666:711459): pid=27565 uid=0 auid=1001 ses=23669 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1001 exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447225449.666:711460): pid=27565 uid=0 auid=1001 ses=23669 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1001 exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447225449.666:711461): pid=27565 uid=0 auid=1001 ses=23669 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27568 suid=1001 rport=40872 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447225449.666:711462): pid=27565 uid=0 auid=1001 ses=23669 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27568 suid=1001  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_END msg=audit(1447225449.672:711463): pid=27565 uid=0 auid=1001 ses=23669 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447225449.672:711464): pid=27565 uid=0 auid=1001 ses=23669 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447225449.673:711465): pid=27565 uid=0 auid=1001 ses=23669 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=27565 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447225449.673:711466): pid=27565 uid=0 auid=1001 ses=23669 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=27565 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447225449.673:711467): pid=27565 uid=0 auid=1001 ses=23669 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27565 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447225449.684:711468): pid=27579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=27579 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447225449.684:711469): pid=27579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=27579 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447225449.684:711470): pid=27579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27579 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447225449.685:711471): pid=27576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-cbc ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=27579 suid=74 rport=40873 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447225449.687:711472): pid=27576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-cbc ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=27579 suid=74 rport=40873 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_AUTH msg=audit(1447225449.746:711473): pid=27576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=40873 acct="svnadm" exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_AUTH msg=audit(1447225449.746:711474): pid=27576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-dss size=1024 fp=41:85:f9:50:1a:0f:bb:e4:07:e8:23:7a:13:fa:b2:e5 rport=40873 acct="svnadm" exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_ACCT msg=audit(1447225449.756:711475): pid=27576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447225449.756:711476): pid=27576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27579 suid=74 rport=40873 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_AUTH msg=audit(1447225449.758:711477): pid=27576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="svnadm" exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447225449.758:711478): pid=27576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=LOGIN msg=audit(1447225449.758:711479): pid=27576 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1001 old-ses=4294967295 ses=23670 res=1
type=USER_ROLE_CHANGE msg=audit(1447225449.822:711480): pid=27576 uid=0 auid=1001 ses=23670 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=USER_START msg=audit(1447225449.844:711481): pid=27576 uid=0 auid=1001 ses=23670 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447225449.845:711482): pid=27576 uid=0 auid=1001 ses=23670 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27576 suid=0 rport=40873 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447225449.845:711483): pid=27581 uid=0 auid=1001 ses=23670 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=27581 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447225449.845:711484): pid=27581 uid=0 auid=1001 ses=23670 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=27581 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447225449.845:711485): pid=27581 uid=0 auid=1001 ses=23670 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27581 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRED_ACQ msg=audit(1447225449.845:711486): pid=27581 uid=0 auid=1001 ses=23670 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447225449.847:711487): pid=27576 uid=0 auid=1001 ses=23670 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1001 exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=USER_START msg=audit(1447225449.847:711488): pid=27576 uid=0 auid=1001 ses=23670 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1001 exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447225449.849:711489): pid=27576 uid=0 auid=1001 ses=23670 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27582 suid=1001  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_END msg=audit(1447225465.021:711490): pid=27576 uid=0 auid=1001 ses=23670 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1001 exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447225465.021:711491): pid=27576 uid=0 auid=1001 ses=23670 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1001 exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447225465.022:711492): pid=27576 uid=0 auid=1001 ses=23670 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27581 suid=1001 rport=40873 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447225465.022:711493): pid=27576 uid=0 auid=1001 ses=23670 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27581 suid=1001  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_END msg=audit(1447225465.026:711494): pid=27576 uid=0 auid=1001 ses=23670 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447225465.026:711495): pid=27576 uid=0 auid=1001 ses=23670 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447225465.027:711496): pid=27576 uid=0 auid=1001 ses=23670 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=27576 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447225465.027:711497): pid=27576 uid=0 auid=1001 ses=23670 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=27576 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447225465.027:711498): pid=27576 uid=0 auid=1001 ses=23670 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27576 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447225465.042:711499): pid=27660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=27660 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447225465.042:711500): pid=27660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=27660 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447225465.042:711501): pid=27660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27660 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447225465.043:711502): pid=27659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-cbc ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=27660 suid=74 rport=40874 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447225465.043:711503): pid=27659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-cbc ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=27660 suid=74 rport=40874 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_AUTH msg=audit(1447225465.097:711504): pid=27659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=40874 acct="svnadm" exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_AUTH msg=audit(1447225465.097:711505): pid=27659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-dss size=1024 fp=41:85:f9:50:1a:0f:bb:e4:07:e8:23:7a:13:fa:b2:e5 rport=40874 acct="svnadm" exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_ACCT msg=audit(1447225465.101:711506): pid=27659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447225465.101:711507): pid=27659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27660 suid=74 rport=40874 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_AUTH msg=audit(1447225465.102:711508): pid=27659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="svnadm" exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447225465.103:711509): pid=27659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=LOGIN msg=audit(1447225465.103:711510): pid=27659 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1001 old-ses=4294967295 ses=23671 res=1
type=USER_ROLE_CHANGE msg=audit(1447225465.168:711511): pid=27659 uid=0 auid=1001 ses=23671 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=USER_START msg=audit(1447225465.186:711512): pid=27659 uid=0 auid=1001 ses=23671 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447225465.187:711513): pid=27659 uid=0 auid=1001 ses=23671 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27659 suid=0 rport=40874 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447225465.187:711514): pid=27662 uid=0 auid=1001 ses=23671 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=27662 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447225465.187:711515): pid=27662 uid=0 auid=1001 ses=23671 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=27662 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447225465.187:711516): pid=27662 uid=0 auid=1001 ses=23671 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27662 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRED_ACQ msg=audit(1447225465.187:711517): pid=27662 uid=0 auid=1001 ses=23671 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447225465.189:711518): pid=27659 uid=0 auid=1001 ses=23671 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1001 exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=USER_START msg=audit(1447225465.189:711519): pid=27659 uid=0 auid=1001 ses=23671 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1001 exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447225465.190:711520): pid=27659 uid=0 auid=1001 ses=23671 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27663 suid=1001  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_END msg=audit(1447225465.209:711521): pid=27659 uid=0 auid=1001 ses=23671 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1001 exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447225465.209:711522): pid=27659 uid=0 auid=1001 ses=23671 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1001 exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447225465.209:711523): pid=27659 uid=0 auid=1001 ses=23671 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27662 suid=1001 rport=40874 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447225465.210:711524): pid=27659 uid=0 auid=1001 ses=23671 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27662 suid=1001  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_END msg=audit(1447225465.212:711525): pid=27659 uid=0 auid=1001 ses=23671 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447225465.212:711526): pid=27659 uid=0 auid=1001 ses=23671 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447225465.212:711527): pid=27659 uid=0 auid=1001 ses=23671 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=27659 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447225465.212:711528): pid=27659 uid=0 auid=1001 ses=23671 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=27659 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447225465.213:711529): pid=27659 uid=0 auid=1001 ses=23671 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27659 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447225465.229:711530): pid=27673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=27673 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447225465.229:711531): pid=27673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=27673 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447225465.229:711532): pid=27673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27673 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447225465.230:711533): pid=27671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-cbc ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=27673 suid=74 rport=40875 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447225465.230:711534): pid=27671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-cbc ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=27673 suid=74 rport=40875 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_AUTH msg=audit(1447225465.283:711535): pid=27671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=40875 acct="svnadm" exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_AUTH msg=audit(1447225465.283:711536): pid=27671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-dss size=1024 fp=41:85:f9:50:1a:0f:bb:e4:07:e8:23:7a:13:fa:b2:e5 rport=40875 acct="svnadm" exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_ACCT msg=audit(1447225465.286:711537): pid=27671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447225465.287:711538): pid=27671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27673 suid=74 rport=40875 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_AUTH msg=audit(1447225465.288:711539): pid=27671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="svnadm" exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447225465.288:711540): pid=27671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=LOGIN msg=audit(1447225465.288:711541): pid=27671 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1001 old-ses=4294967295 ses=23672 res=1
type=USER_ROLE_CHANGE msg=audit(1447225465.351:711542): pid=27671 uid=0 auid=1001 ses=23672 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=USER_START msg=audit(1447225465.368:711543): pid=27671 uid=0 auid=1001 ses=23672 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447225465.368:711544): pid=27671 uid=0 auid=1001 ses=23672 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27671 suid=0 rport=40875 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447225465.369:711545): pid=27675 uid=0 auid=1001 ses=23672 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=27675 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447225465.369:711546): pid=27675 uid=0 auid=1001 ses=23672 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=27675 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447225465.369:711547): pid=27675 uid=0 auid=1001 ses=23672 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27675 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRED_ACQ msg=audit(1447225465.369:711548): pid=27675 uid=0 auid=1001 ses=23672 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447225465.371:711549): pid=27671 uid=0 auid=1001 ses=23672 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1001 exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=USER_START msg=audit(1447225465.371:711550): pid=27671 uid=0 auid=1001 ses=23672 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1001 exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447225465.372:711551): pid=27671 uid=0 auid=1001 ses=23672 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27676 suid=1001  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_END msg=audit(1447225465.388:711552): pid=27671 uid=0 auid=1001 ses=23672 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1001 exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447225465.388:711553): pid=27671 uid=0 auid=1001 ses=23672 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1001 exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447225465.388:711554): pid=27671 uid=0 auid=1001 ses=23672 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27675 suid=1001 rport=40875 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447225465.388:711555): pid=27671 uid=0 auid=1001 ses=23672 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27675 suid=1001  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_END msg=audit(1447225465.390:711556): pid=27671 uid=0 auid=1001 ses=23672 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447225465.390:711557): pid=27671 uid=0 auid=1001 ses=23672 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="svnadm" exe="/usr/sbin/sshd" hostname=10.2.1.51 addr=10.2.1.51 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447225465.391:711558): pid=27671 uid=0 auid=1001 ses=23672 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=27671 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447225465.391:711559): pid=27671 uid=0 auid=1001 ses=23672 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=27671 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447225465.391:711560): pid=27671 uid=0 auid=1001 ses=23672 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27671 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.2.1.51 terminal=? res=success'
type=USER_ACCT msg=audit(1447225801.663:711561): pid=28713 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447225801.663:711562): pid=28714 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447225801.664:711563): pid=28713 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447225801.664:711564): pid=28714 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447225801.665:711565): pid=28714 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23673 res=1
type=LOGIN msg=audit(1447225801.665:711566): pid=28713 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23674 res=1
type=USER_START msg=audit(1447225801.684:711567): pid=28713 uid=0 auid=0 ses=23674 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447225801.685:711568): pid=28713 uid=0 auid=0 ses=23674 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447225801.685:711569): pid=28714 uid=0 auid=0 ses=23673 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447225801.686:711570): pid=28714 uid=0 auid=0 ses=23673 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447225801.702:711571): pid=28713 uid=0 auid=0 ses=23674 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1447225801.702:711572): arch=c000003e syscall=59 success=yes exit=0 a0=13cb600 a1=13cafd0 a2=13d4430 a3=7fff08327d40 items=2 ppid=28721 pid=28731 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23673 comm="systemctl" exe="/usr/bin/systemctl" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key="privileged"
type=EXECVE msg=audit(1447225801.702:711572): argc=3 a0="/usr/bin/systemctl" a1="stop" a2="titan"
type=CWD msg=audit(1447225801.702:711572):  cwd="/usr/local/test/titan"
type=PATH msg=audit(1447225801.702:711572): item=0 name="/usr/bin/systemctl" inode=25275302 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:systemd_systemctl_exec_t:s0 objtype=NORMAL
type=PATH msg=audit(1447225801.702:711572): item=1 name=(null) inode=2292 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=USER_END msg=audit(1447225801.703:711573): pid=28713 uid=0 auid=0 ses=23674 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SERVICE_STOP msg=audit(1447225806.751:711574): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="titan" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=SYSCALL msg=audit(1447225811.482:711575): arch=c000003e syscall=59 success=yes exit=0 a0=20212d0 a1=2020290 a2=201fc70 a3=7fff9ba5c020 items=2 ppid=28795 pid=28796 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23673 comm="systemctl" exe="/usr/bin/systemctl" subj=unconfined_u:unconfined_r:rpm_script_t:s0-s0:c0.c1023 key="privileged"
type=EXECVE msg=audit(1447225811.482:711575): argc=3 a0="systemctl" a1="disable" a2="titan"
type=CWD msg=audit(1447225811.482:711575):  cwd="/"
type=PATH msg=audit(1447225811.482:711575): item=0 name="/bin/systemctl" inode=25275302 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:systemd_systemctl_exec_t:s0 objtype=NORMAL
type=PATH msg=audit(1447225811.482:711575): item=1 name=(null) inode=2292 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=SYSCALL msg=audit(1447225811.536:711576): arch=c000003e syscall=59 success=yes exit=0 a0=201fd80 a1=20210b0 a2=2021b30 a3=7fff9ba5c020 items=2 ppid=28795 pid=28806 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23673 comm="systemctl" exe="/usr/bin/systemctl" subj=unconfined_u:unconfined_r:rpm_script_t:s0-s0:c0.c1023 key="privileged"
type=EXECVE msg=audit(1447225811.536:711576): argc=2 a0="systemctl" a1="daemon-reload"
type=CWD msg=audit(1447225811.536:711576):  cwd="/"
type=PATH msg=audit(1447225811.536:711576): item=0 name="/bin/systemctl" inode=25275302 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:systemd_systemctl_exec_t:s0 objtype=NORMAL
type=PATH msg=audit(1447225811.536:711576): item=1 name=(null) inode=2292 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=SYSCALL msg=audit(1447225827.981:711577): arch=c000003e syscall=59 success=yes exit=0 a0=1c2e3e0 a1=1c2dfe0 a2=1c2e0b0 a3=7fff874b2400 items=2 ppid=28909 pid=28912 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23673 comm="systemctl" exe="/usr/bin/systemctl" subj=unconfined_u:unconfined_r:rpm_script_t:s0-s0:c0.c1023 key="privileged"
type=EXECVE msg=audit(1447225827.981:711577): argc=2 a0="systemctl" a1="daemon-reload"
type=CWD msg=audit(1447225827.981:711577):  cwd="/"
type=PATH msg=audit(1447225827.981:711577): item=0 name="/bin/systemctl" inode=25275302 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:systemd_systemctl_exec_t:s0 objtype=NORMAL
type=PATH msg=audit(1447225827.981:711577): item=1 name=(null) inode=2292 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=SYSCALL msg=audit(1447225828.030:711578): arch=c000003e syscall=59 success=yes exit=0 a0=1c2e690 a1=1c2e4d0 a2=1c2e0b0 a3=7fff874b2400 items=2 ppid=28909 pid=28921 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23673 comm="systemctl" exe="/usr/bin/systemctl" subj=unconfined_u:unconfined_r:rpm_script_t:s0-s0:c0.c1023 key="privileged"
type=EXECVE msg=audit(1447225828.030:711578): argc=3 a0="systemctl" a1="enable" a2="titan"
type=CWD msg=audit(1447225828.030:711578):  cwd="/"
type=PATH msg=audit(1447225828.030:711578): item=0 name="/bin/systemctl" inode=25275302 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:systemd_systemctl_exec_t:s0 objtype=NORMAL
type=PATH msg=audit(1447225828.030:711578): item=1 name=(null) inode=2292 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=SYSCALL msg=audit(1447225941.013:711579): arch=c000003e syscall=59 success=yes exit=0 a0=13cb6f0 a1=13c70c0 a2=13d4430 a3=7fff08328070 items=2 ppid=28721 pid=29268 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23673 comm="systemctl" exe="/usr/bin/systemctl" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key="privileged"
type=EXECVE msg=audit(1447225941.013:711579): argc=3 a0="/usr/bin/systemctl" a1="start" a2="titan"
type=CWD msg=audit(1447225941.013:711579):  cwd="/usr/local/test/titan"
type=PATH msg=audit(1447225941.013:711579): item=0 name="/usr/bin/systemctl" inode=25275302 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:systemd_systemctl_exec_t:s0 objtype=NORMAL
type=PATH msg=audit(1447225941.013:711579): item=1 name=(null) inode=2292 dev=08:02 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 objtype=NORMAL
type=SERVICE_START msg=audit(1447225942.051:711580): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="titan" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447225983.479:711581): pid=29486 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=29486 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447225983.480:711582): pid=29486 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=29486 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447225983.480:711583): pid=29486 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=29486 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447225983.524:711584): pid=29485 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=29486 suid=74 rport=56120 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447225983.525:711585): pid=29485 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=29486 suid=74 rport=56120 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447225983.653:711586): pid=29485 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=56120 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447225983.653:711587): pid=29485 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=56120 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447225983.662:711588): pid=29485 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447225983.664:711589): pid=29485 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29486 suid=74 rport=56120 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447225983.666:711590): pid=29485 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447225983.667:711591): pid=29485 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447225983.667:711592): pid=29485 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23675 res=1
type=USER_ROLE_CHANGE msg=audit(1447225983.740:711593): pid=29485 uid=0 auid=0 ses=23675 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447225983.758:711594): pid=29485 uid=0 auid=0 ses=23675 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447225983.763:711595): pid=29485 uid=0 auid=0 ses=23675 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447225983.763:711596): pid=29485 uid=0 auid=0 ses=23675 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447225983.765:711597): pid=29488 uid=0 auid=0 ses=23675 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=29488 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447225983.765:711598): pid=29488 uid=0 auid=0 ses=23675 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=29488 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447225983.765:711599): pid=29488 uid=0 auid=0 ses=23675 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=29488 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447225983.766:711600): pid=29488 uid=0 auid=0 ses=23675 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447225983.786:711601): pid=29485 uid=0 auid=0 ses=23675 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447225983.786:711602): pid=29485 uid=0 auid=0 ses=23675 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447225983.789:711603): pid=29485 uid=0 auid=0 ses=23675 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447225983.789:711604): pid=29485 uid=0 auid=0 ses=23675 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447225983.790:711605): pid=29485 uid=0 auid=0 ses=23675 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29485 suid=0 rport=56120 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447225983.790:711606): pid=29485 uid=0 auid=0 ses=23675 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=29485 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447225983.790:711607): pid=29485 uid=0 auid=0 ses=23675 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=29485 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447225983.790:711608): pid=29485 uid=0 auid=0 ses=23675 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=29485 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447225983.812:711609): pid=29495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=29495 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447225983.812:711610): pid=29495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=29495 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447225983.812:711611): pid=29495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=29495 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447225983.857:711612): pid=29494 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=29495 suid=74 rport=56122 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447225983.858:711613): pid=29494 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=29495 suid=74 rport=56122 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447225983.985:711614): pid=29494 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=56122 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447225983.985:711615): pid=29494 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=56122 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447225983.994:711616): pid=29494 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447225983.995:711617): pid=29494 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29495 suid=74 rport=56122 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447225983.998:711618): pid=29494 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447225983.999:711619): pid=29494 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447225983.999:711620): pid=29494 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23676 res=1
type=USER_ROLE_CHANGE msg=audit(1447225984.065:711621): pid=29494 uid=0 auid=0 ses=23676 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447225984.082:711622): pid=29494 uid=0 auid=0 ses=23676 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447225984.085:711623): pid=29494 uid=0 auid=0 ses=23676 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447225984.085:711624): pid=29494 uid=0 auid=0 ses=23676 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447225984.087:711625): pid=29497 uid=0 auid=0 ses=23676 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=29497 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447225984.087:711626): pid=29497 uid=0 auid=0 ses=23676 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=29497 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447225984.087:711627): pid=29497 uid=0 auid=0 ses=23676 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=29497 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447225984.088:711628): pid=29497 uid=0 auid=0 ses=23676 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447225985.351:711629): pid=29494 uid=0 auid=0 ses=23676 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447225985.351:711630): pid=29494 uid=0 auid=0 ses=23676 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447225985.356:711631): pid=29494 uid=0 auid=0 ses=23676 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447225985.357:711632): pid=29494 uid=0 auid=0 ses=23676 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447225985.357:711633): pid=29494 uid=0 auid=0 ses=23676 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29494 suid=0 rport=56122 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447225985.357:711634): pid=29494 uid=0 auid=0 ses=23676 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=29494 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447225985.357:711635): pid=29494 uid=0 auid=0 ses=23676 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=29494 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447225985.357:711636): pid=29494 uid=0 auid=0 ses=23676 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=29494 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447225985.391:711637): pid=29546 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=29546 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447225985.391:711638): pid=29546 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=29546 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447225985.391:711639): pid=29546 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=29546 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447225985.435:711640): pid=29545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=29546 suid=74 rport=56123 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447225985.435:711641): pid=29545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=29546 suid=74 rport=56123 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447225985.564:711642): pid=29545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=56123 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447225985.564:711643): pid=29545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=56123 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447225985.574:711644): pid=29545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447225985.575:711645): pid=29545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29546 suid=74 rport=56123 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447225985.576:711646): pid=29545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447225985.576:711647): pid=29545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447225985.576:711648): pid=29545 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23677 res=1
type=USER_ROLE_CHANGE msg=audit(1447225985.641:711649): pid=29545 uid=0 auid=0 ses=23677 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447225985.666:711650): pid=29545 uid=0 auid=0 ses=23677 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447225985.670:711651): pid=29545 uid=0 auid=0 ses=23677 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447225985.670:711652): pid=29545 uid=0 auid=0 ses=23677 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447225985.672:711653): pid=29548 uid=0 auid=0 ses=23677 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=29548 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447225985.672:711654): pid=29548 uid=0 auid=0 ses=23677 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=29548 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447225985.672:711655): pid=29548 uid=0 auid=0 ses=23677 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=29548 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447225985.673:711656): pid=29548 uid=0 auid=0 ses=23677 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447225985.692:711657): pid=29545 uid=0 auid=0 ses=23677 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447225985.692:711658): pid=29545 uid=0 auid=0 ses=23677 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447225985.696:711659): pid=29545 uid=0 auid=0 ses=23677 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447225985.696:711660): pid=29545 uid=0 auid=0 ses=23677 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447225985.697:711661): pid=29545 uid=0 auid=0 ses=23677 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29545 suid=0 rport=56123 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447225985.697:711662): pid=29545 uid=0 auid=0 ses=23677 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=29545 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447225985.697:711663): pid=29545 uid=0 auid=0 ses=23677 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=29545 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447225985.697:711664): pid=29545 uid=0 auid=0 ses=23677 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=29545 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_DISP msg=audit(1447226062.070:711665): pid=28714 uid=0 auid=0 ses=23673 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447226062.076:711666): pid=28714 uid=0 auid=0 ses=23673 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447226401.093:711667): pid=30942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447226401.093:711668): pid=30943 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447226401.094:711669): pid=30942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447226401.094:711670): pid=30943 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447226401.094:711671): pid=30943 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23678 res=1
type=LOGIN msg=audit(1447226401.094:711672): pid=30942 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23679 res=1
type=USER_START msg=audit(1447226401.111:711673): pid=30943 uid=0 auid=0 ses=23678 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447226401.111:711674): pid=30943 uid=0 auid=0 ses=23678 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447226401.111:711675): pid=30942 uid=0 auid=0 ses=23679 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447226401.112:711676): pid=30942 uid=0 auid=0 ses=23679 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447226401.120:711677): pid=30943 uid=0 auid=0 ses=23678 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447226401.121:711678): pid=30943 uid=0 auid=0 ses=23678 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447226401.130:711679): pid=30942 uid=0 auid=0 ses=23679 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447226426.156:711680): pid=30942 uid=0 auid=0 ses=23679 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=SYSCALL msg=audit(1447226477.759:711681): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447227001.175:711682): pid=325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447227001.175:711683): pid=326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447227001.175:711684): pid=326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447227001.175:711685): pid=325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447227001.175:711686): pid=326 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23680 res=1
type=LOGIN msg=audit(1447227001.175:711687): pid=325 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23681 res=1
type=USER_START msg=audit(1447227001.192:711688): pid=326 uid=0 auid=0 ses=23680 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447227001.193:711689): pid=325 uid=0 auid=0 ses=23681 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447227001.193:711690): pid=326 uid=0 auid=0 ses=23680 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447227001.193:711691): pid=325 uid=0 auid=0 ses=23681 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447227001.200:711692): pid=326 uid=0 auid=0 ses=23680 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447227001.201:711693): pid=326 uid=0 auid=0 ses=23680 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447227001.210:711694): pid=325 uid=0 auid=0 ses=23681 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447227001.211:711695): pid=325 uid=0 auid=0 ses=23681 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447227182.681:711696): pid=1001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=1001 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447227182.681:711697): pid=1001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=1001 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447227182.681:711698): pid=1001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=1001 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447227182.727:711699): pid=1000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=1001 suid=74 rport=58101 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447227182.727:711700): pid=1000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=1001 suid=74 rport=58101 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447227182.858:711701): pid=1000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=58101 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447227182.858:711702): pid=1000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=58101 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447227182.867:711703): pid=1000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447227182.868:711704): pid=1000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1001 suid=74 rport=58101 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447227182.869:711705): pid=1000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447227182.870:711706): pid=1000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447227182.870:711707): pid=1000 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23682 res=1
type=USER_ROLE_CHANGE msg=audit(1447227182.938:711708): pid=1000 uid=0 auid=0 ses=23682 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447227182.960:711709): pid=1000 uid=0 auid=0 ses=23682 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447227182.964:711710): pid=1000 uid=0 auid=0 ses=23682 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447227182.964:711711): pid=1000 uid=0 auid=0 ses=23682 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447227182.965:711712): pid=1003 uid=0 auid=0 ses=23682 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=1003 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447227182.965:711713): pid=1003 uid=0 auid=0 ses=23682 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=1003 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447227182.965:711714): pid=1003 uid=0 auid=0 ses=23682 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=1003 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447227182.966:711715): pid=1003 uid=0 auid=0 ses=23682 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447227182.986:711716): pid=1000 uid=0 auid=0 ses=23682 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447227182.986:711717): pid=1000 uid=0 auid=0 ses=23682 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447227182.989:711718): pid=1000 uid=0 auid=0 ses=23682 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447227182.989:711719): pid=1000 uid=0 auid=0 ses=23682 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447227182.990:711720): pid=1000 uid=0 auid=0 ses=23682 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1000 suid=0 rport=58101 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447227182.990:711721): pid=1000 uid=0 auid=0 ses=23682 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=1000 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447227182.990:711722): pid=1000 uid=0 auid=0 ses=23682 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=1000 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447227182.990:711723): pid=1000 uid=0 auid=0 ses=23682 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=1000 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447227183.012:711724): pid=1012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=1012 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447227183.012:711725): pid=1012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=1012 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447227183.013:711726): pid=1012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=1012 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447227183.057:711727): pid=1011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=1012 suid=74 rport=58102 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447227183.057:711728): pid=1011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=1012 suid=74 rport=58102 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447227183.185:711729): pid=1011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=58102 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447227183.185:711730): pid=1011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=58102 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447227183.193:711731): pid=1011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447227183.194:711732): pid=1011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1012 suid=74 rport=58102 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447227183.196:711733): pid=1011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447227183.197:711734): pid=1011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447227183.197:711735): pid=1011 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23683 res=1
type=USER_ROLE_CHANGE msg=audit(1447227183.265:711736): pid=1011 uid=0 auid=0 ses=23683 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447227183.283:711737): pid=1011 uid=0 auid=0 ses=23683 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447227183.286:711738): pid=1011 uid=0 auid=0 ses=23683 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447227183.286:711739): pid=1011 uid=0 auid=0 ses=23683 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447227183.288:711740): pid=1016 uid=0 auid=0 ses=23683 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=1016 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447227183.288:711741): pid=1016 uid=0 auid=0 ses=23683 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=1016 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447227183.288:711742): pid=1016 uid=0 auid=0 ses=23683 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=1016 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447227183.290:711743): pid=1016 uid=0 auid=0 ses=23683 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447227184.586:711744): pid=1011 uid=0 auid=0 ses=23683 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447227184.586:711745): pid=1011 uid=0 auid=0 ses=23683 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447227184.590:711746): pid=1011 uid=0 auid=0 ses=23683 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447227184.590:711747): pid=1011 uid=0 auid=0 ses=23683 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447227184.590:711748): pid=1011 uid=0 auid=0 ses=23683 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1011 suid=0 rport=58102 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447227184.590:711749): pid=1011 uid=0 auid=0 ses=23683 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=1011 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447227184.590:711750): pid=1011 uid=0 auid=0 ses=23683 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=1011 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447227184.590:711751): pid=1011 uid=0 auid=0 ses=23683 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=1011 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447227184.621:711752): pid=1067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=1067 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447227184.621:711753): pid=1067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=1067 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447227184.621:711754): pid=1067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=1067 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447227184.666:711755): pid=1066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=1067 suid=74 rport=58104 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447227184.666:711756): pid=1066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=1067 suid=74 rport=58104 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447227184.789:711757): pid=1066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=58104 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447227184.789:711758): pid=1066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=58104 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447227184.796:711759): pid=1066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447227184.796:711760): pid=1066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1067 suid=74 rport=58104 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447227184.797:711761): pid=1066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447227184.797:711762): pid=1066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447227184.797:711763): pid=1066 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23684 res=1
type=USER_ROLE_CHANGE msg=audit(1447227184.861:711764): pid=1066 uid=0 auid=0 ses=23684 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447227184.882:711765): pid=1066 uid=0 auid=0 ses=23684 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447227184.884:711766): pid=1066 uid=0 auid=0 ses=23684 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447227184.884:711767): pid=1066 uid=0 auid=0 ses=23684 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447227184.885:711768): pid=1069 uid=0 auid=0 ses=23684 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=1069 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447227184.885:711769): pid=1069 uid=0 auid=0 ses=23684 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=1069 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447227184.885:711770): pid=1069 uid=0 auid=0 ses=23684 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=1069 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447227184.886:711771): pid=1069 uid=0 auid=0 ses=23684 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447227184.902:711772): pid=1066 uid=0 auid=0 ses=23684 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447227184.902:711773): pid=1066 uid=0 auid=0 ses=23684 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447227184.906:711774): pid=1066 uid=0 auid=0 ses=23684 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447227184.906:711775): pid=1066 uid=0 auid=0 ses=23684 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447227184.906:711776): pid=1066 uid=0 auid=0 ses=23684 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1066 suid=0 rport=58104 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447227184.906:711777): pid=1066 uid=0 auid=0 ses=23684 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=1066 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447227184.906:711778): pid=1066 uid=0 auid=0 ses=23684 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=1066 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447227184.906:711779): pid=1066 uid=0 auid=0 ses=23684 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=1066 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=SYSCALL msg=audit(1447227555.689:711780): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447227601.233:711781): pid=2357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447227601.233:711782): pid=2357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447227601.233:711783): pid=2358 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447227601.233:711784): pid=2358 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447227601.234:711785): pid=2357 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23685 res=1
type=LOGIN msg=audit(1447227601.234:711786): pid=2358 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23686 res=1
type=USER_START msg=audit(1447227601.253:711787): pid=2357 uid=0 auid=0 ses=23685 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447227601.253:711788): pid=2357 uid=0 auid=0 ses=23685 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447227601.255:711789): pid=2358 uid=0 auid=0 ses=23686 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447227601.255:711790): pid=2358 uid=0 auid=0 ses=23686 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447227601.262:711791): pid=2358 uid=0 auid=0 ses=23686 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447227601.263:711792): pid=2358 uid=0 auid=0 ses=23686 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447227601.274:711793): pid=2357 uid=0 auid=0 ses=23685 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447227601.276:711794): pid=2357 uid=0 auid=0 ses=23685 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447228201.290:711795): pid=4205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447228201.290:711796): pid=4204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447228201.290:711797): pid=4205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447228201.290:711798): pid=4204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447228201.291:711799): pid=4205 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23687 res=1
type=LOGIN msg=audit(1447228201.291:711800): pid=4204 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23688 res=1
type=USER_START msg=audit(1447228201.305:711801): pid=4205 uid=0 auid=0 ses=23687 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447228201.305:711802): pid=4204 uid=0 auid=0 ses=23688 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447228201.305:711803): pid=4204 uid=0 auid=0 ses=23688 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447228201.305:711804): pid=4205 uid=0 auid=0 ses=23687 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447228201.313:711805): pid=4205 uid=0 auid=0 ses=23687 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447228201.315:711806): pid=4205 uid=0 auid=0 ses=23687 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447228201.319:711807): pid=4204 uid=0 auid=0 ses=23688 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447228201.322:711808): pid=4204 uid=0 auid=0 ses=23688 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447228382.680:711809): pid=4769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=4769 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447228382.680:711810): pid=4769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=4769 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447228382.680:711811): pid=4769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=4769 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447228382.725:711812): pid=4768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=4769 suid=74 rport=60080 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447228382.725:711813): pid=4768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=4769 suid=74 rport=60080 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447228382.847:711814): pid=4768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60080 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447228382.847:711815): pid=4768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=60080 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447228382.853:711816): pid=4768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447228382.854:711817): pid=4768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4769 suid=74 rport=60080 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447228382.856:711818): pid=4768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447228382.857:711819): pid=4768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447228382.857:711820): pid=4768 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23689 res=1
type=USER_ROLE_CHANGE msg=audit(1447228382.924:711821): pid=4768 uid=0 auid=0 ses=23689 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447228382.946:711822): pid=4768 uid=0 auid=0 ses=23689 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447228382.949:711823): pid=4768 uid=0 auid=0 ses=23689 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447228382.949:711824): pid=4768 uid=0 auid=0 ses=23689 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447228382.951:711825): pid=4771 uid=0 auid=0 ses=23689 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=4771 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447228382.951:711826): pid=4771 uid=0 auid=0 ses=23689 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=4771 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447228382.951:711827): pid=4771 uid=0 auid=0 ses=23689 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=4771 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447228382.951:711828): pid=4771 uid=0 auid=0 ses=23689 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447228382.971:711829): pid=4768 uid=0 auid=0 ses=23689 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447228382.971:711830): pid=4768 uid=0 auid=0 ses=23689 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447228382.975:711831): pid=4768 uid=0 auid=0 ses=23689 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447228382.975:711832): pid=4768 uid=0 auid=0 ses=23689 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447228382.976:711833): pid=4768 uid=0 auid=0 ses=23689 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4768 suid=0 rport=60080 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447228382.976:711834): pid=4768 uid=0 auid=0 ses=23689 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=4768 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447228382.976:711835): pid=4768 uid=0 auid=0 ses=23689 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=4768 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447228382.976:711836): pid=4768 uid=0 auid=0 ses=23689 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=4768 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447228383.000:711837): pid=4779 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=4779 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447228383.000:711838): pid=4779 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=4779 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447228383.001:711839): pid=4779 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=4779 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447228383.046:711840): pid=4778 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=4779 suid=74 rport=60083 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447228383.047:711841): pid=4778 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=4779 suid=74 rport=60083 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447228383.173:711842): pid=4778 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60083 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447228383.173:711843): pid=4778 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=60083 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447228383.181:711844): pid=4778 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447228383.181:711845): pid=4778 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4779 suid=74 rport=60083 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447228383.184:711846): pid=4778 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447228383.184:711847): pid=4778 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447228383.184:711848): pid=4778 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23690 res=1
type=USER_ROLE_CHANGE msg=audit(1447228383.248:711849): pid=4778 uid=0 auid=0 ses=23690 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447228383.267:711850): pid=4778 uid=0 auid=0 ses=23690 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447228383.270:711851): pid=4778 uid=0 auid=0 ses=23690 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447228383.270:711852): pid=4778 uid=0 auid=0 ses=23690 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447228383.271:711853): pid=4781 uid=0 auid=0 ses=23690 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=4781 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447228383.271:711854): pid=4781 uid=0 auid=0 ses=23690 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=4781 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447228383.271:711855): pid=4781 uid=0 auid=0 ses=23690 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=4781 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447228383.272:711856): pid=4781 uid=0 auid=0 ses=23690 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447228384.553:711857): pid=4778 uid=0 auid=0 ses=23690 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447228384.553:711858): pid=4778 uid=0 auid=0 ses=23690 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447228384.559:711859): pid=4778 uid=0 auid=0 ses=23690 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447228384.560:711860): pid=4778 uid=0 auid=0 ses=23690 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447228384.560:711861): pid=4778 uid=0 auid=0 ses=23690 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4778 suid=0 rport=60083 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447228384.561:711862): pid=4778 uid=0 auid=0 ses=23690 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=4778 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447228384.561:711863): pid=4778 uid=0 auid=0 ses=23690 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=4778 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447228384.561:711864): pid=4778 uid=0 auid=0 ses=23690 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=4778 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447228384.592:711865): pid=4831 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=4831 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447228384.592:711866): pid=4831 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=4831 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447228384.592:711867): pid=4831 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=4831 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447228384.638:711868): pid=4830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=4831 suid=74 rport=60084 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447228384.638:711869): pid=4830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=4831 suid=74 rport=60084 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447228384.758:711870): pid=4830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60084 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447228384.758:711871): pid=4830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=60084 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447228384.763:711872): pid=4830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447228384.764:711873): pid=4830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4831 suid=74 rport=60084 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447228384.765:711874): pid=4830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447228384.765:711875): pid=4830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447228384.765:711876): pid=4830 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23691 res=1
type=USER_ROLE_CHANGE msg=audit(1447228384.832:711877): pid=4830 uid=0 auid=0 ses=23691 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447228384.852:711878): pid=4830 uid=0 auid=0 ses=23691 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447228384.854:711879): pid=4830 uid=0 auid=0 ses=23691 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447228384.854:711880): pid=4830 uid=0 auid=0 ses=23691 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447228384.856:711881): pid=4833 uid=0 auid=0 ses=23691 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=4833 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447228384.856:711882): pid=4833 uid=0 auid=0 ses=23691 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=4833 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447228384.856:711883): pid=4833 uid=0 auid=0 ses=23691 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=4833 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447228384.857:711884): pid=4833 uid=0 auid=0 ses=23691 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447228384.873:711885): pid=4830 uid=0 auid=0 ses=23691 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447228384.873:711886): pid=4830 uid=0 auid=0 ses=23691 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447228384.877:711887): pid=4830 uid=0 auid=0 ses=23691 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447228384.877:711888): pid=4830 uid=0 auid=0 ses=23691 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447228384.878:711889): pid=4830 uid=0 auid=0 ses=23691 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4830 suid=0 rport=60084 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447228384.878:711890): pid=4830 uid=0 auid=0 ses=23691 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=4830 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447228384.878:711891): pid=4830 uid=0 auid=0 ses=23691 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=4830 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447228384.878:711892): pid=4830 uid=0 auid=0 ses=23691 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=4830 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447228801.344:711894): pid=6121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447228801.344:711893): pid=6122 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447228801.344:711895): pid=6121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447228801.344:711896): pid=6122 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447228801.345:711897): pid=6122 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23692 res=1
type=LOGIN msg=audit(1447228801.345:711898): pid=6121 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23693 res=1
type=USER_START msg=audit(1447228801.367:711899): pid=6122 uid=0 auid=0 ses=23692 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447228801.367:711900): pid=6121 uid=0 auid=0 ses=23693 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447228801.367:711901): pid=6121 uid=0 auid=0 ses=23693 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447228801.367:711902): pid=6122 uid=0 auid=0 ses=23692 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447228801.380:711903): pid=6122 uid=0 auid=0 ses=23692 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447228801.383:711904): pid=6122 uid=0 auid=0 ses=23692 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447228801.387:711905): pid=6121 uid=0 auid=0 ses=23693 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447228826.414:711906): pid=6121 uid=0 auid=0 ses=23693 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=USER_ACCT msg=audit(1447228861.426:711907): pid=6356 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447228861.426:711908): pid=6356 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447228861.426:711909): pid=6356 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23694 res=1
type=USER_START msg=audit(1447228861.436:711910): pid=6356 uid=0 auid=0 ses=23694 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447228861.436:711911): pid=6356 uid=0 auid=0 ses=23694 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447228861.460:711912): pid=6356 uid=0 auid=0 ses=23694 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447228861.462:711913): pid=6356 uid=0 auid=0 ses=23694 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447229401.477:711914): pid=8026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447229401.477:711915): pid=8025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447229401.477:711916): pid=8025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447229401.477:711917): pid=8026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447229401.477:711918): pid=8026 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23695 res=1
type=LOGIN msg=audit(1447229401.477:711919): pid=8025 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23696 res=1
type=USER_START msg=audit(1447229401.490:711920): pid=8025 uid=0 auid=0 ses=23696 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447229401.490:711921): pid=8025 uid=0 auid=0 ses=23696 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447229401.491:711922): pid=8026 uid=0 auid=0 ses=23695 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447229401.491:711923): pid=8026 uid=0 auid=0 ses=23695 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447229401.499:711924): pid=8026 uid=0 auid=0 ses=23695 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447229401.500:711925): pid=8026 uid=0 auid=0 ses=23695 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447229401.502:711926): pid=8025 uid=0 auid=0 ses=23696 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447229401.506:711927): pid=8025 uid=0 auid=0 ses=23696 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447229583.254:711928): pid=8597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=8597 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447229583.254:711929): pid=8597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=8597 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447229583.255:711930): pid=8597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=8597 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447229583.299:711931): pid=8596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=8597 suid=74 rport=62063 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447229583.299:711932): pid=8596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=8597 suid=74 rport=62063 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447229583.429:711933): pid=8596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=62063 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447229583.429:711934): pid=8596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=62063 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447229583.438:711935): pid=8596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447229583.439:711936): pid=8596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8597 suid=74 rport=62063 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447229583.442:711937): pid=8596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447229583.442:711938): pid=8596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447229583.442:711939): pid=8596 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23697 res=1
type=USER_ROLE_CHANGE msg=audit(1447229583.510:711940): pid=8596 uid=0 auid=0 ses=23697 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447229583.530:711941): pid=8596 uid=0 auid=0 ses=23697 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447229583.533:711942): pid=8596 uid=0 auid=0 ses=23697 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447229583.533:711943): pid=8596 uid=0 auid=0 ses=23697 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447229583.534:711944): pid=8599 uid=0 auid=0 ses=23697 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=8599 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447229583.535:711945): pid=8599 uid=0 auid=0 ses=23697 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=8599 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447229583.535:711946): pid=8599 uid=0 auid=0 ses=23697 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=8599 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447229583.536:711947): pid=8599 uid=0 auid=0 ses=23697 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447229583.555:711948): pid=8596 uid=0 auid=0 ses=23697 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447229583.555:711949): pid=8596 uid=0 auid=0 ses=23697 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447229583.560:711950): pid=8596 uid=0 auid=0 ses=23697 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447229583.560:711951): pid=8596 uid=0 auid=0 ses=23697 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447229583.561:711952): pid=8596 uid=0 auid=0 ses=23697 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8596 suid=0 rport=62063 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447229583.561:711953): pid=8596 uid=0 auid=0 ses=23697 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=8596 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447229583.561:711954): pid=8596 uid=0 auid=0 ses=23697 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=8596 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447229583.561:711955): pid=8596 uid=0 auid=0 ses=23697 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=8596 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447229583.581:711956): pid=8607 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=8607 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447229583.581:711957): pid=8607 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=8607 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447229583.582:711958): pid=8607 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=8607 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447229583.625:711959): pid=8606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=8607 suid=74 rport=62064 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447229583.626:711960): pid=8606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=8607 suid=74 rport=62064 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447229583.753:711961): pid=8606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=62064 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447229583.753:711962): pid=8606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=62064 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447229583.764:711963): pid=8606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447229583.768:711964): pid=8606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8607 suid=74 rport=62064 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447229583.770:711965): pid=8606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447229583.770:711966): pid=8606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447229583.770:711967): pid=8606 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23698 res=1
type=USER_ROLE_CHANGE msg=audit(1447229583.834:711968): pid=8606 uid=0 auid=0 ses=23698 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447229583.859:711969): pid=8606 uid=0 auid=0 ses=23698 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447229583.862:711970): pid=8606 uid=0 auid=0 ses=23698 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447229583.862:711971): pid=8606 uid=0 auid=0 ses=23698 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447229583.863:711972): pid=8609 uid=0 auid=0 ses=23698 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=8609 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447229583.863:711973): pid=8609 uid=0 auid=0 ses=23698 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=8609 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447229583.863:711974): pid=8609 uid=0 auid=0 ses=23698 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=8609 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447229583.864:711975): pid=8609 uid=0 auid=0 ses=23698 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447229585.139:711976): pid=8606 uid=0 auid=0 ses=23698 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447229585.139:711977): pid=8606 uid=0 auid=0 ses=23698 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447229585.146:711978): pid=8606 uid=0 auid=0 ses=23698 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447229585.146:711979): pid=8606 uid=0 auid=0 ses=23698 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447229585.146:711980): pid=8606 uid=0 auid=0 ses=23698 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8606 suid=0 rport=62064 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447229585.146:711981): pid=8606 uid=0 auid=0 ses=23698 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=8606 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447229585.146:711982): pid=8606 uid=0 auid=0 ses=23698 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=8606 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447229585.146:711983): pid=8606 uid=0 auid=0 ses=23698 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=8606 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447229585.178:711984): pid=8659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=8659 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447229585.178:711985): pid=8659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=8659 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447229585.179:711986): pid=8659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=8659 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447229585.223:711987): pid=8658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=8659 suid=74 rport=62065 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447229585.224:711988): pid=8658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=8659 suid=74 rport=62065 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447229585.351:711989): pid=8658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=62065 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447229585.351:711990): pid=8658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=62065 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447229585.360:711991): pid=8658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447229585.361:711992): pid=8658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8659 suid=74 rport=62065 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447229585.364:711993): pid=8658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447229585.364:711994): pid=8658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447229585.364:711995): pid=8658 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23699 res=1
type=USER_ROLE_CHANGE msg=audit(1447229585.426:711996): pid=8658 uid=0 auid=0 ses=23699 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447229585.449:711997): pid=8658 uid=0 auid=0 ses=23699 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447229585.453:711998): pid=8658 uid=0 auid=0 ses=23699 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447229585.453:711999): pid=8658 uid=0 auid=0 ses=23699 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447229585.454:712000): pid=8661 uid=0 auid=0 ses=23699 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=8661 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447229585.454:712001): pid=8661 uid=0 auid=0 ses=23699 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=8661 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447229585.454:712002): pid=8661 uid=0 auid=0 ses=23699 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=8661 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447229585.455:712003): pid=8661 uid=0 auid=0 ses=23699 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447229585.472:712004): pid=8658 uid=0 auid=0 ses=23699 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447229585.473:712005): pid=8658 uid=0 auid=0 ses=23699 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447229585.476:712006): pid=8658 uid=0 auid=0 ses=23699 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447229585.476:712007): pid=8658 uid=0 auid=0 ses=23699 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447229585.477:712008): pid=8658 uid=0 auid=0 ses=23699 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8658 suid=0 rport=62065 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447229585.477:712009): pid=8658 uid=0 auid=0 ses=23699 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=8658 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447229585.477:712010): pid=8658 uid=0 auid=0 ses=23699 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=8658 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447229585.477:712011): pid=8658 uid=0 auid=0 ses=23699 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=8658 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=SYSCALL msg=audit(1447229715.744:712012): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447230001.528:712013): pid=9887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447230001.529:712014): pid=9887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447230001.530:712015): pid=9887 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23700 res=1
type=USER_ACCT msg=audit(1447230001.547:712016): pid=9886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447230001.547:712017): pid=9886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447230001.547:712018): pid=9886 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23701 res=1
type=USER_START msg=audit(1447230001.562:712019): pid=9886 uid=0 auid=0 ses=23701 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447230001.563:712020): pid=9886 uid=0 auid=0 ses=23701 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447230001.564:712021): pid=9887 uid=0 auid=0 ses=23700 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447230001.564:712022): pid=9887 uid=0 auid=0 ses=23700 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447230001.589:712023): pid=9886 uid=0 auid=0 ses=23701 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447230001.592:712024): pid=9887 uid=0 auid=0 ses=23700 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447230001.594:712025): pid=9886 uid=0 auid=0 ses=23701 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447230001.595:712026): pid=9887 uid=0 auid=0 ses=23700 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447230601.611:712028): pid=11728 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447230601.611:712027): pid=11729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447230601.611:712029): pid=11729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447230601.611:712030): pid=11728 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447230601.611:712031): pid=11729 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23702 res=1
type=LOGIN msg=audit(1447230601.611:712032): pid=11728 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23703 res=1
type=USER_START msg=audit(1447230601.627:712033): pid=11729 uid=0 auid=0 ses=23702 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447230601.627:712034): pid=11728 uid=0 auid=0 ses=23703 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447230601.627:712035): pid=11729 uid=0 auid=0 ses=23702 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447230601.627:712036): pid=11728 uid=0 auid=0 ses=23703 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447230601.635:712037): pid=11729 uid=0 auid=0 ses=23702 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447230601.638:712038): pid=11729 uid=0 auid=0 ses=23702 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447230601.641:712039): pid=11728 uid=0 auid=0 ses=23703 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447230601.643:712040): pid=11728 uid=0 auid=0 ses=23703 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447230783.275:712041): pid=12295 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12295 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447230783.275:712042): pid=12295 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12295 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447230783.275:712043): pid=12295 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12295 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447230783.320:712044): pid=12294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=12295 suid=74 rport=64040 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447230783.320:712045): pid=12294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=12295 suid=74 rport=64040 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447230783.445:712046): pid=12294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=64040 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447230783.445:712047): pid=12294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=64040 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447230783.453:712048): pid=12294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447230783.455:712049): pid=12294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12295 suid=74 rport=64040 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447230783.456:712050): pid=12294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447230783.456:712051): pid=12294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447230783.456:712052): pid=12294 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23704 res=1
type=USER_ROLE_CHANGE msg=audit(1447230783.529:712053): pid=12294 uid=0 auid=0 ses=23704 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447230783.551:712054): pid=12294 uid=0 auid=0 ses=23704 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447230783.554:712055): pid=12294 uid=0 auid=0 ses=23704 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447230783.554:712056): pid=12294 uid=0 auid=0 ses=23704 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447230783.555:712057): pid=12297 uid=0 auid=0 ses=23704 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12297 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447230783.555:712058): pid=12297 uid=0 auid=0 ses=23704 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12297 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447230783.555:712059): pid=12297 uid=0 auid=0 ses=23704 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12297 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447230783.556:712060): pid=12297 uid=0 auid=0 ses=23704 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447230783.574:712061): pid=12294 uid=0 auid=0 ses=23704 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447230783.574:712062): pid=12294 uid=0 auid=0 ses=23704 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447230783.578:712063): pid=12294 uid=0 auid=0 ses=23704 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447230783.578:712064): pid=12294 uid=0 auid=0 ses=23704 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447230783.578:712065): pid=12294 uid=0 auid=0 ses=23704 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12294 suid=0 rport=64040 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447230783.578:712066): pid=12294 uid=0 auid=0 ses=23704 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12294 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447230783.578:712067): pid=12294 uid=0 auid=0 ses=23704 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12294 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447230783.578:712068): pid=12294 uid=0 auid=0 ses=23704 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12294 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447230783.603:712069): pid=12305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12305 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447230783.603:712070): pid=12305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12305 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447230783.603:712071): pid=12305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12305 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447230783.649:712072): pid=12304 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=12305 suid=74 rport=64042 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447230783.649:712073): pid=12304 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=12305 suid=74 rport=64042 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447230783.778:712074): pid=12304 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=64042 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447230783.778:712075): pid=12304 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=64042 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447230783.786:712076): pid=12304 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447230783.787:712077): pid=12304 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12305 suid=74 rport=64042 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447230783.789:712078): pid=12304 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447230783.789:712079): pid=12304 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447230783.789:712080): pid=12304 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23705 res=1
type=USER_ROLE_CHANGE msg=audit(1447230783.853:712081): pid=12304 uid=0 auid=0 ses=23705 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447230783.878:712082): pid=12304 uid=0 auid=0 ses=23705 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447230783.880:712083): pid=12304 uid=0 auid=0 ses=23705 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447230783.880:712084): pid=12304 uid=0 auid=0 ses=23705 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447230783.882:712085): pid=12307 uid=0 auid=0 ses=23705 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12307 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447230783.882:712086): pid=12307 uid=0 auid=0 ses=23705 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12307 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447230783.882:712087): pid=12307 uid=0 auid=0 ses=23705 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12307 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447230783.883:712088): pid=12307 uid=0 auid=0 ses=23705 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447230785.155:712089): pid=12304 uid=0 auid=0 ses=23705 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447230785.155:712090): pid=12304 uid=0 auid=0 ses=23705 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447230785.160:712091): pid=12304 uid=0 auid=0 ses=23705 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447230785.160:712092): pid=12304 uid=0 auid=0 ses=23705 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447230785.160:712093): pid=12304 uid=0 auid=0 ses=23705 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12304 suid=0 rport=64042 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447230785.160:712094): pid=12304 uid=0 auid=0 ses=23705 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12304 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447230785.161:712095): pid=12304 uid=0 auid=0 ses=23705 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12304 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447230785.161:712096): pid=12304 uid=0 auid=0 ses=23705 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12304 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447230785.193:712097): pid=12397 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12397 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447230785.194:712098): pid=12397 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12397 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447230785.194:712099): pid=12397 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12397 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447230785.238:712100): pid=12396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=12397 suid=74 rport=64045 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447230785.238:712101): pid=12396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=12397 suid=74 rport=64045 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447230785.359:712102): pid=12396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=64045 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447230785.359:712103): pid=12396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=64045 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447230785.367:712104): pid=12396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447230785.368:712105): pid=12396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12397 suid=74 rport=64045 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447230785.371:712106): pid=12396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447230785.371:712107): pid=12396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447230785.371:712108): pid=12396 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23706 res=1
type=USER_ROLE_CHANGE msg=audit(1447230785.436:712109): pid=12396 uid=0 auid=0 ses=23706 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447230785.454:712110): pid=12396 uid=0 auid=0 ses=23706 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447230785.457:712111): pid=12396 uid=0 auid=0 ses=23706 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447230785.457:712112): pid=12396 uid=0 auid=0 ses=23706 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447230785.458:712113): pid=12399 uid=0 auid=0 ses=23706 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12399 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447230785.458:712114): pid=12399 uid=0 auid=0 ses=23706 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12399 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447230785.458:712115): pid=12399 uid=0 auid=0 ses=23706 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12399 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447230785.459:712116): pid=12399 uid=0 auid=0 ses=23706 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447230785.476:712117): pid=12396 uid=0 auid=0 ses=23706 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447230785.476:712118): pid=12396 uid=0 auid=0 ses=23706 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447230785.480:712119): pid=12396 uid=0 auid=0 ses=23706 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447230785.480:712120): pid=12396 uid=0 auid=0 ses=23706 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447230785.481:712121): pid=12396 uid=0 auid=0 ses=23706 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12396 suid=0 rport=64045 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447230785.481:712122): pid=12396 uid=0 auid=0 ses=23706 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12396 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447230785.481:712123): pid=12396 uid=0 auid=0 ses=23706 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12396 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447230785.481:712124): pid=12396 uid=0 auid=0 ses=23706 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12396 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447231201.662:712125): pid=13647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447231201.662:712126): pid=13647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447231201.662:712127): pid=13646 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447231201.662:712128): pid=13646 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447231201.663:712129): pid=13647 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23707 res=1
type=LOGIN msg=audit(1447231201.663:712130): pid=13646 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23708 res=1
type=USER_START msg=audit(1447231201.684:712131): pid=13646 uid=0 auid=0 ses=23708 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447231201.684:712132): pid=13646 uid=0 auid=0 ses=23708 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447231201.685:712133): pid=13647 uid=0 auid=0 ses=23707 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447231201.685:712134): pid=13647 uid=0 auid=0 ses=23707 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447231201.695:712135): pid=13647 uid=0 auid=0 ses=23707 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447231201.697:712136): pid=13647 uid=0 auid=0 ses=23707 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447231201.700:712137): pid=13646 uid=0 auid=0 ses=23708 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447231201.704:712138): pid=13646 uid=0 auid=0 ses=23708 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1447231790.724:712139): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447231801.718:712140): pid=15493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447231801.718:712141): pid=15493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447231801.718:712142): pid=15493 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23709 res=1
type=USER_ACCT msg=audit(1447231801.718:712143): pid=15494 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447231801.718:712144): pid=15494 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447231801.718:712145): pid=15494 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23710 res=1
type=USER_START msg=audit(1447231801.733:712146): pid=15493 uid=0 auid=0 ses=23709 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447231801.733:712147): pid=15493 uid=0 auid=0 ses=23709 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447231801.733:712148): pid=15494 uid=0 auid=0 ses=23710 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447231801.733:712149): pid=15494 uid=0 auid=0 ses=23710 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447231801.743:712150): pid=15494 uid=0 auid=0 ses=23710 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447231801.744:712151): pid=15494 uid=0 auid=0 ses=23710 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447231801.746:712152): pid=15493 uid=0 auid=0 ses=23709 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447231801.750:712153): pid=15493 uid=0 auid=0 ses=23709 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447231982.967:712154): pid=16058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16058 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447231982.967:712155): pid=16058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16058 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447231982.967:712156): pid=16058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16058 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447231983.011:712157): pid=16057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=16058 suid=74 rport=33254 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447231983.011:712158): pid=16057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=16058 suid=74 rport=33254 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447231983.137:712159): pid=16057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33254 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447231983.137:712160): pid=16057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=33254 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447231983.147:712161): pid=16057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447231983.149:712162): pid=16057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16058 suid=74 rport=33254 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447231983.150:712163): pid=16057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447231983.150:712164): pid=16057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447231983.151:712165): pid=16057 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23711 res=1
type=USER_ROLE_CHANGE msg=audit(1447231983.225:712166): pid=16057 uid=0 auid=0 ses=23711 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447231983.246:712167): pid=16057 uid=0 auid=0 ses=23711 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447231983.249:712168): pid=16057 uid=0 auid=0 ses=23711 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447231983.249:712169): pid=16057 uid=0 auid=0 ses=23711 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447231983.250:712170): pid=16060 uid=0 auid=0 ses=23711 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16060 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447231983.250:712171): pid=16060 uid=0 auid=0 ses=23711 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16060 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447231983.250:712172): pid=16060 uid=0 auid=0 ses=23711 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16060 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447231983.251:712173): pid=16060 uid=0 auid=0 ses=23711 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447231983.268:712174): pid=16057 uid=0 auid=0 ses=23711 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447231983.268:712175): pid=16057 uid=0 auid=0 ses=23711 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447231983.271:712176): pid=16057 uid=0 auid=0 ses=23711 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447231983.271:712177): pid=16057 uid=0 auid=0 ses=23711 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447231983.272:712178): pid=16057 uid=0 auid=0 ses=23711 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16057 suid=0 rport=33254 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447231983.272:712179): pid=16057 uid=0 auid=0 ses=23711 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16057 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447231983.272:712180): pid=16057 uid=0 auid=0 ses=23711 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16057 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447231983.272:712181): pid=16057 uid=0 auid=0 ses=23711 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16057 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447231983.294:712182): pid=16068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16068 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447231983.294:712183): pid=16068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16068 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447231983.294:712184): pid=16068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16068 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447231983.339:712185): pid=16067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=16068 suid=74 rport=33255 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447231983.339:712186): pid=16067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=16068 suid=74 rport=33255 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447231983.459:712187): pid=16067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33255 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447231983.459:712188): pid=16067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=33255 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447231983.464:712189): pid=16067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447231983.464:712190): pid=16067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16068 suid=74 rport=33255 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447231983.466:712191): pid=16067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447231983.466:712192): pid=16067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447231983.466:712193): pid=16067 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23712 res=1
type=USER_ROLE_CHANGE msg=audit(1447231983.533:712194): pid=16067 uid=0 auid=0 ses=23712 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447231983.554:712195): pid=16067 uid=0 auid=0 ses=23712 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447231983.558:712196): pid=16067 uid=0 auid=0 ses=23712 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447231983.558:712197): pid=16067 uid=0 auid=0 ses=23712 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447231983.559:712198): pid=16070 uid=0 auid=0 ses=23712 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16070 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447231983.559:712199): pid=16070 uid=0 auid=0 ses=23712 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16070 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447231983.559:712200): pid=16070 uid=0 auid=0 ses=23712 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16070 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447231983.560:712201): pid=16070 uid=0 auid=0 ses=23712 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447231984.845:712202): pid=16067 uid=0 auid=0 ses=23712 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447231984.845:712203): pid=16067 uid=0 auid=0 ses=23712 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447231984.851:712204): pid=16067 uid=0 auid=0 ses=23712 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447231984.851:712205): pid=16067 uid=0 auid=0 ses=23712 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447231984.851:712206): pid=16067 uid=0 auid=0 ses=23712 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16067 suid=0 rport=33255 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447231984.851:712207): pid=16067 uid=0 auid=0 ses=23712 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16067 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447231984.851:712208): pid=16067 uid=0 auid=0 ses=23712 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16067 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447231984.851:712209): pid=16067 uid=0 auid=0 ses=23712 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16067 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447231984.888:712210): pid=16120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16120 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447231984.889:712211): pid=16120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16120 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447231984.889:712212): pid=16120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16120 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447231984.933:712213): pid=16119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=16120 suid=74 rport=33259 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447231984.933:712214): pid=16119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=16120 suid=74 rport=33259 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447231985.062:712215): pid=16119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33259 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447231985.062:712216): pid=16119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=33259 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447231985.072:712217): pid=16119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447231985.073:712218): pid=16119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16120 suid=74 rport=33259 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447231985.074:712219): pid=16119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447231985.074:712220): pid=16119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447231985.074:712221): pid=16119 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23713 res=1
type=USER_ROLE_CHANGE msg=audit(1447231985.142:712222): pid=16119 uid=0 auid=0 ses=23713 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447231985.160:712223): pid=16119 uid=0 auid=0 ses=23713 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447231985.163:712224): pid=16119 uid=0 auid=0 ses=23713 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447231985.163:712225): pid=16119 uid=0 auid=0 ses=23713 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447231985.164:712226): pid=16122 uid=0 auid=0 ses=23713 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16122 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447231985.164:712227): pid=16122 uid=0 auid=0 ses=23713 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16122 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447231985.165:712228): pid=16122 uid=0 auid=0 ses=23713 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16122 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447231985.165:712229): pid=16122 uid=0 auid=0 ses=23713 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447231985.183:712230): pid=16119 uid=0 auid=0 ses=23713 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447231985.183:712231): pid=16119 uid=0 auid=0 ses=23713 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447231985.190:712232): pid=16119 uid=0 auid=0 ses=23713 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447231985.190:712233): pid=16119 uid=0 auid=0 ses=23713 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447231985.191:712234): pid=16119 uid=0 auid=0 ses=23713 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16119 suid=0 rport=33259 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447231985.191:712235): pid=16119 uid=0 auid=0 ses=23713 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=16119 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447231985.191:712236): pid=16119 uid=0 auid=0 ses=23713 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=16119 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447231985.191:712237): pid=16119 uid=0 auid=0 ses=23713 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=16119 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447232401.767:712239): pid=17413 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447232401.767:712238): pid=17412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447232401.767:712240): pid=17412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447232401.767:712241): pid=17413 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447232401.769:712242): pid=17413 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23714 res=1
type=LOGIN msg=audit(1447232401.769:712243): pid=17412 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23715 res=1
type=USER_START msg=audit(1447232401.787:712244): pid=17412 uid=0 auid=0 ses=23715 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447232401.787:712245): pid=17412 uid=0 auid=0 ses=23715 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447232401.789:712246): pid=17413 uid=0 auid=0 ses=23714 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447232401.789:712247): pid=17413 uid=0 auid=0 ses=23714 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447232401.797:712248): pid=17413 uid=0 auid=0 ses=23714 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447232401.799:712249): pid=17413 uid=0 auid=0 ses=23714 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447232401.805:712250): pid=17412 uid=0 auid=0 ses=23715 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447232401.807:712251): pid=17412 uid=0 auid=0 ses=23715 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447232461.817:712252): pid=17647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447232461.818:712253): pid=17647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447232461.818:712254): pid=17647 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23716 res=1
type=USER_START msg=audit(1447232461.834:712255): pid=17647 uid=0 auid=0 ses=23716 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447232461.834:712256): pid=17647 uid=0 auid=0 ses=23716 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447232461.862:712257): pid=17647 uid=0 auid=0 ses=23716 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447232461.864:712258): pid=17647 uid=0 auid=0 ses=23716 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1447232831.754:712259): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447233001.881:712260): pid=19316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447233001.881:712261): pid=19316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447233001.882:712262): pid=19315 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447233001.882:712263): pid=19315 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447233001.882:712264): pid=19316 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23717 res=1
type=LOGIN msg=audit(1447233001.882:712265): pid=19315 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23718 res=1
type=USER_START msg=audit(1447233001.898:712266): pid=19315 uid=0 auid=0 ses=23718 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447233001.898:712267): pid=19316 uid=0 auid=0 ses=23717 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447233001.898:712268): pid=19315 uid=0 auid=0 ses=23718 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447233001.898:712269): pid=19316 uid=0 auid=0 ses=23717 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447233001.905:712270): pid=19316 uid=0 auid=0 ses=23717 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447233001.906:712271): pid=19316 uid=0 auid=0 ses=23717 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447233001.910:712272): pid=19315 uid=0 auid=0 ses=23718 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447233001.912:712273): pid=19315 uid=0 auid=0 ses=23718 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447233183.265:712274): pid=19886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=19886 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447233183.265:712275): pid=19886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=19886 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447233183.265:712276): pid=19886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=19886 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447233183.309:712277): pid=19885 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=19886 suid=74 rport=35235 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447233183.309:712278): pid=19885 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=19886 suid=74 rport=35235 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447233183.439:712279): pid=19885 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=35235 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447233183.439:712280): pid=19885 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=35235 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447233183.448:712281): pid=19885 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447233183.451:712282): pid=19885 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19886 suid=74 rport=35235 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447233183.453:712283): pid=19885 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447233183.454:712284): pid=19885 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447233183.454:712285): pid=19885 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23719 res=1
type=USER_ROLE_CHANGE msg=audit(1447233183.527:712286): pid=19885 uid=0 auid=0 ses=23719 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447233183.552:712287): pid=19885 uid=0 auid=0 ses=23719 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447233183.555:712288): pid=19885 uid=0 auid=0 ses=23719 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447233183.555:712289): pid=19885 uid=0 auid=0 ses=23719 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447233183.556:712290): pid=19888 uid=0 auid=0 ses=23719 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=19888 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447233183.556:712291): pid=19888 uid=0 auid=0 ses=23719 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=19888 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447233183.556:712292): pid=19888 uid=0 auid=0 ses=23719 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=19888 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447233183.557:712293): pid=19888 uid=0 auid=0 ses=23719 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447233183.577:712294): pid=19885 uid=0 auid=0 ses=23719 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447233183.577:712295): pid=19885 uid=0 auid=0 ses=23719 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447233183.582:712296): pid=19885 uid=0 auid=0 ses=23719 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447233183.582:712297): pid=19885 uid=0 auid=0 ses=23719 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447233183.583:712298): pid=19885 uid=0 auid=0 ses=23719 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19885 suid=0 rport=35235 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447233183.583:712299): pid=19885 uid=0 auid=0 ses=23719 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=19885 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447233183.583:712300): pid=19885 uid=0 auid=0 ses=23719 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=19885 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447233183.583:712301): pid=19885 uid=0 auid=0 ses=23719 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=19885 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447233183.603:712302): pid=19896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=19896 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447233183.603:712303): pid=19896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=19896 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447233183.603:712304): pid=19896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=19896 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447233183.648:712305): pid=19895 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=19896 suid=74 rport=35236 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447233183.648:712306): pid=19895 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=19896 suid=74 rport=35236 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447233183.777:712307): pid=19895 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=35236 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447233183.777:712308): pid=19895 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=35236 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447233183.787:712309): pid=19895 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447233183.787:712310): pid=19895 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19896 suid=74 rport=35236 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447233183.788:712311): pid=19895 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447233183.788:712312): pid=19895 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447233183.788:712313): pid=19895 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23720 res=1
type=USER_ROLE_CHANGE msg=audit(1447233183.852:712314): pid=19895 uid=0 auid=0 ses=23720 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447233183.878:712315): pid=19895 uid=0 auid=0 ses=23720 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447233183.881:712316): pid=19895 uid=0 auid=0 ses=23720 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447233183.881:712317): pid=19895 uid=0 auid=0 ses=23720 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447233183.882:712318): pid=19898 uid=0 auid=0 ses=23720 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=19898 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447233183.882:712319): pid=19898 uid=0 auid=0 ses=23720 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=19898 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447233183.882:712320): pid=19898 uid=0 auid=0 ses=23720 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=19898 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447233183.883:712321): pid=19898 uid=0 auid=0 ses=23720 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447233185.166:712322): pid=19895 uid=0 auid=0 ses=23720 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447233185.166:712323): pid=19895 uid=0 auid=0 ses=23720 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447233185.170:712324): pid=19895 uid=0 auid=0 ses=23720 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447233185.170:712325): pid=19895 uid=0 auid=0 ses=23720 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447233185.171:712326): pid=19895 uid=0 auid=0 ses=23720 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19895 suid=0 rport=35236 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447233185.171:712327): pid=19895 uid=0 auid=0 ses=23720 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=19895 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447233185.171:712328): pid=19895 uid=0 auid=0 ses=23720 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=19895 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447233185.171:712329): pid=19895 uid=0 auid=0 ses=23720 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=19895 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447233185.206:712330): pid=19948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=19948 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447233185.207:712331): pid=19948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=19948 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447233185.207:712332): pid=19948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=19948 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447233185.251:712333): pid=19947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=19948 suid=74 rport=35240 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447233185.251:712334): pid=19947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=19948 suid=74 rport=35240 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447233185.381:712335): pid=19947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=35240 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447233185.381:712336): pid=19947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=35240 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447233185.390:712337): pid=19947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447233185.391:712338): pid=19947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19948 suid=74 rport=35240 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447233185.393:712339): pid=19947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447233185.394:712340): pid=19947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447233185.394:712341): pid=19947 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23721 res=1
type=USER_ROLE_CHANGE msg=audit(1447233185.468:712342): pid=19947 uid=0 auid=0 ses=23721 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447233185.491:712343): pid=19947 uid=0 auid=0 ses=23721 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447233185.495:712344): pid=19947 uid=0 auid=0 ses=23721 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447233185.495:712345): pid=19947 uid=0 auid=0 ses=23721 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447233185.497:712346): pid=19950 uid=0 auid=0 ses=23721 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=19950 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447233185.498:712347): pid=19950 uid=0 auid=0 ses=23721 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=19950 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447233185.498:712348): pid=19950 uid=0 auid=0 ses=23721 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=19950 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447233185.498:712349): pid=19950 uid=0 auid=0 ses=23721 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447233185.518:712350): pid=19947 uid=0 auid=0 ses=23721 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447233185.518:712351): pid=19947 uid=0 auid=0 ses=23721 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447233185.524:712352): pid=19947 uid=0 auid=0 ses=23721 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447233185.524:712353): pid=19947 uid=0 auid=0 ses=23721 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447233185.524:712354): pid=19947 uid=0 auid=0 ses=23721 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19947 suid=0 rport=35240 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447233185.524:712355): pid=19947 uid=0 auid=0 ses=23721 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=19947 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447233185.525:712356): pid=19947 uid=0 auid=0 ses=23721 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=19947 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447233185.525:712357): pid=19947 uid=0 auid=0 ses=23721 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=19947 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447233601.929:712358): pid=21240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447233601.929:712359): pid=21240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447233601.929:712360): pid=21239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447233601.930:712361): pid=21239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447233601.930:712362): pid=21240 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23722 res=1
type=LOGIN msg=audit(1447233601.930:712363): pid=21239 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23723 res=1
type=USER_START msg=audit(1447233601.950:712364): pid=21239 uid=0 auid=0 ses=23723 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447233601.950:712365): pid=21239 uid=0 auid=0 ses=23723 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447233601.951:712366): pid=21240 uid=0 auid=0 ses=23722 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447233601.951:712367): pid=21240 uid=0 auid=0 ses=23722 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447233601.961:712368): pid=21240 uid=0 auid=0 ses=23722 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447233601.964:712369): pid=21240 uid=0 auid=0 ses=23722 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447233601.972:712370): pid=21239 uid=0 auid=0 ses=23723 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447233601.973:712371): pid=21239 uid=0 auid=0 ses=23723 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1447233863.698:712372): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447234201.991:712373): pid=23084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447234201.991:712374): pid=23084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447234201.991:712375): pid=23085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447234201.991:712376): pid=23085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447234201.991:712378): pid=23084 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23725 res=1
type=LOGIN msg=audit(1447234201.991:712377): pid=23085 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23724 res=1
type=USER_START msg=audit(1447234202.009:712379): pid=23085 uid=0 auid=0 ses=23724 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447234202.010:712380): pid=23085 uid=0 auid=0 ses=23724 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447234202.011:712381): pid=23084 uid=0 auid=0 ses=23725 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447234202.011:712382): pid=23084 uid=0 auid=0 ses=23725 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447234202.017:712383): pid=23085 uid=0 auid=0 ses=23724 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447234202.019:712384): pid=23085 uid=0 auid=0 ses=23724 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447234202.024:712385): pid=23084 uid=0 auid=0 ses=23725 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447234202.028:712386): pid=23084 uid=0 auid=0 ses=23725 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447234382.588:712387): pid=23649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=23649 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447234382.589:712388): pid=23649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=23649 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447234382.589:712389): pid=23649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=23649 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447234382.610:712390): pid=23648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=23649 suid=74 rport=37214 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447234382.611:712391): pid=23648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=23649 suid=74 rport=37214 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447234382.724:712392): pid=23648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=37214 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447234382.724:712393): pid=23648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=37214 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447234382.733:712394): pid=23648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447234382.734:712395): pid=23648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23649 suid=74 rport=37214 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447234382.737:712396): pid=23648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447234382.737:712397): pid=23648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447234382.737:712398): pid=23648 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23726 res=1
type=USER_ROLE_CHANGE msg=audit(1447234382.805:712399): pid=23648 uid=0 auid=0 ses=23726 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447234382.827:712400): pid=23648 uid=0 auid=0 ses=23726 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447234382.831:712401): pid=23648 uid=0 auid=0 ses=23726 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447234382.831:712402): pid=23648 uid=0 auid=0 ses=23726 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447234382.832:712403): pid=23651 uid=0 auid=0 ses=23726 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=23651 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447234382.833:712404): pid=23651 uid=0 auid=0 ses=23726 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=23651 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447234382.833:712405): pid=23651 uid=0 auid=0 ses=23726 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=23651 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447234382.833:712406): pid=23651 uid=0 auid=0 ses=23726 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447234382.854:712407): pid=23648 uid=0 auid=0 ses=23726 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447234382.854:712408): pid=23648 uid=0 auid=0 ses=23726 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447234382.856:712409): pid=23648 uid=0 auid=0 ses=23726 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447234382.857:712410): pid=23648 uid=0 auid=0 ses=23726 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447234382.858:712411): pid=23648 uid=0 auid=0 ses=23726 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23648 suid=0 rport=37214 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447234382.858:712412): pid=23648 uid=0 auid=0 ses=23726 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=23648 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447234382.858:712413): pid=23648 uid=0 auid=0 ses=23726 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=23648 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447234382.858:712414): pid=23648 uid=0 auid=0 ses=23726 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=23648 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447234382.874:712415): pid=23659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=23659 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447234382.874:712416): pid=23659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=23659 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447234382.874:712417): pid=23659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=23659 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447234382.896:712418): pid=23658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=23659 suid=74 rport=37216 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447234382.896:712419): pid=23658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=23659 suid=74 rport=37216 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447234383.009:712420): pid=23658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=37216 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447234383.009:712421): pid=23658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=37216 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447234383.016:712422): pid=23658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447234383.017:712423): pid=23658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23659 suid=74 rport=37216 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447234383.018:712424): pid=23658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447234383.018:712425): pid=23658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447234383.019:712426): pid=23658 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23727 res=1
type=USER_ROLE_CHANGE msg=audit(1447234383.081:712427): pid=23658 uid=0 auid=0 ses=23727 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447234383.100:712428): pid=23658 uid=0 auid=0 ses=23727 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447234383.103:712429): pid=23658 uid=0 auid=0 ses=23727 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447234383.103:712430): pid=23658 uid=0 auid=0 ses=23727 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447234383.104:712431): pid=23661 uid=0 auid=0 ses=23727 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=23661 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447234383.105:712432): pid=23661 uid=0 auid=0 ses=23727 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=23661 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447234383.105:712433): pid=23661 uid=0 auid=0 ses=23727 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=23661 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447234383.105:712434): pid=23661 uid=0 auid=0 ses=23727 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447234384.382:712435): pid=23658 uid=0 auid=0 ses=23727 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447234384.382:712436): pid=23658 uid=0 auid=0 ses=23727 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447234384.386:712437): pid=23658 uid=0 auid=0 ses=23727 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447234384.386:712438): pid=23658 uid=0 auid=0 ses=23727 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447234384.387:712439): pid=23658 uid=0 auid=0 ses=23727 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23658 suid=0 rport=37216 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447234384.387:712440): pid=23658 uid=0 auid=0 ses=23727 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=23658 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447234384.387:712441): pid=23658 uid=0 auid=0 ses=23727 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=23658 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447234384.387:712442): pid=23658 uid=0 auid=0 ses=23727 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=23658 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447234384.410:712443): pid=23711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=23711 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447234384.410:712444): pid=23711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=23711 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447234384.410:712445): pid=23711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=23711 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447234384.432:712446): pid=23710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=23711 suid=74 rport=37218 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447234384.432:712447): pid=23710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=23711 suid=74 rport=37218 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447234384.545:712448): pid=23710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=37218 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447234384.545:712449): pid=23710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=37218 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447234384.553:712450): pid=23710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447234384.554:712451): pid=23710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23711 suid=74 rport=37218 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447234384.555:712452): pid=23710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447234384.555:712453): pid=23710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447234384.555:712454): pid=23710 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23728 res=1
type=USER_ROLE_CHANGE msg=audit(1447234384.622:712455): pid=23710 uid=0 auid=0 ses=23728 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447234384.646:712456): pid=23710 uid=0 auid=0 ses=23728 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447234384.648:712457): pid=23710 uid=0 auid=0 ses=23728 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447234384.648:712458): pid=23710 uid=0 auid=0 ses=23728 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447234384.650:712459): pid=23713 uid=0 auid=0 ses=23728 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=23713 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447234384.650:712460): pid=23713 uid=0 auid=0 ses=23728 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=23713 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447234384.650:712461): pid=23713 uid=0 auid=0 ses=23728 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=23713 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447234384.651:712462): pid=23713 uid=0 auid=0 ses=23728 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447234384.667:712463): pid=23710 uid=0 auid=0 ses=23728 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447234384.668:712464): pid=23710 uid=0 auid=0 ses=23728 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447234384.671:712465): pid=23710 uid=0 auid=0 ses=23728 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447234384.671:712466): pid=23710 uid=0 auid=0 ses=23728 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447234384.671:712467): pid=23710 uid=0 auid=0 ses=23728 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23710 suid=0 rport=37218 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447234384.671:712468): pid=23710 uid=0 auid=0 ses=23728 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=23710 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447234384.671:712469): pid=23710 uid=0 auid=0 ses=23728 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=23710 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447234384.671:712470): pid=23710 uid=0 auid=0 ses=23728 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=23710 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447234801.048:712471): pid=24999 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447234801.048:712472): pid=24998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447234801.048:712473): pid=24999 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447234801.048:712474): pid=24998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447234801.049:712475): pid=24998 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23729 res=1
type=LOGIN msg=audit(1447234801.049:712476): pid=24999 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23730 res=1
type=USER_START msg=audit(1447234801.069:712477): pid=24998 uid=0 auid=0 ses=23729 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447234801.070:712478): pid=24998 uid=0 auid=0 ses=23729 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447234801.071:712479): pid=24999 uid=0 auid=0 ses=23730 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447234801.071:712480): pid=24999 uid=0 auid=0 ses=23730 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447234801.082:712481): pid=24999 uid=0 auid=0 ses=23730 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447234801.083:712482): pid=24999 uid=0 auid=0 ses=23730 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447234801.085:712483): pid=24998 uid=0 auid=0 ses=23729 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447234826.111:712484): pid=24998 uid=0 auid=0 ses=23729 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=USER_ACCT msg=audit(1447235401.133:712485): pid=26845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447235401.133:712486): pid=26844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447235401.134:712487): pid=26845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447235401.134:712488): pid=26844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447235401.135:712489): pid=26845 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23731 res=1
type=LOGIN msg=audit(1447235401.135:712490): pid=26844 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23732 res=1
type=USER_START msg=audit(1447235401.150:712491): pid=26845 uid=0 auid=0 ses=23731 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447235401.151:712492): pid=26845 uid=0 auid=0 ses=23731 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447235401.151:712493): pid=26844 uid=0 auid=0 ses=23732 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447235401.151:712494): pid=26844 uid=0 auid=0 ses=23732 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447235401.157:712495): pid=26845 uid=0 auid=0 ses=23731 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447235401.158:712496): pid=26845 uid=0 auid=0 ses=23731 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447235401.164:712497): pid=26844 uid=0 auid=0 ses=23732 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447235401.166:712498): pid=26844 uid=0 auid=0 ses=23732 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447235582.834:712499): pid=27409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=27409 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447235582.835:712500): pid=27409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=27409 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447235582.835:712501): pid=27409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27409 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447235582.878:712502): pid=27408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=27409 suid=74 rport=39193 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447235582.879:712503): pid=27408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=27409 suid=74 rport=39193 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447235583.008:712504): pid=27408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=39193 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447235583.008:712505): pid=27408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=39193 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447235583.018:712506): pid=27408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447235583.020:712507): pid=27408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27409 suid=74 rport=39193 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447235583.022:712508): pid=27408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447235583.022:712509): pid=27408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447235583.022:712510): pid=27408 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23733 res=1
type=USER_ROLE_CHANGE msg=audit(1447235583.089:712511): pid=27408 uid=0 auid=0 ses=23733 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447235583.111:712512): pid=27408 uid=0 auid=0 ses=23733 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447235583.114:712513): pid=27408 uid=0 auid=0 ses=23733 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447235583.114:712514): pid=27408 uid=0 auid=0 ses=23733 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447235583.115:712515): pid=27411 uid=0 auid=0 ses=23733 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=27411 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447235583.116:712516): pid=27411 uid=0 auid=0 ses=23733 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=27411 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447235583.116:712517): pid=27411 uid=0 auid=0 ses=23733 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27411 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447235583.116:712518): pid=27411 uid=0 auid=0 ses=23733 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447235583.134:712519): pid=27408 uid=0 auid=0 ses=23733 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447235583.134:712520): pid=27408 uid=0 auid=0 ses=23733 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447235583.138:712521): pid=27408 uid=0 auid=0 ses=23733 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447235583.138:712522): pid=27408 uid=0 auid=0 ses=23733 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447235583.139:712523): pid=27408 uid=0 auid=0 ses=23733 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27408 suid=0 rport=39193 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447235583.139:712524): pid=27408 uid=0 auid=0 ses=23733 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=27408 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447235583.139:712525): pid=27408 uid=0 auid=0 ses=23733 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=27408 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447235583.139:712526): pid=27408 uid=0 auid=0 ses=23733 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27408 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447235583.161:712527): pid=27419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=27419 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447235583.161:712528): pid=27419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=27419 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447235583.161:712529): pid=27419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27419 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447235583.206:712530): pid=27418 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=27419 suid=74 rport=39196 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447235583.206:712531): pid=27418 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=27419 suid=74 rport=39196 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447235583.325:712532): pid=27418 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=39196 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447235583.325:712533): pid=27418 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=39196 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447235583.330:712534): pid=27418 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447235583.331:712535): pid=27418 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27419 suid=74 rport=39196 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447235583.332:712536): pid=27418 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447235583.333:712537): pid=27418 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447235583.333:712538): pid=27418 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23734 res=1
type=USER_ROLE_CHANGE msg=audit(1447235583.402:712539): pid=27418 uid=0 auid=0 ses=23734 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447235583.424:712540): pid=27418 uid=0 auid=0 ses=23734 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447235583.427:712541): pid=27418 uid=0 auid=0 ses=23734 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447235583.427:712542): pid=27418 uid=0 auid=0 ses=23734 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447235583.429:712543): pid=27421 uid=0 auid=0 ses=23734 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=27421 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447235583.429:712544): pid=27421 uid=0 auid=0 ses=23734 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=27421 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447235583.429:712545): pid=27421 uid=0 auid=0 ses=23734 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27421 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447235583.429:712546): pid=27421 uid=0 auid=0 ses=23734 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447235584.695:712547): pid=27418 uid=0 auid=0 ses=23734 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447235584.696:712548): pid=27418 uid=0 auid=0 ses=23734 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447235584.700:712549): pid=27418 uid=0 auid=0 ses=23734 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447235584.700:712550): pid=27418 uid=0 auid=0 ses=23734 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447235584.700:712551): pid=27418 uid=0 auid=0 ses=23734 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27418 suid=0 rport=39196 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447235584.700:712552): pid=27418 uid=0 auid=0 ses=23734 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=27418 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447235584.700:712553): pid=27418 uid=0 auid=0 ses=23734 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=27418 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447235584.701:712554): pid=27418 uid=0 auid=0 ses=23734 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27418 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447235584.731:712555): pid=27471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=27471 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447235584.731:712556): pid=27471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=27471 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447235584.731:712557): pid=27471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27471 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447235584.775:712558): pid=27470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=27471 suid=74 rport=39199 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447235584.776:712559): pid=27470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=27471 suid=74 rport=39199 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447235584.905:712560): pid=27470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=39199 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447235584.906:712561): pid=27470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=39199 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447235584.914:712562): pid=27470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447235584.915:712563): pid=27470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27471 suid=74 rport=39199 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447235584.916:712564): pid=27470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447235584.917:712565): pid=27470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447235584.917:712566): pid=27470 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23735 res=1
type=USER_ROLE_CHANGE msg=audit(1447235584.985:712567): pid=27470 uid=0 auid=0 ses=23735 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447235585.009:712568): pid=27470 uid=0 auid=0 ses=23735 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447235585.012:712569): pid=27470 uid=0 auid=0 ses=23735 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447235585.012:712570): pid=27470 uid=0 auid=0 ses=23735 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447235585.014:712571): pid=27473 uid=0 auid=0 ses=23735 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=27473 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447235585.014:712572): pid=27473 uid=0 auid=0 ses=23735 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=27473 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447235585.014:712573): pid=27473 uid=0 auid=0 ses=23735 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27473 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447235585.015:712574): pid=27473 uid=0 auid=0 ses=23735 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447235585.032:712575): pid=27470 uid=0 auid=0 ses=23735 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447235585.032:712576): pid=27470 uid=0 auid=0 ses=23735 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447235585.035:712577): pid=27470 uid=0 auid=0 ses=23735 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447235585.035:712578): pid=27470 uid=0 auid=0 ses=23735 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447235585.036:712579): pid=27470 uid=0 auid=0 ses=23735 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27470 suid=0 rport=39199 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447235585.036:712580): pid=27470 uid=0 auid=0 ses=23735 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=27470 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447235585.036:712581): pid=27470 uid=0 auid=0 ses=23735 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=27470 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447235585.036:712582): pid=27470 uid=0 auid=0 ses=23735 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=27470 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=SYSCALL msg=audit(1447235941.675:712583): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447236001.188:712585): pid=28761 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447236001.188:712584): pid=28762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447236001.188:712586): pid=28761 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447236001.188:712587): pid=28762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447236001.189:712588): pid=28762 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23736 res=1
type=LOGIN msg=audit(1447236001.189:712589): pid=28761 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23737 res=1
type=USER_START msg=audit(1447236001.210:712590): pid=28762 uid=0 auid=0 ses=23736 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447236001.211:712591): pid=28762 uid=0 auid=0 ses=23736 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447236001.212:712592): pid=28761 uid=0 auid=0 ses=23737 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447236001.212:712593): pid=28761 uid=0 auid=0 ses=23737 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447236001.219:712594): pid=28762 uid=0 auid=0 ses=23736 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447236001.221:712595): pid=28762 uid=0 auid=0 ses=23736 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447236001.230:712596): pid=28761 uid=0 auid=0 ses=23737 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447236001.231:712597): pid=28761 uid=0 auid=0 ses=23737 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447236061.243:712598): pid=28998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447236061.243:712599): pid=28998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447236061.244:712600): pid=28998 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23738 res=1
type=USER_START msg=audit(1447236061.253:712601): pid=28998 uid=0 auid=0 ses=23738 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447236061.254:712602): pid=28998 uid=0 auid=0 ses=23738 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447236061.280:712603): pid=28998 uid=0 auid=0 ses=23738 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447236061.281:712604): pid=28998 uid=0 auid=0 ses=23738 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447236601.295:712606): pid=30761 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447236601.295:712605): pid=30762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447236601.295:712607): pid=30761 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447236601.295:712608): pid=30762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447236601.296:712609): pid=30762 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23739 res=1
type=LOGIN msg=audit(1447236601.296:712610): pid=30761 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23740 res=1
type=USER_START msg=audit(1447236601.311:712611): pid=30762 uid=0 auid=0 ses=23739 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447236601.311:712612): pid=30762 uid=0 auid=0 ses=23739 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447236601.312:712613): pid=30761 uid=0 auid=0 ses=23740 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447236601.313:712614): pid=30761 uid=0 auid=0 ses=23740 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447236601.318:712615): pid=30762 uid=0 auid=0 ses=23739 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447236601.319:712616): pid=30762 uid=0 auid=0 ses=23739 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447236601.325:712617): pid=30761 uid=0 auid=0 ses=23740 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447236601.326:712618): pid=30761 uid=0 auid=0 ses=23740 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447236782.894:712619): pid=31344 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=31344 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447236782.894:712620): pid=31344 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=31344 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447236782.895:712621): pid=31344 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=31344 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447236782.938:712622): pid=31343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=31344 suid=74 rport=41174 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447236782.938:712623): pid=31343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=31344 suid=74 rport=41174 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447236783.068:712624): pid=31343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=41174 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447236783.068:712625): pid=31343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=41174 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447236783.077:712626): pid=31343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447236783.078:712627): pid=31343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=31344 suid=74 rport=41174 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447236783.080:712628): pid=31343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447236783.081:712629): pid=31343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447236783.081:712630): pid=31343 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23741 res=1
type=USER_ROLE_CHANGE msg=audit(1447236783.151:712631): pid=31343 uid=0 auid=0 ses=23741 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447236783.178:712632): pid=31343 uid=0 auid=0 ses=23741 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447236783.181:712633): pid=31343 uid=0 auid=0 ses=23741 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447236783.181:712634): pid=31343 uid=0 auid=0 ses=23741 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447236783.182:712635): pid=31356 uid=0 auid=0 ses=23741 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=31356 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447236783.182:712636): pid=31356 uid=0 auid=0 ses=23741 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=31356 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447236783.183:712637): pid=31356 uid=0 auid=0 ses=23741 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=31356 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447236783.183:712638): pid=31356 uid=0 auid=0 ses=23741 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447236783.205:712639): pid=31343 uid=0 auid=0 ses=23741 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447236783.205:712640): pid=31343 uid=0 auid=0 ses=23741 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447236783.211:712641): pid=31343 uid=0 auid=0 ses=23741 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447236783.211:712642): pid=31343 uid=0 auid=0 ses=23741 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447236783.212:712643): pid=31343 uid=0 auid=0 ses=23741 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=31343 suid=0 rport=41174 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447236783.212:712644): pid=31343 uid=0 auid=0 ses=23741 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=31343 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447236783.213:712645): pid=31343 uid=0 auid=0 ses=23741 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=31343 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447236783.213:712646): pid=31343 uid=0 auid=0 ses=23741 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=31343 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447236783.231:712647): pid=31364 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=31364 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447236783.231:712648): pid=31364 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=31364 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447236783.231:712649): pid=31364 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=31364 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447236783.275:712650): pid=31363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=31364 suid=74 rport=41175 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447236783.276:712651): pid=31363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=31364 suid=74 rport=41175 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447236783.404:712652): pid=31363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=41175 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447236783.404:712653): pid=31363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=41175 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447236783.411:712654): pid=31363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447236783.412:712655): pid=31363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=31364 suid=74 rport=41175 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447236783.414:712656): pid=31363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447236783.415:712657): pid=31363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447236783.415:712658): pid=31363 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23742 res=1
type=USER_ROLE_CHANGE msg=audit(1447236783.481:712659): pid=31363 uid=0 auid=0 ses=23742 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447236783.503:712660): pid=31363 uid=0 auid=0 ses=23742 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447236783.507:712661): pid=31363 uid=0 auid=0 ses=23742 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447236783.508:712662): pid=31363 uid=0 auid=0 ses=23742 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447236783.509:712663): pid=31366 uid=0 auid=0 ses=23742 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=31366 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447236783.509:712664): pid=31366 uid=0 auid=0 ses=23742 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=31366 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447236783.509:712665): pid=31366 uid=0 auid=0 ses=23742 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=31366 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447236783.510:712666): pid=31366 uid=0 auid=0 ses=23742 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447236784.791:712667): pid=31363 uid=0 auid=0 ses=23742 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447236784.791:712668): pid=31363 uid=0 auid=0 ses=23742 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447236784.795:712669): pid=31363 uid=0 auid=0 ses=23742 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447236784.795:712670): pid=31363 uid=0 auid=0 ses=23742 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447236784.795:712671): pid=31363 uid=0 auid=0 ses=23742 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=31363 suid=0 rport=41175 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447236784.795:712672): pid=31363 uid=0 auid=0 ses=23742 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=31363 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447236784.795:712673): pid=31363 uid=0 auid=0 ses=23742 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=31363 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447236784.795:712674): pid=31363 uid=0 auid=0 ses=23742 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=31363 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447236784.825:712675): pid=31416 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=31416 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447236784.825:712676): pid=31416 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=31416 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447236784.825:712677): pid=31416 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=31416 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447236784.870:712678): pid=31415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=31416 suid=74 rport=41179 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447236784.870:712679): pid=31415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=31416 suid=74 rport=41179 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447236784.993:712680): pid=31415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=41179 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447236784.993:712681): pid=31415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=41179 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447236784.999:712682): pid=31415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447236785.000:712683): pid=31415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=31416 suid=74 rport=41179 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447236785.001:712684): pid=31415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447236785.001:712685): pid=31415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447236785.002:712686): pid=31415 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23743 res=1
type=USER_ROLE_CHANGE msg=audit(1447236785.069:712687): pid=31415 uid=0 auid=0 ses=23743 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447236785.088:712688): pid=31415 uid=0 auid=0 ses=23743 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447236785.090:712689): pid=31415 uid=0 auid=0 ses=23743 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447236785.090:712690): pid=31415 uid=0 auid=0 ses=23743 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447236785.092:712691): pid=31418 uid=0 auid=0 ses=23743 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=31418 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447236785.092:712692): pid=31418 uid=0 auid=0 ses=23743 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=31418 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447236785.092:712693): pid=31418 uid=0 auid=0 ses=23743 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=31418 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447236785.092:712694): pid=31418 uid=0 auid=0 ses=23743 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447236785.107:712695): pid=31415 uid=0 auid=0 ses=23743 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447236785.108:712696): pid=31415 uid=0 auid=0 ses=23743 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447236785.110:712697): pid=31415 uid=0 auid=0 ses=23743 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447236785.110:712698): pid=31415 uid=0 auid=0 ses=23743 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447236785.111:712699): pid=31415 uid=0 auid=0 ses=23743 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=31415 suid=0 rport=41179 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447236785.111:712700): pid=31415 uid=0 auid=0 ses=23743 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=31415 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447236785.111:712701): pid=31415 uid=0 auid=0 ses=23743 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=31415 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447236785.111:712702): pid=31415 uid=0 auid=0 ses=23743 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=31415 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=SYSCALL msg=audit(1447236999.758:712703): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447237201.351:712704): pid=32643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447237201.351:712705): pid=32644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447237201.352:712706): pid=32643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447237201.352:712707): pid=32644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447237201.353:712708): pid=32643 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23744 res=1
type=LOGIN msg=audit(1447237201.353:712709): pid=32644 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23745 res=1
type=USER_START msg=audit(1447237201.375:712710): pid=32643 uid=0 auid=0 ses=23744 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447237201.376:712711): pid=32643 uid=0 auid=0 ses=23744 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447237201.376:712712): pid=32644 uid=0 auid=0 ses=23745 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447237201.376:712713): pid=32644 uid=0 auid=0 ses=23745 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447237201.384:712714): pid=32644 uid=0 auid=0 ses=23745 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447237201.386:712715): pid=32644 uid=0 auid=0 ses=23745 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447237201.392:712716): pid=32643 uid=0 auid=0 ses=23744 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447237226.419:712717): pid=32643 uid=0 auid=0 ses=23744 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=USER_ACCT msg=audit(1447237801.438:712718): pid=2143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447237801.438:712719): pid=2143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447237801.439:712720): pid=2143 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23746 res=1
type=USER_ACCT msg=audit(1447237801.439:712721): pid=2144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447237801.439:712722): pid=2144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447237801.439:712723): pid=2144 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23747 res=1
type=USER_START msg=audit(1447237801.454:712724): pid=2144 uid=0 auid=0 ses=23747 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447237801.454:712725): pid=2144 uid=0 auid=0 ses=23747 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447237801.456:712726): pid=2143 uid=0 auid=0 ses=23746 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447237801.457:712727): pid=2143 uid=0 auid=0 ses=23746 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447237801.459:712728): pid=2144 uid=0 auid=0 ses=23747 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447237801.460:712729): pid=2144 uid=0 auid=0 ses=23747 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447237801.469:712730): pid=2143 uid=0 auid=0 ses=23746 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447237801.470:712731): pid=2143 uid=0 auid=0 ses=23746 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447237983.334:712732): pid=2710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=2710 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447237983.334:712733): pid=2710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=2710 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447237983.334:712734): pid=2710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=2710 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447237983.379:712735): pid=2709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=2710 suid=74 rport=43155 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447237983.379:712736): pid=2709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=2710 suid=74 rport=43155 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447237983.509:712737): pid=2709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=43155 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447237983.509:712738): pid=2709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=43155 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447237983.518:712739): pid=2709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447237983.519:712740): pid=2709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2710 suid=74 rport=43155 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447237983.520:712741): pid=2709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447237983.521:712742): pid=2709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447237983.521:712743): pid=2709 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23748 res=1
type=USER_ROLE_CHANGE msg=audit(1447237983.591:712744): pid=2709 uid=0 auid=0 ses=23748 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447237983.619:712745): pid=2709 uid=0 auid=0 ses=23748 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447237983.621:712746): pid=2709 uid=0 auid=0 ses=23748 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447237983.621:712747): pid=2709 uid=0 auid=0 ses=23748 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447237983.623:712748): pid=2712 uid=0 auid=0 ses=23748 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=2712 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447237983.623:712749): pid=2712 uid=0 auid=0 ses=23748 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=2712 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447237983.623:712750): pid=2712 uid=0 auid=0 ses=23748 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=2712 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447237983.624:712751): pid=2712 uid=0 auid=0 ses=23748 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447237983.645:712752): pid=2709 uid=0 auid=0 ses=23748 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447237983.645:712753): pid=2709 uid=0 auid=0 ses=23748 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447237983.650:712754): pid=2709 uid=0 auid=0 ses=23748 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447237983.650:712755): pid=2709 uid=0 auid=0 ses=23748 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447237983.651:712756): pid=2709 uid=0 auid=0 ses=23748 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2709 suid=0 rport=43155 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447237983.651:712757): pid=2709 uid=0 auid=0 ses=23748 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=2709 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447237983.652:712758): pid=2709 uid=0 auid=0 ses=23748 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=2709 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447237983.652:712759): pid=2709 uid=0 auid=0 ses=23748 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=2709 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447237983.671:712760): pid=2720 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=2720 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447237983.671:712761): pid=2720 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=2720 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447237983.671:712762): pid=2720 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=2720 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447237983.715:712763): pid=2719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=2720 suid=74 rport=43156 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447237983.715:712764): pid=2719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=2720 suid=74 rport=43156 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447237983.844:712765): pid=2719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=43156 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447237983.844:712766): pid=2719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=43156 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447237983.850:712767): pid=2719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447237983.851:712768): pid=2719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2720 suid=74 rport=43156 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447237983.853:712769): pid=2719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447237983.853:712770): pid=2719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447237983.853:712771): pid=2719 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23749 res=1
type=USER_ROLE_CHANGE msg=audit(1447237983.919:712772): pid=2719 uid=0 auid=0 ses=23749 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447237983.942:712773): pid=2719 uid=0 auid=0 ses=23749 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447237983.945:712774): pid=2719 uid=0 auid=0 ses=23749 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447237983.945:712775): pid=2719 uid=0 auid=0 ses=23749 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447237983.947:712776): pid=2722 uid=0 auid=0 ses=23749 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=2722 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447237983.947:712777): pid=2722 uid=0 auid=0 ses=23749 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=2722 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447237983.947:712778): pid=2722 uid=0 auid=0 ses=23749 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=2722 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447237983.948:712779): pid=2722 uid=0 auid=0 ses=23749 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447237985.208:712780): pid=2719 uid=0 auid=0 ses=23749 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447237985.208:712781): pid=2719 uid=0 auid=0 ses=23749 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447237985.212:712782): pid=2719 uid=0 auid=0 ses=23749 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447237985.212:712783): pid=2719 uid=0 auid=0 ses=23749 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447237985.212:712784): pid=2719 uid=0 auid=0 ses=23749 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2719 suid=0 rport=43156 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447237985.212:712785): pid=2719 uid=0 auid=0 ses=23749 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=2719 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447237985.212:712786): pid=2719 uid=0 auid=0 ses=23749 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=2719 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447237985.213:712787): pid=2719 uid=0 auid=0 ses=23749 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=2719 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447237985.250:712788): pid=2772 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=2772 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447237985.250:712789): pid=2772 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=2772 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447237985.250:712790): pid=2772 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=2772 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447237985.294:712791): pid=2771 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=2772 suid=74 rport=43160 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447237985.294:712792): pid=2771 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=2772 suid=74 rport=43160 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447237985.421:712793): pid=2771 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=43160 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447237985.421:712794): pid=2771 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=43160 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447237985.430:712795): pid=2771 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447237985.431:712796): pid=2771 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2772 suid=74 rport=43160 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447237985.432:712797): pid=2771 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447237985.432:712798): pid=2771 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447237985.432:712799): pid=2771 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23750 res=1
type=USER_ROLE_CHANGE msg=audit(1447237985.496:712800): pid=2771 uid=0 auid=0 ses=23750 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447237985.516:712801): pid=2771 uid=0 auid=0 ses=23750 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447237985.519:712802): pid=2771 uid=0 auid=0 ses=23750 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447237985.519:712803): pid=2771 uid=0 auid=0 ses=23750 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447237985.521:712804): pid=2774 uid=0 auid=0 ses=23750 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=2774 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447237985.521:712805): pid=2774 uid=0 auid=0 ses=23750 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=2774 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447237985.521:712806): pid=2774 uid=0 auid=0 ses=23750 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=2774 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447237985.522:712807): pid=2774 uid=0 auid=0 ses=23750 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447237985.541:712808): pid=2771 uid=0 auid=0 ses=23750 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447237985.541:712809): pid=2771 uid=0 auid=0 ses=23750 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447237985.547:712810): pid=2771 uid=0 auid=0 ses=23750 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447237985.548:712811): pid=2771 uid=0 auid=0 ses=23750 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447237985.548:712812): pid=2771 uid=0 auid=0 ses=23750 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2771 suid=0 rport=43160 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447237985.548:712813): pid=2771 uid=0 auid=0 ses=23750 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=2771 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447237985.548:712814): pid=2771 uid=0 auid=0 ses=23750 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=2771 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447237985.549:712815): pid=2771 uid=0 auid=0 ses=23750 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=2771 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447238401.496:712816): pid=4060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447238401.496:712817): pid=4061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447238401.496:712818): pid=4060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447238401.496:712819): pid=4061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447238401.497:712820): pid=4061 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23751 res=1
type=LOGIN msg=audit(1447238401.497:712821): pid=4060 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23752 res=1
type=USER_START msg=audit(1447238401.514:712822): pid=4061 uid=0 auid=0 ses=23751 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447238401.515:712823): pid=4060 uid=0 auid=0 ses=23752 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447238401.515:712824): pid=4061 uid=0 auid=0 ses=23751 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447238401.515:712825): pid=4060 uid=0 auid=0 ses=23752 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447238401.523:712826): pid=4061 uid=0 auid=0 ses=23751 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447238401.525:712827): pid=4061 uid=0 auid=0 ses=23751 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447238401.532:712828): pid=4060 uid=0 auid=0 ses=23752 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447238401.534:712829): pid=4060 uid=0 auid=0 ses=23752 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447239001.548:712830): pid=5905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447239001.548:712831): pid=5905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447239001.548:712832): pid=5904 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447239001.548:712833): pid=5904 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447239001.548:712834): pid=5905 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23753 res=1
type=LOGIN msg=audit(1447239001.549:712835): pid=5904 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23754 res=1
type=USER_START msg=audit(1447239001.564:712836): pid=5905 uid=0 auid=0 ses=23753 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447239001.564:712837): pid=5905 uid=0 auid=0 ses=23753 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447239001.565:712838): pid=5904 uid=0 auid=0 ses=23754 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447239001.565:712839): pid=5904 uid=0 auid=0 ses=23754 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447239001.570:712840): pid=5905 uid=0 auid=0 ses=23753 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447239001.573:712841): pid=5905 uid=0 auid=0 ses=23753 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447239001.577:712842): pid=5904 uid=0 auid=0 ses=23754 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447239001.582:712843): pid=5904 uid=0 auid=0 ses=23754 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1447239135.758:712844): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=CRYPTO_KEY_USER msg=audit(1447239183.192:712845): pid=6469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=6469 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447239183.192:712846): pid=6469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=6469 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447239183.192:712847): pid=6469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=6469 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447239183.236:712848): pid=6468 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=6469 suid=74 rport=45136 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447239183.236:712849): pid=6468 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=6469 suid=74 rport=45136 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447239183.366:712850): pid=6468 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=45136 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447239183.366:712851): pid=6468 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=45136 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447239183.376:712852): pid=6468 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447239183.377:712853): pid=6468 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6469 suid=74 rport=45136 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447239183.379:712854): pid=6468 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447239183.381:712855): pid=6468 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447239183.381:712856): pid=6468 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23755 res=1
type=USER_ROLE_CHANGE msg=audit(1447239183.448:712857): pid=6468 uid=0 auid=0 ses=23755 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447239183.473:712858): pid=6468 uid=0 auid=0 ses=23755 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447239183.476:712859): pid=6468 uid=0 auid=0 ses=23755 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447239183.476:712860): pid=6468 uid=0 auid=0 ses=23755 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447239183.478:712861): pid=6471 uid=0 auid=0 ses=23755 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=6471 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447239183.478:712862): pid=6471 uid=0 auid=0 ses=23755 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=6471 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447239183.478:712863): pid=6471 uid=0 auid=0 ses=23755 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=6471 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447239183.479:712864): pid=6471 uid=0 auid=0 ses=23755 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447239183.501:712865): pid=6468 uid=0 auid=0 ses=23755 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447239183.501:712866): pid=6468 uid=0 auid=0 ses=23755 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447239183.505:712867): pid=6468 uid=0 auid=0 ses=23755 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447239183.505:712868): pid=6468 uid=0 auid=0 ses=23755 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447239183.506:712869): pid=6468 uid=0 auid=0 ses=23755 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6468 suid=0 rport=45136 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447239183.506:712870): pid=6468 uid=0 auid=0 ses=23755 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=6468 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447239183.506:712871): pid=6468 uid=0 auid=0 ses=23755 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=6468 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447239183.506:712872): pid=6468 uid=0 auid=0 ses=23755 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=6468 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447239183.528:712873): pid=6479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=6479 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447239183.528:712874): pid=6479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=6479 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447239183.529:712875): pid=6479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=6479 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447239183.572:712876): pid=6478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=6479 suid=74 rport=45137 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447239183.573:712877): pid=6478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=6479 suid=74 rport=45137 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447239183.701:712878): pid=6478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=45137 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447239183.701:712879): pid=6478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=45137 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447239183.710:712880): pid=6478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447239183.711:712881): pid=6478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6479 suid=74 rport=45137 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447239183.713:712882): pid=6478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447239183.713:712883): pid=6478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447239183.713:712884): pid=6478 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23756 res=1
type=USER_ROLE_CHANGE msg=audit(1447239183.778:712885): pid=6478 uid=0 auid=0 ses=23756 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447239183.802:712886): pid=6478 uid=0 auid=0 ses=23756 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447239183.805:712887): pid=6478 uid=0 auid=0 ses=23756 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447239183.805:712888): pid=6478 uid=0 auid=0 ses=23756 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447239183.807:712889): pid=6481 uid=0 auid=0 ses=23756 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=6481 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447239183.807:712890): pid=6481 uid=0 auid=0 ses=23756 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=6481 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447239183.807:712891): pid=6481 uid=0 auid=0 ses=23756 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=6481 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447239183.808:712892): pid=6481 uid=0 auid=0 ses=23756 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447239185.072:712893): pid=6478 uid=0 auid=0 ses=23756 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447239185.072:712894): pid=6478 uid=0 auid=0 ses=23756 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447239185.077:712895): pid=6478 uid=0 auid=0 ses=23756 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447239185.078:712896): pid=6478 uid=0 auid=0 ses=23756 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447239185.079:712897): pid=6478 uid=0 auid=0 ses=23756 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6478 suid=0 rport=45137 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447239185.079:712898): pid=6478 uid=0 auid=0 ses=23756 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=6478 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447239185.079:712899): pid=6478 uid=0 auid=0 ses=23756 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=6478 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447239185.079:712900): pid=6478 uid=0 auid=0 ses=23756 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=6478 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447239185.114:712901): pid=6531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=6531 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447239185.114:712902): pid=6531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=6531 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447239185.114:712903): pid=6531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=6531 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447239185.158:712904): pid=6530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=6531 suid=74 rport=45141 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447239185.158:712905): pid=6530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=6531 suid=74 rport=45141 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447239185.281:712906): pid=6530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=45141 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447239185.281:712907): pid=6530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=45141 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447239185.286:712908): pid=6530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447239185.287:712909): pid=6530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6531 suid=74 rport=45141 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447239185.289:712910): pid=6530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447239185.289:712911): pid=6530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447239185.289:712912): pid=6530 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23757 res=1
type=USER_ROLE_CHANGE msg=audit(1447239185.353:712913): pid=6530 uid=0 auid=0 ses=23757 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447239185.375:712914): pid=6530 uid=0 auid=0 ses=23757 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447239185.378:712915): pid=6530 uid=0 auid=0 ses=23757 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447239185.378:712916): pid=6530 uid=0 auid=0 ses=23757 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447239185.379:712917): pid=6533 uid=0 auid=0 ses=23757 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=6533 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447239185.379:712918): pid=6533 uid=0 auid=0 ses=23757 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=6533 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447239185.379:712919): pid=6533 uid=0 auid=0 ses=23757 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=6533 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447239185.380:712920): pid=6533 uid=0 auid=0 ses=23757 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447239185.395:712921): pid=6530 uid=0 auid=0 ses=23757 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447239185.395:712922): pid=6530 uid=0 auid=0 ses=23757 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447239185.400:712923): pid=6530 uid=0 auid=0 ses=23757 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447239185.400:712924): pid=6530 uid=0 auid=0 ses=23757 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447239185.401:712925): pid=6530 uid=0 auid=0 ses=23757 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6530 suid=0 rport=45141 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447239185.401:712926): pid=6530 uid=0 auid=0 ses=23757 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=6530 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447239185.401:712927): pid=6530 uid=0 auid=0 ses=23757 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=6530 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447239185.401:712928): pid=6530 uid=0 auid=0 ses=23757 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=6530 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447239601.607:712929): pid=7824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447239601.607:712930): pid=7824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447239601.607:712931): pid=7825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447239601.607:712932): pid=7825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447239601.608:712933): pid=7824 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23758 res=1
type=LOGIN msg=audit(1447239601.608:712934): pid=7825 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23759 res=1
type=USER_START msg=audit(1447239601.631:712935): pid=7825 uid=0 auid=0 ses=23759 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447239601.632:712936): pid=7825 uid=0 auid=0 ses=23759 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447239601.634:712937): pid=7824 uid=0 auid=0 ses=23758 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447239601.635:712938): pid=7824 uid=0 auid=0 ses=23758 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447239601.643:712939): pid=7825 uid=0 auid=0 ses=23759 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447239601.648:712940): pid=7825 uid=0 auid=0 ses=23759 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447239601.649:712941): pid=7824 uid=0 auid=0 ses=23758 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447239601.653:712942): pid=7824 uid=0 auid=0 ses=23758 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447239661.667:712943): pid=8060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447239661.667:712944): pid=8060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447239661.667:712945): pid=8060 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23760 res=1
type=USER_START msg=audit(1447239661.679:712946): pid=8060 uid=0 auid=0 ses=23760 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447239661.679:712947): pid=8060 uid=0 auid=0 ses=23760 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447239661.702:712948): pid=8060 uid=0 auid=0 ses=23760 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447239661.704:712949): pid=8060 uid=0 auid=0 ses=23760 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447240201.720:712950): pid=9729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447240201.720:712951): pid=9729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447240201.720:712952): pid=9729 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23761 res=1
type=USER_ACCT msg=audit(1447240201.721:712953): pid=9728 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447240201.721:712954): pid=9728 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447240201.721:712955): pid=9728 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23762 res=1
type=USER_START msg=audit(1447240201.733:712956): pid=9729 uid=0 auid=0 ses=23761 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447240201.734:712957): pid=9729 uid=0 auid=0 ses=23761 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447240201.736:712958): pid=9728 uid=0 auid=0 ses=23762 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447240201.736:712959): pid=9728 uid=0 auid=0 ses=23762 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447240201.741:712960): pid=9729 uid=0 auid=0 ses=23761 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447240201.742:712961): pid=9729 uid=0 auid=0 ses=23761 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447240201.748:712962): pid=9728 uid=0 auid=0 ses=23762 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447240201.749:712963): pid=9728 uid=0 auid=0 ses=23762 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447240382.913:712964): pid=10299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=10299 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447240382.913:712965): pid=10299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=10299 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447240382.913:712966): pid=10299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=10299 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447240382.957:712967): pid=10298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=10299 suid=74 rport=47116 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447240382.957:712968): pid=10298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=10299 suid=74 rport=47116 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447240383.085:712969): pid=10298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=47116 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447240383.085:712970): pid=10298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=47116 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447240383.095:712971): pid=10298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447240383.096:712972): pid=10298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10299 suid=74 rport=47116 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447240383.098:712973): pid=10298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447240383.099:712974): pid=10298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447240383.099:712975): pid=10298 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23763 res=1
type=USER_ROLE_CHANGE msg=audit(1447240383.167:712976): pid=10298 uid=0 auid=0 ses=23763 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447240383.188:712977): pid=10298 uid=0 auid=0 ses=23763 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447240383.191:712978): pid=10298 uid=0 auid=0 ses=23763 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447240383.191:712979): pid=10298 uid=0 auid=0 ses=23763 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447240383.192:712980): pid=10301 uid=0 auid=0 ses=23763 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=10301 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447240383.192:712981): pid=10301 uid=0 auid=0 ses=23763 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=10301 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447240383.192:712982): pid=10301 uid=0 auid=0 ses=23763 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=10301 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447240383.193:712983): pid=10301 uid=0 auid=0 ses=23763 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447240383.214:712984): pid=10298 uid=0 auid=0 ses=23763 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447240383.214:712985): pid=10298 uid=0 auid=0 ses=23763 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447240383.218:712986): pid=10298 uid=0 auid=0 ses=23763 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447240383.218:712987): pid=10298 uid=0 auid=0 ses=23763 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447240383.218:712988): pid=10298 uid=0 auid=0 ses=23763 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10298 suid=0 rport=47116 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447240383.218:712989): pid=10298 uid=0 auid=0 ses=23763 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=10298 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447240383.219:712990): pid=10298 uid=0 auid=0 ses=23763 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=10298 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447240383.219:712991): pid=10298 uid=0 auid=0 ses=23763 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=10298 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447240383.245:712992): pid=10309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=10309 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447240383.245:712993): pid=10309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=10309 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447240383.245:712994): pid=10309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=10309 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447240383.290:712995): pid=10308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=10309 suid=74 rport=47117 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447240383.290:712996): pid=10308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=10309 suid=74 rport=47117 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447240383.419:712997): pid=10308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=47117 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447240383.419:712998): pid=10308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=47117 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447240383.430:712999): pid=10308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447240383.431:713000): pid=10308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10309 suid=74 rport=47117 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447240383.432:713001): pid=10308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447240383.432:713002): pid=10308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447240383.432:713003): pid=10308 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23764 res=1
type=USER_ROLE_CHANGE msg=audit(1447240383.497:713004): pid=10308 uid=0 auid=0 ses=23764 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447240383.520:713005): pid=10308 uid=0 auid=0 ses=23764 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447240383.522:713006): pid=10308 uid=0 auid=0 ses=23764 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447240383.522:713007): pid=10308 uid=0 auid=0 ses=23764 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447240383.524:713008): pid=10311 uid=0 auid=0 ses=23764 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=10311 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447240383.524:713009): pid=10311 uid=0 auid=0 ses=23764 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=10311 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447240383.524:713010): pid=10311 uid=0 auid=0 ses=23764 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=10311 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447240383.524:713011): pid=10311 uid=0 auid=0 ses=23764 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447240384.812:713012): pid=10308 uid=0 auid=0 ses=23764 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447240384.813:713013): pid=10308 uid=0 auid=0 ses=23764 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447240384.817:713014): pid=10308 uid=0 auid=0 ses=23764 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447240384.817:713015): pid=10308 uid=0 auid=0 ses=23764 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447240384.818:713016): pid=10308 uid=0 auid=0 ses=23764 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10308 suid=0 rport=47117 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447240384.818:713017): pid=10308 uid=0 auid=0 ses=23764 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=10308 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447240384.819:713018): pid=10308 uid=0 auid=0 ses=23764 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=10308 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447240384.819:713019): pid=10308 uid=0 auid=0 ses=23764 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=10308 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447240384.854:713020): pid=10361 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=10361 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447240384.854:713021): pid=10361 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=10361 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447240384.854:713022): pid=10361 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=10361 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447240384.900:713023): pid=10360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=10361 suid=74 rport=47120 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447240384.900:713024): pid=10360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=10361 suid=74 rport=47120 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447240385.028:713025): pid=10360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=47120 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447240385.028:713026): pid=10360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=47120 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447240385.032:713027): pid=10360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447240385.033:713028): pid=10360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10361 suid=74 rport=47120 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447240385.034:713029): pid=10360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447240385.035:713030): pid=10360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447240385.035:713031): pid=10360 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23765 res=1
type=USER_ROLE_CHANGE msg=audit(1447240385.101:713032): pid=10360 uid=0 auid=0 ses=23765 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447240385.119:713033): pid=10360 uid=0 auid=0 ses=23765 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447240385.121:713034): pid=10360 uid=0 auid=0 ses=23765 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447240385.122:713035): pid=10360 uid=0 auid=0 ses=23765 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447240385.123:713036): pid=10363 uid=0 auid=0 ses=23765 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=10363 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447240385.123:713037): pid=10363 uid=0 auid=0 ses=23765 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=10363 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447240385.123:713038): pid=10363 uid=0 auid=0 ses=23765 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=10363 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447240385.124:713039): pid=10363 uid=0 auid=0 ses=23765 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447240385.140:713040): pid=10360 uid=0 auid=0 ses=23765 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447240385.140:713041): pid=10360 uid=0 auid=0 ses=23765 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447240385.143:713042): pid=10360 uid=0 auid=0 ses=23765 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447240385.143:713043): pid=10360 uid=0 auid=0 ses=23765 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447240385.143:713044): pid=10360 uid=0 auid=0 ses=23765 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10360 suid=0 rport=47120 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447240385.144:713045): pid=10360 uid=0 auid=0 ses=23765 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=10360 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447240385.144:713046): pid=10360 uid=0 auid=0 ses=23765 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=10360 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447240385.144:713047): pid=10360 uid=0 auid=0 ses=23765 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=10360 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447240801.767:713048): pid=11653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447240801.767:713049): pid=11652 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447240801.768:713050): pid=11653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447240801.768:713051): pid=11652 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447240801.769:713053): pid=11653 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23767 res=1
type=LOGIN msg=audit(1447240801.769:713052): pid=11652 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23766 res=1
type=USER_START msg=audit(1447240801.792:713054): pid=11653 uid=0 auid=0 ses=23767 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447240801.793:713055): pid=11653 uid=0 auid=0 ses=23767 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447240801.793:713056): pid=11652 uid=0 auid=0 ses=23766 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447240801.793:713057): pid=11652 uid=0 auid=0 ses=23766 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447240801.807:713058): pid=11653 uid=0 auid=0 ses=23767 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447240801.808:713059): pid=11653 uid=0 auid=0 ses=23767 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447240801.809:713060): pid=11652 uid=0 auid=0 ses=23766 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447240801.812:713061): pid=11652 uid=0 auid=0 ses=23766 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1447241233.753:713062): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447241401.828:713063): pid=13496 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447241401.828:713064): pid=13497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447241401.828:713065): pid=13497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447241401.828:713066): pid=13496 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447241401.828:713067): pid=13497 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23768 res=1
type=LOGIN msg=audit(1447241401.828:713068): pid=13496 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23769 res=1
type=USER_START msg=audit(1447241401.841:713069): pid=13497 uid=0 auid=0 ses=23768 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447241401.841:713070): pid=13497 uid=0 auid=0 ses=23768 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447241401.843:713071): pid=13496 uid=0 auid=0 ses=23769 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447241401.843:713072): pid=13496 uid=0 auid=0 ses=23769 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447241401.848:713073): pid=13497 uid=0 auid=0 ses=23768 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447241401.849:713074): pid=13497 uid=0 auid=0 ses=23768 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447241401.856:713075): pid=13496 uid=0 auid=0 ses=23769 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447241401.857:713076): pid=13496 uid=0 auid=0 ses=23769 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447241582.716:713077): pid=14063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=14063 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447241582.716:713078): pid=14063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=14063 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447241582.716:713079): pid=14063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=14063 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447241582.760:713080): pid=14062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=14063 suid=74 rport=49094 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447241582.761:713081): pid=14062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=14063 suid=74 rport=49094 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447241582.888:713082): pid=14062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=49094 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447241582.888:713083): pid=14062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=49094 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447241582.895:713084): pid=14062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447241582.896:713085): pid=14062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14063 suid=74 rport=49094 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447241582.897:713086): pid=14062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447241582.898:713087): pid=14062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447241582.898:713088): pid=14062 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23770 res=1
type=USER_ROLE_CHANGE msg=audit(1447241582.966:713089): pid=14062 uid=0 auid=0 ses=23770 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447241582.984:713090): pid=14062 uid=0 auid=0 ses=23770 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447241582.987:713091): pid=14062 uid=0 auid=0 ses=23770 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447241582.987:713092): pid=14062 uid=0 auid=0 ses=23770 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447241582.988:713093): pid=14065 uid=0 auid=0 ses=23770 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=14065 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447241582.988:713094): pid=14065 uid=0 auid=0 ses=23770 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=14065 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447241582.989:713095): pid=14065 uid=0 auid=0 ses=23770 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=14065 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447241582.990:713096): pid=14065 uid=0 auid=0 ses=23770 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447241583.009:713097): pid=14062 uid=0 auid=0 ses=23770 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447241583.009:713098): pid=14062 uid=0 auid=0 ses=23770 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447241583.013:713099): pid=14062 uid=0 auid=0 ses=23770 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447241583.013:713100): pid=14062 uid=0 auid=0 ses=23770 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447241583.014:713101): pid=14062 uid=0 auid=0 ses=23770 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14062 suid=0 rport=49094 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447241583.014:713102): pid=14062 uid=0 auid=0 ses=23770 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=14062 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447241583.014:713103): pid=14062 uid=0 auid=0 ses=23770 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=14062 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447241583.015:713104): pid=14062 uid=0 auid=0 ses=23770 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=14062 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447241583.038:713105): pid=14073 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=14073 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447241583.038:713106): pid=14073 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=14073 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447241583.038:713107): pid=14073 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=14073 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447241583.083:713108): pid=14072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=14073 suid=74 rport=49096 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447241583.083:713109): pid=14072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=14073 suid=74 rport=49096 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447241583.213:713110): pid=14072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=49096 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447241583.213:713111): pid=14072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=49096 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447241583.222:713112): pid=14072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447241583.223:713113): pid=14072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14073 suid=74 rport=49096 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447241583.225:713114): pid=14072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447241583.225:713115): pid=14072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447241583.225:713116): pid=14072 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23771 res=1
type=USER_ROLE_CHANGE msg=audit(1447241583.288:713117): pid=14072 uid=0 auid=0 ses=23771 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447241583.313:713118): pid=14072 uid=0 auid=0 ses=23771 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447241583.316:713119): pid=14072 uid=0 auid=0 ses=23771 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447241583.316:713120): pid=14072 uid=0 auid=0 ses=23771 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447241583.317:713121): pid=14075 uid=0 auid=0 ses=23771 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=14075 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447241583.317:713122): pid=14075 uid=0 auid=0 ses=23771 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=14075 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447241583.317:713123): pid=14075 uid=0 auid=0 ses=23771 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=14075 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447241583.318:713124): pid=14075 uid=0 auid=0 ses=23771 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447241584.612:713125): pid=14072 uid=0 auid=0 ses=23771 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447241584.612:713126): pid=14072 uid=0 auid=0 ses=23771 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447241584.616:713127): pid=14072 uid=0 auid=0 ses=23771 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447241584.616:713128): pid=14072 uid=0 auid=0 ses=23771 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447241584.616:713129): pid=14072 uid=0 auid=0 ses=23771 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14072 suid=0 rport=49096 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447241584.617:713130): pid=14072 uid=0 auid=0 ses=23771 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=14072 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447241584.617:713131): pid=14072 uid=0 auid=0 ses=23771 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=14072 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447241584.617:713132): pid=14072 uid=0 auid=0 ses=23771 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=14072 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447241584.648:713133): pid=14125 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=14125 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447241584.649:713134): pid=14125 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=14125 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447241584.649:713135): pid=14125 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=14125 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447241584.693:713136): pid=14124 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=14125 suid=74 rport=49099 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447241584.693:713137): pid=14124 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=14125 suid=74 rport=49099 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447241584.818:713138): pid=14124 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=49099 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447241584.818:713139): pid=14124 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=49099 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447241584.824:713140): pid=14124 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447241584.825:713141): pid=14124 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14125 suid=74 rport=49099 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447241584.827:713142): pid=14124 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447241584.827:713143): pid=14124 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447241584.827:713144): pid=14124 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23772 res=1
type=USER_ROLE_CHANGE msg=audit(1447241584.889:713145): pid=14124 uid=0 auid=0 ses=23772 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447241584.910:713146): pid=14124 uid=0 auid=0 ses=23772 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447241584.913:713147): pid=14124 uid=0 auid=0 ses=23772 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447241584.913:713148): pid=14124 uid=0 auid=0 ses=23772 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447241584.914:713149): pid=14127 uid=0 auid=0 ses=23772 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=14127 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447241584.915:713150): pid=14127 uid=0 auid=0 ses=23772 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=14127 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447241584.915:713151): pid=14127 uid=0 auid=0 ses=23772 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=14127 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447241584.916:713152): pid=14127 uid=0 auid=0 ses=23772 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447241584.934:713153): pid=14124 uid=0 auid=0 ses=23772 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447241584.935:713154): pid=14124 uid=0 auid=0 ses=23772 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447241584.937:713155): pid=14124 uid=0 auid=0 ses=23772 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447241584.937:713156): pid=14124 uid=0 auid=0 ses=23772 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447241584.938:713157): pid=14124 uid=0 auid=0 ses=23772 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14124 suid=0 rport=49099 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447241584.938:713158): pid=14124 uid=0 auid=0 ses=23772 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=14124 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447241584.938:713159): pid=14124 uid=0 auid=0 ses=23772 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=14124 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447241584.938:713160): pid=14124 uid=0 auid=0 ses=23772 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=14124 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447242001.877:713162): pid=15413 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447242001.877:713161): pid=15414 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447242001.878:713164): pid=15413 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447242001.878:713163): pid=15414 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447242001.879:713165): pid=15414 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23773 res=1
type=LOGIN msg=audit(1447242001.879:713166): pid=15413 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23774 res=1
type=USER_START msg=audit(1447242001.897:713167): pid=15413 uid=0 auid=0 ses=23774 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447242001.897:713168): pid=15414 uid=0 auid=0 ses=23773 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447242001.897:713169): pid=15414 uid=0 auid=0 ses=23773 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447242001.897:713170): pid=15413 uid=0 auid=0 ses=23774 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447242001.905:713171): pid=15414 uid=0 auid=0 ses=23773 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447242001.906:713172): pid=15414 uid=0 auid=0 ses=23773 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447242001.916:713173): pid=15413 uid=0 auid=0 ses=23774 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447242001.917:713174): pid=15413 uid=0 auid=0 ses=23774 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447242601.934:713175): pid=17260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447242601.934:713176): pid=17261 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447242601.934:713177): pid=17261 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447242601.934:713178): pid=17260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447242601.935:713179): pid=17261 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23775 res=1
type=LOGIN msg=audit(1447242601.935:713180): pid=17260 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23776 res=1
type=USER_START msg=audit(1447242601.950:713181): pid=17261 uid=0 auid=0 ses=23775 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447242601.951:713182): pid=17261 uid=0 auid=0 ses=23775 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447242601.953:713183): pid=17260 uid=0 auid=0 ses=23776 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447242601.953:713184): pid=17260 uid=0 auid=0 ses=23776 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447242601.957:713185): pid=17261 uid=0 auid=0 ses=23775 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447242601.960:713186): pid=17261 uid=0 auid=0 ses=23775 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447242601.969:713187): pid=17260 uid=0 auid=0 ses=23776 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447242601.970:713188): pid=17260 uid=0 auid=0 ses=23776 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447242782.403:713189): pid=17825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=17825 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447242782.403:713190): pid=17825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=17825 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447242782.403:713191): pid=17825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=17825 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447242782.448:713192): pid=17824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=17825 suid=74 rport=51075 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447242782.448:713193): pid=17824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=17825 suid=74 rport=51075 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447242782.571:713194): pid=17824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=51075 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447242782.571:713195): pid=17824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=51075 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447242782.575:713196): pid=17824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447242782.576:713197): pid=17824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=17825 suid=74 rport=51075 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447242782.577:713198): pid=17824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447242782.578:713199): pid=17824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447242782.578:713200): pid=17824 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23777 res=1
type=USER_ROLE_CHANGE msg=audit(1447242782.653:713201): pid=17824 uid=0 auid=0 ses=23777 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447242782.672:713202): pid=17824 uid=0 auid=0 ses=23777 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447242782.675:713203): pid=17824 uid=0 auid=0 ses=23777 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447242782.675:713204): pid=17824 uid=0 auid=0 ses=23777 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447242782.677:713205): pid=17827 uid=0 auid=0 ses=23777 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=17827 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447242782.677:713206): pid=17827 uid=0 auid=0 ses=23777 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=17827 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447242782.677:713207): pid=17827 uid=0 auid=0 ses=23777 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=17827 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447242782.678:713208): pid=17827 uid=0 auid=0 ses=23777 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447242782.695:713209): pid=17824 uid=0 auid=0 ses=23777 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447242782.695:713210): pid=17824 uid=0 auid=0 ses=23777 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447242782.700:713211): pid=17824 uid=0 auid=0 ses=23777 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447242782.700:713212): pid=17824 uid=0 auid=0 ses=23777 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447242782.700:713213): pid=17824 uid=0 auid=0 ses=23777 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=17824 suid=0 rport=51075 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447242782.700:713214): pid=17824 uid=0 auid=0 ses=23777 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=17824 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447242782.700:713215): pid=17824 uid=0 auid=0 ses=23777 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=17824 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447242782.700:713216): pid=17824 uid=0 auid=0 ses=23777 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=17824 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447242782.722:713217): pid=17835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=17835 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447242782.722:713218): pid=17835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=17835 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447242782.722:713219): pid=17835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=17835 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447242782.766:713220): pid=17834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=17835 suid=74 rport=51076 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447242782.767:713221): pid=17834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=17835 suid=74 rport=51076 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447242782.895:713222): pid=17834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=51076 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447242782.895:713223): pid=17834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=51076 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447242782.904:713224): pid=17834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447242782.905:713225): pid=17834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=17835 suid=74 rport=51076 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447242782.907:713226): pid=17834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447242782.907:713227): pid=17834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447242782.907:713228): pid=17834 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23778 res=1
type=USER_ROLE_CHANGE msg=audit(1447242782.972:713229): pid=17834 uid=0 auid=0 ses=23778 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447242782.996:713230): pid=17834 uid=0 auid=0 ses=23778 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447242782.999:713231): pid=17834 uid=0 auid=0 ses=23778 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447242782.999:713232): pid=17834 uid=0 auid=0 ses=23778 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447242783.000:713233): pid=17837 uid=0 auid=0 ses=23778 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=17837 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447242783.001:713234): pid=17837 uid=0 auid=0 ses=23778 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=17837 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447242783.001:713235): pid=17837 uid=0 auid=0 ses=23778 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=17837 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447242783.002:713236): pid=17837 uid=0 auid=0 ses=23778 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447242784.273:713237): pid=17834 uid=0 auid=0 ses=23778 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447242784.273:713238): pid=17834 uid=0 auid=0 ses=23778 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447242784.277:713239): pid=17834 uid=0 auid=0 ses=23778 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447242784.277:713240): pid=17834 uid=0 auid=0 ses=23778 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447242784.277:713241): pid=17834 uid=0 auid=0 ses=23778 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=17834 suid=0 rport=51076 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447242784.277:713242): pid=17834 uid=0 auid=0 ses=23778 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=17834 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447242784.277:713243): pid=17834 uid=0 auid=0 ses=23778 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=17834 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447242784.277:713244): pid=17834 uid=0 auid=0 ses=23778 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=17834 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447242784.315:713245): pid=17887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=17887 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447242784.315:713246): pid=17887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=17887 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447242784.315:713247): pid=17887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=17887 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447242784.359:713248): pid=17886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=17887 suid=74 rport=51080 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447242784.359:713249): pid=17886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=17887 suid=74 rport=51080 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447242784.488:713250): pid=17886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=51080 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447242784.488:713251): pid=17886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=51080 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447242784.497:713252): pid=17886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447242784.498:713253): pid=17886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=17887 suid=74 rport=51080 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447242784.500:713254): pid=17886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447242784.500:713255): pid=17886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447242784.500:713256): pid=17886 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23779 res=1
type=USER_ROLE_CHANGE msg=audit(1447242784.570:713257): pid=17886 uid=0 auid=0 ses=23779 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447242784.596:713258): pid=17886 uid=0 auid=0 ses=23779 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447242784.599:713259): pid=17886 uid=0 auid=0 ses=23779 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447242784.599:713260): pid=17886 uid=0 auid=0 ses=23779 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447242784.601:713261): pid=17889 uid=0 auid=0 ses=23779 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=17889 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447242784.601:713262): pid=17889 uid=0 auid=0 ses=23779 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=17889 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447242784.601:713263): pid=17889 uid=0 auid=0 ses=23779 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=17889 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447242784.601:713264): pid=17889 uid=0 auid=0 ses=23779 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447242784.619:713265): pid=17886 uid=0 auid=0 ses=23779 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447242784.619:713266): pid=17886 uid=0 auid=0 ses=23779 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447242784.622:713267): pid=17886 uid=0 auid=0 ses=23779 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447242784.622:713268): pid=17886 uid=0 auid=0 ses=23779 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447242784.624:713269): pid=17886 uid=0 auid=0 ses=23779 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=17886 suid=0 rport=51080 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447242784.624:713270): pid=17886 uid=0 auid=0 ses=23779 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=17886 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447242784.624:713271): pid=17886 uid=0 auid=0 ses=23779 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=17886 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447242784.624:713272): pid=17886 uid=0 auid=0 ses=23779 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=17886 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447243201.987:713274): pid=19177 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447243201.987:713273): pid=19178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447243201.988:713275): pid=19178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447243201.988:713276): pid=19177 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447243201.989:713277): pid=19177 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23780 res=1
type=LOGIN msg=audit(1447243201.989:713278): pid=19178 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23781 res=1
type=USER_START msg=audit(1447243202.006:713279): pid=19178 uid=0 auid=0 ses=23781 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447243202.006:713280): pid=19177 uid=0 auid=0 ses=23780 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447243202.006:713281): pid=19178 uid=0 auid=0 ses=23781 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447243202.006:713282): pid=19177 uid=0 auid=0 ses=23780 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447243202.017:713283): pid=19178 uid=0 auid=0 ses=23781 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447243202.019:713284): pid=19178 uid=0 auid=0 ses=23781 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447243202.022:713285): pid=19177 uid=0 auid=0 ses=23780 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447243227.050:713286): pid=19177 uid=0 auid=0 ses=23780 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=USER_ACCT msg=audit(1447243261.066:713287): pid=19414 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447243261.066:713288): pid=19414 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447243261.067:713289): pid=19414 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23782 res=1
type=USER_START msg=audit(1447243261.080:713290): pid=19414 uid=0 auid=0 ses=23782 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447243261.081:713291): pid=19414 uid=0 auid=0 ses=23782 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447243261.104:713292): pid=19414 uid=0 auid=0 ses=23782 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447243261.105:713293): pid=19414 uid=0 auid=0 ses=23782 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1447243300.714:713294): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447243801.122:713295): pid=21059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447243801.122:713296): pid=21060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447243801.122:713297): pid=21059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447243801.122:713298): pid=21060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447243801.122:713299): pid=21059 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23783 res=1
type=LOGIN msg=audit(1447243801.122:713300): pid=21060 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23784 res=1
type=USER_START msg=audit(1447243801.136:713301): pid=21059 uid=0 auid=0 ses=23783 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447243801.136:713302): pid=21059 uid=0 auid=0 ses=23783 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447243801.137:713303): pid=21060 uid=0 auid=0 ses=23784 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447243801.137:713304): pid=21060 uid=0 auid=0 ses=23784 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447243801.144:713305): pid=21060 uid=0 auid=0 ses=23784 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447243801.146:713306): pid=21060 uid=0 auid=0 ses=23784 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447243801.151:713307): pid=21059 uid=0 auid=0 ses=23783 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447243826.180:713308): pid=21059 uid=0 auid=0 ses=23783 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=CRYPTO_KEY_USER msg=audit(1447243983.068:713309): pid=21642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=21642 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447243983.068:713310): pid=21642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=21642 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447243983.068:713311): pid=21642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=21642 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447243983.112:713312): pid=21641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=21642 suid=74 rport=53057 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447243983.112:713313): pid=21641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=21642 suid=74 rport=53057 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447243983.240:713314): pid=21641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=53057 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447243983.240:713315): pid=21641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=53057 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447243983.247:713316): pid=21641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447243983.249:713317): pid=21641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21642 suid=74 rport=53057 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447243983.251:713318): pid=21641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447243983.252:713319): pid=21641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447243983.252:713320): pid=21641 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23785 res=1
type=USER_ROLE_CHANGE msg=audit(1447243983.320:713321): pid=21641 uid=0 auid=0 ses=23785 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447243983.339:713322): pid=21641 uid=0 auid=0 ses=23785 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447243983.341:713323): pid=21641 uid=0 auid=0 ses=23785 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447243983.341:713324): pid=21641 uid=0 auid=0 ses=23785 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447243983.343:713325): pid=21644 uid=0 auid=0 ses=23785 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=21644 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447243983.343:713326): pid=21644 uid=0 auid=0 ses=23785 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=21644 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447243983.343:713327): pid=21644 uid=0 auid=0 ses=23785 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=21644 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447243983.343:713328): pid=21644 uid=0 auid=0 ses=23785 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447243983.361:713329): pid=21641 uid=0 auid=0 ses=23785 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447243983.361:713330): pid=21641 uid=0 auid=0 ses=23785 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447243983.365:713331): pid=21641 uid=0 auid=0 ses=23785 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447243983.365:713332): pid=21641 uid=0 auid=0 ses=23785 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447243983.366:713333): pid=21641 uid=0 auid=0 ses=23785 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21641 suid=0 rport=53057 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447243983.366:713334): pid=21641 uid=0 auid=0 ses=23785 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=21641 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447243983.366:713335): pid=21641 uid=0 auid=0 ses=23785 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=21641 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447243983.366:713336): pid=21641 uid=0 auid=0 ses=23785 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=21641 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447243983.387:713337): pid=21652 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=21652 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447243983.388:713338): pid=21652 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=21652 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447243983.388:713339): pid=21652 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=21652 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447243983.432:713340): pid=21651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=21652 suid=74 rport=53058 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447243983.433:713341): pid=21651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=21652 suid=74 rport=53058 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447243983.562:713342): pid=21651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=53058 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447243983.562:713343): pid=21651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=53058 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447243983.570:713344): pid=21651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447243983.571:713345): pid=21651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21652 suid=74 rport=53058 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447243983.575:713346): pid=21651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447243983.575:713347): pid=21651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447243983.575:713348): pid=21651 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23786 res=1
type=USER_ROLE_CHANGE msg=audit(1447243983.643:713349): pid=21651 uid=0 auid=0 ses=23786 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447243983.665:713350): pid=21651 uid=0 auid=0 ses=23786 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447243983.668:713351): pid=21651 uid=0 auid=0 ses=23786 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447243983.668:713352): pid=21651 uid=0 auid=0 ses=23786 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447243983.670:713353): pid=21664 uid=0 auid=0 ses=23786 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=21664 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447243983.670:713354): pid=21664 uid=0 auid=0 ses=23786 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=21664 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447243983.670:713355): pid=21664 uid=0 auid=0 ses=23786 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=21664 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447243983.670:713356): pid=21664 uid=0 auid=0 ses=23786 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447243984.949:713357): pid=21651 uid=0 auid=0 ses=23786 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447243984.949:713358): pid=21651 uid=0 auid=0 ses=23786 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447243984.956:713359): pid=21651 uid=0 auid=0 ses=23786 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447243984.956:713360): pid=21651 uid=0 auid=0 ses=23786 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447243984.956:713361): pid=21651 uid=0 auid=0 ses=23786 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21651 suid=0 rport=53058 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447243984.957:713362): pid=21651 uid=0 auid=0 ses=23786 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=21651 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447243984.957:713363): pid=21651 uid=0 auid=0 ses=23786 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=21651 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447243984.957:713364): pid=21651 uid=0 auid=0 ses=23786 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=21651 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447243984.989:713365): pid=21714 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=21714 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447243984.990:713366): pid=21714 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=21714 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447243984.990:713367): pid=21714 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=21714 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447243985.035:713368): pid=21713 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=21714 suid=74 rport=53062 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447243985.036:713369): pid=21713 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=21714 suid=74 rport=53062 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447243985.165:713370): pid=21713 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=53062 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447243985.166:713371): pid=21713 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=53062 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447243985.175:713372): pid=21713 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447243985.176:713373): pid=21713 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21714 suid=74 rport=53062 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447243985.178:713374): pid=21713 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447243985.178:713375): pid=21713 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447243985.178:713376): pid=21713 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23787 res=1
type=USER_ROLE_CHANGE msg=audit(1447243985.247:713377): pid=21713 uid=0 auid=0 ses=23787 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447243985.275:713378): pid=21713 uid=0 auid=0 ses=23787 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447243985.278:713379): pid=21713 uid=0 auid=0 ses=23787 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447243985.279:713380): pid=21713 uid=0 auid=0 ses=23787 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447243985.280:713381): pid=21716 uid=0 auid=0 ses=23787 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=21716 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447243985.280:713382): pid=21716 uid=0 auid=0 ses=23787 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=21716 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447243985.280:713383): pid=21716 uid=0 auid=0 ses=23787 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=21716 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447243985.281:713384): pid=21716 uid=0 auid=0 ses=23787 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447243985.298:713385): pid=21713 uid=0 auid=0 ses=23787 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447243985.298:713386): pid=21713 uid=0 auid=0 ses=23787 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447243985.303:713387): pid=21713 uid=0 auid=0 ses=23787 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447243985.303:713388): pid=21713 uid=0 auid=0 ses=23787 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447243985.304:713389): pid=21713 uid=0 auid=0 ses=23787 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21713 suid=0 rport=53062 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447243985.304:713390): pid=21713 uid=0 auid=0 ses=23787 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=21713 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447243985.304:713391): pid=21713 uid=0 auid=0 ses=23787 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=21713 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447243985.304:713392): pid=21713 uid=0 auid=0 ses=23787 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=21713 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447244401.201:713393): pid=22941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447244401.201:713394): pid=22942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447244401.201:713395): pid=22941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447244401.201:713396): pid=22942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447244401.202:713397): pid=22942 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23788 res=1
type=LOGIN msg=audit(1447244401.202:713398): pid=22941 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23789 res=1
type=USER_START msg=audit(1447244401.222:713399): pid=22942 uid=0 auid=0 ses=23788 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447244401.222:713400): pid=22942 uid=0 auid=0 ses=23788 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447244401.222:713401): pid=22941 uid=0 auid=0 ses=23789 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447244401.222:713402): pid=22941 uid=0 auid=0 ses=23789 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447244401.230:713403): pid=22942 uid=0 auid=0 ses=23788 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447244401.231:713404): pid=22942 uid=0 auid=0 ses=23788 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447244401.241:713405): pid=22941 uid=0 auid=0 ses=23789 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447244401.242:713406): pid=22941 uid=0 auid=0 ses=23789 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447245001.256:713407): pid=24787 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447245001.256:713408): pid=24787 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447245001.256:713409): pid=24786 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447245001.256:713410): pid=24786 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447245001.257:713411): pid=24787 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23790 res=1
type=LOGIN msg=audit(1447245001.257:713412): pid=24786 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23791 res=1
type=USER_START msg=audit(1447245001.272:713413): pid=24786 uid=0 auid=0 ses=23791 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447245001.272:713414): pid=24786 uid=0 auid=0 ses=23791 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447245001.274:713415): pid=24787 uid=0 auid=0 ses=23790 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447245001.274:713416): pid=24787 uid=0 auid=0 ses=23790 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447245001.280:713417): pid=24787 uid=0 auid=0 ses=23790 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447245001.285:713418): pid=24787 uid=0 auid=0 ses=23790 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447245001.285:713419): pid=24786 uid=0 auid=0 ses=23791 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447245001.288:713420): pid=24786 uid=0 auid=0 ses=23791 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447245182.492:713421): pid=25353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=25353 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447245182.493:713422): pid=25353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=25353 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447245182.493:713423): pid=25353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=25353 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447245182.538:713424): pid=25352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=25353 suid=74 rport=55040 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447245182.538:713425): pid=25352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=25353 suid=74 rport=55040 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447245182.668:713426): pid=25352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=55040 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447245182.668:713427): pid=25352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=55040 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447245182.677:713428): pid=25352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447245182.678:713429): pid=25352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25353 suid=74 rport=55040 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447245182.679:713430): pid=25352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447245182.679:713431): pid=25352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447245182.679:713432): pid=25352 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23792 res=1
type=USER_ROLE_CHANGE msg=audit(1447245182.748:713433): pid=25352 uid=0 auid=0 ses=23792 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447245182.770:713434): pid=25352 uid=0 auid=0 ses=23792 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447245182.773:713435): pid=25352 uid=0 auid=0 ses=23792 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447245182.773:713436): pid=25352 uid=0 auid=0 ses=23792 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447245182.774:713437): pid=25355 uid=0 auid=0 ses=23792 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=25355 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447245182.774:713438): pid=25355 uid=0 auid=0 ses=23792 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=25355 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447245182.774:713439): pid=25355 uid=0 auid=0 ses=23792 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=25355 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447245182.775:713440): pid=25355 uid=0 auid=0 ses=23792 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447245182.793:713441): pid=25352 uid=0 auid=0 ses=23792 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447245182.794:713442): pid=25352 uid=0 auid=0 ses=23792 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447245182.799:713443): pid=25352 uid=0 auid=0 ses=23792 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447245182.799:713444): pid=25352 uid=0 auid=0 ses=23792 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447245182.799:713445): pid=25352 uid=0 auid=0 ses=23792 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25352 suid=0 rport=55040 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447245182.799:713446): pid=25352 uid=0 auid=0 ses=23792 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=25352 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447245182.800:713447): pid=25352 uid=0 auid=0 ses=23792 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=25352 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447245182.800:713448): pid=25352 uid=0 auid=0 ses=23792 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=25352 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447245182.823:713449): pid=25363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=25363 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447245182.823:713450): pid=25363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=25363 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447245182.824:713451): pid=25363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=25363 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447245182.868:713452): pid=25362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=25363 suid=74 rport=55041 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447245182.869:713453): pid=25362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=25363 suid=74 rport=55041 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447245182.996:713454): pid=25362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=55041 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447245182.996:713455): pid=25362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=55041 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447245183.005:713456): pid=25362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447245183.006:713457): pid=25362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25363 suid=74 rport=55041 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447245183.008:713458): pid=25362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447245183.008:713459): pid=25362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447245183.008:713460): pid=25362 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23793 res=1
type=USER_ROLE_CHANGE msg=audit(1447245183.076:713461): pid=25362 uid=0 auid=0 ses=23793 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447245183.103:713462): pid=25362 uid=0 auid=0 ses=23793 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447245183.106:713463): pid=25362 uid=0 auid=0 ses=23793 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447245183.106:713464): pid=25362 uid=0 auid=0 ses=23793 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447245183.107:713465): pid=25365 uid=0 auid=0 ses=23793 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=25365 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447245183.107:713466): pid=25365 uid=0 auid=0 ses=23793 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=25365 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447245183.107:713467): pid=25365 uid=0 auid=0 ses=23793 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=25365 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447245183.108:713468): pid=25365 uid=0 auid=0 ses=23793 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447245184.365:713469): pid=25362 uid=0 auid=0 ses=23793 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447245184.365:713470): pid=25362 uid=0 auid=0 ses=23793 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447245184.371:713471): pid=25362 uid=0 auid=0 ses=23793 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447245184.371:713472): pid=25362 uid=0 auid=0 ses=23793 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447245184.371:713473): pid=25362 uid=0 auid=0 ses=23793 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25362 suid=0 rport=55041 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447245184.371:713474): pid=25362 uid=0 auid=0 ses=23793 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=25362 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447245184.371:713475): pid=25362 uid=0 auid=0 ses=23793 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=25362 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447245184.371:713476): pid=25362 uid=0 auid=0 ses=23793 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=25362 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447245184.406:713477): pid=25415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=25415 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447245184.407:713478): pid=25415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=25415 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447245184.407:713479): pid=25415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=25415 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447245184.451:713480): pid=25414 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=25415 suid=74 rport=55043 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447245184.452:713481): pid=25414 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=25415 suid=74 rport=55043 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447245184.581:713482): pid=25414 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=55043 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447245184.581:713483): pid=25414 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=55043 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447245184.591:713484): pid=25414 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447245184.592:713485): pid=25414 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25415 suid=74 rport=55043 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447245184.593:713486): pid=25414 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447245184.593:713487): pid=25414 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447245184.593:713488): pid=25414 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23794 res=1
type=USER_ROLE_CHANGE msg=audit(1447245184.661:713489): pid=25414 uid=0 auid=0 ses=23794 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447245184.679:713490): pid=25414 uid=0 auid=0 ses=23794 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447245184.682:713491): pid=25414 uid=0 auid=0 ses=23794 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447245184.682:713492): pid=25414 uid=0 auid=0 ses=23794 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447245184.683:713493): pid=25417 uid=0 auid=0 ses=23794 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=25417 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447245184.683:713494): pid=25417 uid=0 auid=0 ses=23794 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=25417 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447245184.684:713495): pid=25417 uid=0 auid=0 ses=23794 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=25417 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447245184.684:713496): pid=25417 uid=0 auid=0 ses=23794 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447245184.700:713497): pid=25414 uid=0 auid=0 ses=23794 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447245184.700:713498): pid=25414 uid=0 auid=0 ses=23794 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447245184.704:713499): pid=25414 uid=0 auid=0 ses=23794 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447245184.704:713500): pid=25414 uid=0 auid=0 ses=23794 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447245184.705:713501): pid=25414 uid=0 auid=0 ses=23794 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25414 suid=0 rport=55043 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447245184.705:713502): pid=25414 uid=0 auid=0 ses=23794 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=25414 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447245184.705:713503): pid=25414 uid=0 auid=0 ses=23794 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=25414 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447245184.705:713504): pid=25414 uid=0 auid=0 ses=23794 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=25414 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=SYSCALL msg=audit(1447245388.759:713505): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447245601.311:713507): pid=26705 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447245601.311:713506): pid=26704 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447245601.311:713508): pid=26705 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447245601.312:713509): pid=26704 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447245601.313:713510): pid=26704 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23795 res=1
type=LOGIN msg=audit(1447245601.313:713511): pid=26705 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23796 res=1
type=USER_START msg=audit(1447245601.335:713512): pid=26705 uid=0 auid=0 ses=23796 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447245601.335:713513): pid=26704 uid=0 auid=0 ses=23795 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447245601.335:713514): pid=26704 uid=0 auid=0 ses=23795 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447245601.335:713515): pid=26705 uid=0 auid=0 ses=23796 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447245601.344:713516): pid=26705 uid=0 auid=0 ses=23796 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447245601.345:713517): pid=26705 uid=0 auid=0 ses=23796 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447245601.353:713518): pid=26704 uid=0 auid=0 ses=23795 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447245626.380:713519): pid=26704 uid=0 auid=0 ses=23795 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=USER_ACCT msg=audit(1447246201.393:713520): pid=28552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447246201.393:713521): pid=28553 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447246201.394:713522): pid=28552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447246201.394:713523): pid=28553 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447246201.394:713524): pid=28553 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23797 res=1
type=LOGIN msg=audit(1447246201.394:713525): pid=28552 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23798 res=1
type=USER_START msg=audit(1447246201.410:713526): pid=28553 uid=0 auid=0 ses=23797 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447246201.410:713527): pid=28552 uid=0 auid=0 ses=23798 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447246201.411:713528): pid=28553 uid=0 auid=0 ses=23797 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447246201.411:713529): pid=28552 uid=0 auid=0 ses=23798 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447246201.417:713530): pid=28553 uid=0 auid=0 ses=23797 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447246201.419:713531): pid=28553 uid=0 auid=0 ses=23797 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447246201.425:713532): pid=28552 uid=0 auid=0 ses=23798 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447246201.426:713533): pid=28552 uid=0 auid=0 ses=23798 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447246382.506:713534): pid=29117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=29117 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447246382.506:713535): pid=29117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=29117 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447246382.506:713536): pid=29117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=29117 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447246382.551:713537): pid=29116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=29117 suid=74 rport=57038 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447246382.551:713538): pid=29116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=29117 suid=74 rport=57038 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447246382.680:713539): pid=29116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=57038 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447246382.681:713540): pid=29116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=57038 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447246382.690:713541): pid=29116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447246382.692:713542): pid=29116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29117 suid=74 rport=57038 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447246382.697:713543): pid=29116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447246382.698:713544): pid=29116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447246382.698:713545): pid=29116 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23799 res=1
type=USER_ROLE_CHANGE msg=audit(1447246382.768:713546): pid=29116 uid=0 auid=0 ses=23799 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447246382.796:713547): pid=29116 uid=0 auid=0 ses=23799 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447246382.799:713548): pid=29116 uid=0 auid=0 ses=23799 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447246382.799:713549): pid=29116 uid=0 auid=0 ses=23799 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447246382.800:713550): pid=29119 uid=0 auid=0 ses=23799 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=29119 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447246382.800:713551): pid=29119 uid=0 auid=0 ses=23799 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=29119 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447246382.801:713552): pid=29119 uid=0 auid=0 ses=23799 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=29119 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447246382.802:713553): pid=29119 uid=0 auid=0 ses=23799 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447246382.820:713554): pid=29116 uid=0 auid=0 ses=23799 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447246382.820:713555): pid=29116 uid=0 auid=0 ses=23799 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447246382.823:713556): pid=29116 uid=0 auid=0 ses=23799 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447246382.824:713557): pid=29116 uid=0 auid=0 ses=23799 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447246382.824:713558): pid=29116 uid=0 auid=0 ses=23799 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29116 suid=0 rport=57038 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447246382.824:713559): pid=29116 uid=0 auid=0 ses=23799 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=29116 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447246382.824:713560): pid=29116 uid=0 auid=0 ses=23799 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=29116 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447246382.824:713561): pid=29116 uid=0 auid=0 ses=23799 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=29116 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447246382.854:713562): pid=29127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=29127 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447246382.855:713563): pid=29127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=29127 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447246382.855:713564): pid=29127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=29127 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447246382.899:713565): pid=29126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=29127 suid=74 rport=57039 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447246382.899:713566): pid=29126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=29127 suid=74 rport=57039 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447246383.030:713567): pid=29126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=57039 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447246383.030:713568): pid=29126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=57039 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447246383.038:713569): pid=29126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447246383.039:713570): pid=29126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29127 suid=74 rport=57039 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447246383.042:713571): pid=29126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447246383.043:713572): pid=29126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447246383.043:713573): pid=29126 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23800 res=1
type=USER_ROLE_CHANGE msg=audit(1447246383.107:713574): pid=29126 uid=0 auid=0 ses=23800 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447246383.132:713575): pid=29126 uid=0 auid=0 ses=23800 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447246383.135:713576): pid=29126 uid=0 auid=0 ses=23800 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447246383.135:713577): pid=29126 uid=0 auid=0 ses=23800 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447246383.137:713578): pid=29129 uid=0 auid=0 ses=23800 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=29129 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447246383.137:713579): pid=29129 uid=0 auid=0 ses=23800 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=29129 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447246383.137:713580): pid=29129 uid=0 auid=0 ses=23800 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=29129 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447246383.138:713581): pid=29129 uid=0 auid=0 ses=23800 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447246384.426:713582): pid=29126 uid=0 auid=0 ses=23800 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447246384.426:713583): pid=29126 uid=0 auid=0 ses=23800 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447246384.432:713584): pid=29126 uid=0 auid=0 ses=23800 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447246384.432:713585): pid=29126 uid=0 auid=0 ses=23800 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447246384.433:713586): pid=29126 uid=0 auid=0 ses=23800 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29126 suid=0 rport=57039 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447246384.433:713587): pid=29126 uid=0 auid=0 ses=23800 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=29126 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447246384.433:713588): pid=29126 uid=0 auid=0 ses=23800 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=29126 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447246384.434:713589): pid=29126 uid=0 auid=0 ses=23800 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=29126 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447246384.462:713590): pid=29179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=29179 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447246384.463:713591): pid=29179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=29179 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447246384.463:713592): pid=29179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=29179 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447246384.506:713593): pid=29178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=29179 suid=74 rport=57041 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447246384.507:713594): pid=29178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=29179 suid=74 rport=57041 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447246384.636:713595): pid=29178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=57041 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447246384.636:713596): pid=29178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=57041 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447246384.646:713597): pid=29178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447246384.646:713598): pid=29178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29179 suid=74 rport=57041 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447246384.648:713599): pid=29178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447246384.649:713600): pid=29178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447246384.649:713601): pid=29178 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23801 res=1
type=USER_ROLE_CHANGE msg=audit(1447246384.712:713602): pid=29178 uid=0 auid=0 ses=23801 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447246384.737:713603): pid=29178 uid=0 auid=0 ses=23801 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447246384.740:713604): pid=29178 uid=0 auid=0 ses=23801 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447246384.740:713605): pid=29178 uid=0 auid=0 ses=23801 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447246384.741:713606): pid=29181 uid=0 auid=0 ses=23801 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=29181 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447246384.741:713607): pid=29181 uid=0 auid=0 ses=23801 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=29181 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447246384.741:713608): pid=29181 uid=0 auid=0 ses=23801 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=29181 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447246384.742:713609): pid=29181 uid=0 auid=0 ses=23801 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447246384.761:713610): pid=29178 uid=0 auid=0 ses=23801 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447246384.761:713611): pid=29178 uid=0 auid=0 ses=23801 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447246384.764:713612): pid=29178 uid=0 auid=0 ses=23801 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447246384.764:713613): pid=29178 uid=0 auid=0 ses=23801 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447246384.764:713614): pid=29178 uid=0 auid=0 ses=23801 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29178 suid=0 rport=57041 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447246384.764:713615): pid=29178 uid=0 auid=0 ses=23801 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=29178 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447246384.765:713616): pid=29178 uid=0 auid=0 ses=23801 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=29178 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447246384.765:713617): pid=29178 uid=0 auid=0 ses=23801 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=29178 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=SYSCALL msg=audit(1447246439.673:713618): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447246801.443:713620): pid=30586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447246801.443:713619): pid=30585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447246801.444:713621): pid=30586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447246801.444:713622): pid=30585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447246801.445:713623): pid=30586 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23802 res=1
type=LOGIN msg=audit(1447246801.445:713624): pid=30585 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23803 res=1
type=USER_START msg=audit(1447246801.467:713625): pid=30586 uid=0 auid=0 ses=23802 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447246801.467:713626): pid=30585 uid=0 auid=0 ses=23803 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447246801.468:713627): pid=30586 uid=0 auid=0 ses=23802 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447246801.468:713628): pid=30585 uid=0 auid=0 ses=23803 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447246801.479:713629): pid=30586 uid=0 auid=0 ses=23802 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447246801.482:713630): pid=30586 uid=0 auid=0 ses=23802 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447246801.483:713631): pid=30585 uid=0 auid=0 ses=23803 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447246801.488:713632): pid=30585 uid=0 auid=0 ses=23803 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447246861.500:713633): pid=30823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447246861.500:713634): pid=30823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447246861.501:713635): pid=30823 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23804 res=1
type=USER_START msg=audit(1447246861.511:713636): pid=30823 uid=0 auid=0 ses=23804 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447246861.511:713637): pid=30823 uid=0 auid=0 ses=23804 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447246861.537:713638): pid=30823 uid=0 auid=0 ses=23804 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447246861.538:713639): pid=30823 uid=0 auid=0 ses=23804 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447247401.549:713640): pid=32491 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447247401.549:713641): pid=32491 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447247401.550:713642): pid=32490 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447247401.550:713643): pid=32491 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23805 res=1
type=CRED_ACQ msg=audit(1447247401.550:713644): pid=32490 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447247401.550:713645): pid=32490 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23806 res=1
type=USER_START msg=audit(1447247401.564:713646): pid=32490 uid=0 auid=0 ses=23806 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447247401.564:713647): pid=32490 uid=0 auid=0 ses=23806 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447247401.564:713648): pid=32491 uid=0 auid=0 ses=23805 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447247401.564:713649): pid=32491 uid=0 auid=0 ses=23805 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447247401.571:713650): pid=32491 uid=0 auid=0 ses=23805 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447247401.572:713651): pid=32491 uid=0 auid=0 ses=23805 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447247401.576:713652): pid=32490 uid=0 auid=0 ses=23806 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447247401.581:713653): pid=32490 uid=0 auid=0 ses=23806 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447247583.137:713654): pid=698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=698 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447247583.137:713655): pid=698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=698 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447247583.137:713656): pid=698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=698 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447247583.181:713657): pid=696 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=698 suid=74 rport=59019 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447247583.181:713658): pid=696 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=698 suid=74 rport=59019 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447247583.304:713659): pid=696 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59019 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447247583.304:713660): pid=696 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=59019 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447247583.311:713661): pid=696 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447247583.312:713662): pid=696 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=698 suid=74 rport=59019 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447247583.315:713663): pid=696 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447247583.315:713664): pid=696 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447247583.315:713665): pid=696 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23807 res=1
type=USER_ROLE_CHANGE msg=audit(1447247583.383:713666): pid=696 uid=0 auid=0 ses=23807 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447247583.404:713667): pid=696 uid=0 auid=0 ses=23807 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447247583.407:713668): pid=696 uid=0 auid=0 ses=23807 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447247583.407:713669): pid=696 uid=0 auid=0 ses=23807 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447247583.409:713670): pid=701 uid=0 auid=0 ses=23807 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=701 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447247583.409:713671): pid=701 uid=0 auid=0 ses=23807 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=701 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447247583.409:713672): pid=701 uid=0 auid=0 ses=23807 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=701 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447247583.410:713673): pid=701 uid=0 auid=0 ses=23807 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447247583.431:713674): pid=696 uid=0 auid=0 ses=23807 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447247583.431:713675): pid=696 uid=0 auid=0 ses=23807 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447247583.436:713676): pid=696 uid=0 auid=0 ses=23807 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447247583.436:713677): pid=696 uid=0 auid=0 ses=23807 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447247583.437:713678): pid=696 uid=0 auid=0 ses=23807 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=696 suid=0 rport=59019 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447247583.437:713679): pid=696 uid=0 auid=0 ses=23807 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=696 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447247583.437:713680): pid=696 uid=0 auid=0 ses=23807 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=696 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447247583.437:713681): pid=696 uid=0 auid=0 ses=23807 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=696 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447247583.457:713682): pid=710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=710 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447247583.457:713683): pid=710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=710 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447247583.457:713684): pid=710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=710 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447247583.502:713685): pid=709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=710 suid=74 rport=59020 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447247583.502:713686): pid=709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=710 suid=74 rport=59020 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447247583.631:713687): pid=709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59020 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447247583.631:713688): pid=709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=59020 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447247583.639:713689): pid=709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447247583.640:713690): pid=709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=710 suid=74 rport=59020 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447247583.642:713691): pid=709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447247583.643:713692): pid=709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447247583.643:713693): pid=709 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23808 res=1
type=USER_ROLE_CHANGE msg=audit(1447247583.714:713694): pid=709 uid=0 auid=0 ses=23808 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447247583.737:713695): pid=709 uid=0 auid=0 ses=23808 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447247583.740:713696): pid=709 uid=0 auid=0 ses=23808 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447247583.740:713697): pid=709 uid=0 auid=0 ses=23808 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447247583.741:713698): pid=712 uid=0 auid=0 ses=23808 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=712 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447247583.742:713699): pid=712 uid=0 auid=0 ses=23808 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=712 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447247583.742:713700): pid=712 uid=0 auid=0 ses=23808 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=712 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447247583.743:713701): pid=712 uid=0 auid=0 ses=23808 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447247585.027:713702): pid=709 uid=0 auid=0 ses=23808 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447247585.027:713703): pid=709 uid=0 auid=0 ses=23808 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447247585.031:713704): pid=709 uid=0 auid=0 ses=23808 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447247585.031:713705): pid=709 uid=0 auid=0 ses=23808 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447247585.032:713706): pid=709 uid=0 auid=0 ses=23808 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=709 suid=0 rport=59020 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447247585.032:713707): pid=709 uid=0 auid=0 ses=23808 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=709 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447247585.032:713708): pid=709 uid=0 auid=0 ses=23808 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=709 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447247585.032:713709): pid=709 uid=0 auid=0 ses=23808 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=709 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447247585.067:713710): pid=767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=767 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447247585.067:713711): pid=767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=767 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447247585.067:713712): pid=767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=767 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447247585.112:713713): pid=766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=767 suid=74 rport=59022 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447247585.112:713714): pid=766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=767 suid=74 rport=59022 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447247585.239:713715): pid=766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59022 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447247585.239:713716): pid=766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=59022 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447247585.243:713717): pid=766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447247585.244:713718): pid=766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=767 suid=74 rport=59022 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447247585.246:713719): pid=766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447247585.246:713720): pid=766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447247585.246:713721): pid=766 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23809 res=1
type=USER_ROLE_CHANGE msg=audit(1447247585.310:713722): pid=766 uid=0 auid=0 ses=23809 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447247585.333:713723): pid=766 uid=0 auid=0 ses=23809 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447247585.336:713724): pid=766 uid=0 auid=0 ses=23809 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447247585.336:713725): pid=766 uid=0 auid=0 ses=23809 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447247585.338:713726): pid=769 uid=0 auid=0 ses=23809 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=769 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447247585.338:713727): pid=769 uid=0 auid=0 ses=23809 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=769 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447247585.338:713728): pid=769 uid=0 auid=0 ses=23809 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=769 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447247585.339:713729): pid=769 uid=0 auid=0 ses=23809 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447247585.354:713730): pid=766 uid=0 auid=0 ses=23809 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447247585.354:713731): pid=766 uid=0 auid=0 ses=23809 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447247585.357:713732): pid=766 uid=0 auid=0 ses=23809 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447247585.357:713733): pid=766 uid=0 auid=0 ses=23809 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447247585.358:713734): pid=766 uid=0 auid=0 ses=23809 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=766 suid=0 rport=59022 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447247585.358:713735): pid=766 uid=0 auid=0 ses=23809 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=766 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447247585.358:713736): pid=766 uid=0 auid=0 ses=23809 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=766 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447247585.358:713737): pid=766 uid=0 auid=0 ses=23809 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=766 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447248001.601:713739): pid=2067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447248001.601:713738): pid=2068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447248001.601:713741): pid=2068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447248001.601:713740): pid=2067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447248001.602:713742): pid=2068 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23810 res=1
type=LOGIN msg=audit(1447248001.602:713743): pid=2067 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23811 res=1
type=USER_START msg=audit(1447248001.625:713745): pid=2067 uid=0 auid=0 ses=23811 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447248001.625:713744): pid=2068 uid=0 auid=0 ses=23810 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447248001.626:713746): pid=2068 uid=0 auid=0 ses=23810 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447248001.626:713747): pid=2067 uid=0 auid=0 ses=23811 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447248001.635:713748): pid=2068 uid=0 auid=0 ses=23810 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447248001.637:713749): pid=2068 uid=0 auid=0 ses=23810 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447248001.644:713750): pid=2067 uid=0 auid=0 ses=23811 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447248001.645:713751): pid=2067 uid=0 auid=0 ses=23811 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1447248579.709:713752): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447248601.662:713754): pid=3911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447248601.662:713753): pid=3912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447248601.662:713755): pid=3911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447248601.662:713756): pid=3912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447248601.662:713757): pid=3912 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23812 res=1
type=LOGIN msg=audit(1447248601.662:713758): pid=3911 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23813 res=1
type=USER_START msg=audit(1447248601.679:713759): pid=3911 uid=0 auid=0 ses=23813 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447248601.679:713760): pid=3911 uid=0 auid=0 ses=23813 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447248601.680:713761): pid=3912 uid=0 auid=0 ses=23812 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447248601.680:713762): pid=3912 uid=0 auid=0 ses=23812 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447248601.687:713763): pid=3912 uid=0 auid=0 ses=23812 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447248601.689:713764): pid=3912 uid=0 auid=0 ses=23812 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447248601.693:713765): pid=3911 uid=0 auid=0 ses=23813 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447248626.720:713766): pid=3911 uid=0 auid=0 ses=23813 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=CRYPTO_KEY_USER msg=audit(1447248783.021:713767): pid=4477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=4477 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447248783.021:713768): pid=4477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=4477 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447248783.021:713769): pid=4477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=4477 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447248783.065:713770): pid=4476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=4477 suid=74 rport=61000 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447248783.066:713771): pid=4476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=4477 suid=74 rport=61000 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447248783.195:713772): pid=4476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=61000 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447248783.195:713773): pid=4476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=61000 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447248783.203:713774): pid=4476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447248783.204:713775): pid=4476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4477 suid=74 rport=61000 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447248783.205:713776): pid=4476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447248783.205:713777): pid=4476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447248783.206:713778): pid=4476 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23814 res=1
type=USER_ROLE_CHANGE msg=audit(1447248783.273:713779): pid=4476 uid=0 auid=0 ses=23814 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447248783.293:713780): pid=4476 uid=0 auid=0 ses=23814 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447248783.295:713781): pid=4476 uid=0 auid=0 ses=23814 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447248783.296:713782): pid=4476 uid=0 auid=0 ses=23814 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447248783.297:713783): pid=4479 uid=0 auid=0 ses=23814 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=4479 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447248783.297:713784): pid=4479 uid=0 auid=0 ses=23814 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=4479 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447248783.297:713785): pid=4479 uid=0 auid=0 ses=23814 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=4479 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447248783.298:713786): pid=4479 uid=0 auid=0 ses=23814 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447248783.320:713787): pid=4476 uid=0 auid=0 ses=23814 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447248783.321:713788): pid=4476 uid=0 auid=0 ses=23814 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447248783.327:713789): pid=4476 uid=0 auid=0 ses=23814 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447248783.327:713790): pid=4476 uid=0 auid=0 ses=23814 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447248783.329:713791): pid=4476 uid=0 auid=0 ses=23814 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4476 suid=0 rport=61000 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447248783.330:713792): pid=4476 uid=0 auid=0 ses=23814 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=4476 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447248783.330:713793): pid=4476 uid=0 auid=0 ses=23814 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=4476 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447248783.330:713794): pid=4476 uid=0 auid=0 ses=23814 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=4476 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447248783.345:713795): pid=4487 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=4487 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447248783.346:713796): pid=4487 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=4487 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447248783.346:713797): pid=4487 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=4487 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447248783.391:713798): pid=4486 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=4487 suid=74 rport=61001 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447248783.391:713799): pid=4486 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=4487 suid=74 rport=61001 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447248783.519:713800): pid=4486 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=61001 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447248783.519:713801): pid=4486 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=61001 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447248783.528:713802): pid=4486 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447248783.529:713803): pid=4486 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4487 suid=74 rport=61001 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447248783.530:713804): pid=4486 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447248783.530:713805): pid=4486 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447248783.530:713806): pid=4486 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23815 res=1
type=USER_ROLE_CHANGE msg=audit(1447248783.593:713807): pid=4486 uid=0 auid=0 ses=23815 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447248783.619:713808): pid=4486 uid=0 auid=0 ses=23815 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447248783.622:713809): pid=4486 uid=0 auid=0 ses=23815 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447248783.622:713810): pid=4486 uid=0 auid=0 ses=23815 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447248783.623:713811): pid=4489 uid=0 auid=0 ses=23815 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=4489 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447248783.623:713812): pid=4489 uid=0 auid=0 ses=23815 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=4489 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447248783.624:713813): pid=4489 uid=0 auid=0 ses=23815 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=4489 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447248783.624:713814): pid=4489 uid=0 auid=0 ses=23815 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447248784.909:713815): pid=4486 uid=0 auid=0 ses=23815 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447248784.909:713816): pid=4486 uid=0 auid=0 ses=23815 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447248784.916:713817): pid=4486 uid=0 auid=0 ses=23815 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447248784.916:713818): pid=4486 uid=0 auid=0 ses=23815 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447248784.917:713819): pid=4486 uid=0 auid=0 ses=23815 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4486 suid=0 rport=61001 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447248784.917:713820): pid=4486 uid=0 auid=0 ses=23815 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=4486 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447248784.917:713821): pid=4486 uid=0 auid=0 ses=23815 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=4486 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447248784.917:713822): pid=4486 uid=0 auid=0 ses=23815 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=4486 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447248784.946:713823): pid=4539 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=4539 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447248784.946:713824): pid=4539 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=4539 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447248784.947:713825): pid=4539 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=4539 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447248784.990:713826): pid=4538 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=4539 suid=74 rport=61003 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447248784.990:713827): pid=4538 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=4539 suid=74 rport=61003 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447248785.117:713828): pid=4538 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=61003 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447248785.117:713829): pid=4538 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=61003 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447248785.125:713830): pid=4538 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447248785.127:713831): pid=4538 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4539 suid=74 rport=61003 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447248785.128:713832): pid=4538 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447248785.129:713833): pid=4538 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447248785.129:713834): pid=4538 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23816 res=1
type=USER_ROLE_CHANGE msg=audit(1447248785.197:713835): pid=4538 uid=0 auid=0 ses=23816 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447248785.219:713836): pid=4538 uid=0 auid=0 ses=23816 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447248785.222:713837): pid=4538 uid=0 auid=0 ses=23816 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447248785.222:713838): pid=4538 uid=0 auid=0 ses=23816 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447248785.224:713839): pid=4541 uid=0 auid=0 ses=23816 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=4541 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447248785.224:713840): pid=4541 uid=0 auid=0 ses=23816 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=4541 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447248785.224:713841): pid=4541 uid=0 auid=0 ses=23816 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=4541 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447248785.224:713842): pid=4541 uid=0 auid=0 ses=23816 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447248785.242:713843): pid=4538 uid=0 auid=0 ses=23816 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447248785.242:713844): pid=4538 uid=0 auid=0 ses=23816 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447248785.246:713845): pid=4538 uid=0 auid=0 ses=23816 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447248785.246:713846): pid=4538 uid=0 auid=0 ses=23816 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447248785.247:713847): pid=4538 uid=0 auid=0 ses=23816 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4538 suid=0 rport=61003 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447248785.247:713848): pid=4538 uid=0 auid=0 ses=23816 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=4538 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447248785.247:713849): pid=4538 uid=0 auid=0 ses=23816 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=4538 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447248785.247:713850): pid=4538 uid=0 auid=0 ses=23816 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=4538 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447249201.744:713851): pid=5828 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447249201.744:713852): pid=5828 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447249201.744:713853): pid=5827 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447249201.744:713854): pid=5827 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447249201.745:713855): pid=5828 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23817 res=1
type=LOGIN msg=audit(1447249201.745:713856): pid=5827 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23818 res=1
type=USER_START msg=audit(1447249201.763:713857): pid=5827 uid=0 auid=0 ses=23818 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447249201.763:713858): pid=5827 uid=0 auid=0 ses=23818 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447249201.766:713859): pid=5828 uid=0 auid=0 ses=23817 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447249201.766:713860): pid=5828 uid=0 auid=0 ses=23817 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447249201.773:713861): pid=5828 uid=0 auid=0 ses=23817 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447249201.775:713862): pid=5828 uid=0 auid=0 ses=23817 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447249201.782:713863): pid=5827 uid=0 auid=0 ses=23818 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447249201.783:713864): pid=5827 uid=0 auid=0 ses=23818 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1447249646.757:713865): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447249801.795:713866): pid=7676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447249801.795:713867): pid=7675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447249801.795:713868): pid=7676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447249801.795:713869): pid=7675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447249801.796:713870): pid=7676 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23819 res=1
type=LOGIN msg=audit(1447249801.796:713871): pid=7675 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23820 res=1
type=USER_START msg=audit(1447249801.814:713872): pid=7676 uid=0 auid=0 ses=23819 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447249801.815:713873): pid=7676 uid=0 auid=0 ses=23819 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447249801.815:713874): pid=7675 uid=0 auid=0 ses=23820 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447249801.815:713875): pid=7675 uid=0 auid=0 ses=23820 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447249801.822:713876): pid=7676 uid=0 auid=0 ses=23819 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447249801.824:713877): pid=7676 uid=0 auid=0 ses=23819 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447249801.832:713878): pid=7675 uid=0 auid=0 ses=23820 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447249801.833:713879): pid=7675 uid=0 auid=0 ses=23820 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447249982.665:713880): pid=8240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=8240 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447249982.666:713881): pid=8240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=8240 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447249982.666:713882): pid=8240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=8240 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447249982.710:713883): pid=8239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=8240 suid=74 rport=62982 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447249982.710:713884): pid=8239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=8240 suid=74 rport=62982 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447249982.840:713885): pid=8239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=62982 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447249982.840:713886): pid=8239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=62982 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447249982.849:713887): pid=8239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447249982.850:713888): pid=8239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8240 suid=74 rport=62982 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447249982.851:713889): pid=8239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447249982.851:713890): pid=8239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447249982.851:713891): pid=8239 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23821 res=1
type=USER_ROLE_CHANGE msg=audit(1447249982.921:713892): pid=8239 uid=0 auid=0 ses=23821 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447249982.939:713893): pid=8239 uid=0 auid=0 ses=23821 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447249982.941:713894): pid=8239 uid=0 auid=0 ses=23821 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447249982.941:713895): pid=8239 uid=0 auid=0 ses=23821 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447249982.943:713896): pid=8242 uid=0 auid=0 ses=23821 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=8242 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447249982.943:713897): pid=8242 uid=0 auid=0 ses=23821 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=8242 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447249982.943:713898): pid=8242 uid=0 auid=0 ses=23821 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=8242 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447249982.944:713899): pid=8242 uid=0 auid=0 ses=23821 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447249982.966:713900): pid=8239 uid=0 auid=0 ses=23821 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447249982.966:713901): pid=8239 uid=0 auid=0 ses=23821 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447249982.970:713902): pid=8239 uid=0 auid=0 ses=23821 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447249982.970:713903): pid=8239 uid=0 auid=0 ses=23821 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447249982.971:713904): pid=8239 uid=0 auid=0 ses=23821 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8239 suid=0 rport=62982 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447249982.971:713905): pid=8239 uid=0 auid=0 ses=23821 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=8239 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447249982.971:713906): pid=8239 uid=0 auid=0 ses=23821 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=8239 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447249982.971:713907): pid=8239 uid=0 auid=0 ses=23821 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=8239 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447249982.990:713908): pid=8250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=8250 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447249982.990:713909): pid=8250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=8250 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447249982.990:713910): pid=8250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=8250 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447249983.035:713911): pid=8249 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=8250 suid=74 rport=62983 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447249983.036:713912): pid=8249 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=8250 suid=74 rport=62983 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447249983.165:713913): pid=8249 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=62983 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447249983.165:713914): pid=8249 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=62983 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447249983.172:713915): pid=8249 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447249983.173:713916): pid=8249 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8250 suid=74 rport=62983 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447249983.174:713917): pid=8249 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447249983.174:713918): pid=8249 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447249983.174:713919): pid=8249 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23822 res=1
type=USER_ROLE_CHANGE msg=audit(1447249983.240:713920): pid=8249 uid=0 auid=0 ses=23822 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447249983.261:713921): pid=8249 uid=0 auid=0 ses=23822 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447249983.263:713922): pid=8249 uid=0 auid=0 ses=23822 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447249983.263:713923): pid=8249 uid=0 auid=0 ses=23822 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447249983.265:713924): pid=8252 uid=0 auid=0 ses=23822 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=8252 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447249983.265:713925): pid=8252 uid=0 auid=0 ses=23822 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=8252 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447249983.265:713926): pid=8252 uid=0 auid=0 ses=23822 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=8252 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447249983.265:713927): pid=8252 uid=0 auid=0 ses=23822 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447249984.533:713928): pid=8249 uid=0 auid=0 ses=23822 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447249984.533:713929): pid=8249 uid=0 auid=0 ses=23822 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447249984.538:713930): pid=8249 uid=0 auid=0 ses=23822 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447249984.538:713931): pid=8249 uid=0 auid=0 ses=23822 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447249984.538:713932): pid=8249 uid=0 auid=0 ses=23822 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8249 suid=0 rport=62983 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447249984.538:713933): pid=8249 uid=0 auid=0 ses=23822 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=8249 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447249984.538:713934): pid=8249 uid=0 auid=0 ses=23822 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=8249 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447249984.538:713935): pid=8249 uid=0 auid=0 ses=23822 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=8249 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447249984.573:713936): pid=8302 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=8302 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447249984.573:713937): pid=8302 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=8302 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447249984.573:713938): pid=8302 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=8302 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447249984.616:713939): pid=8301 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=8302 suid=74 rport=62984 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447249984.616:713940): pid=8301 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=8302 suid=74 rport=62984 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447249984.747:713941): pid=8301 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=62984 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447249984.747:713942): pid=8301 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=62984 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447249984.753:713943): pid=8301 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447249984.754:713944): pid=8301 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8302 suid=74 rport=62984 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447249984.756:713945): pid=8301 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447249984.756:713946): pid=8301 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447249984.756:713947): pid=8301 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23823 res=1
type=USER_ROLE_CHANGE msg=audit(1447249984.824:713948): pid=8301 uid=0 auid=0 ses=23823 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447249984.848:713949): pid=8301 uid=0 auid=0 ses=23823 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447249984.851:713950): pid=8301 uid=0 auid=0 ses=23823 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447249984.851:713951): pid=8301 uid=0 auid=0 ses=23823 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447249984.852:713952): pid=8304 uid=0 auid=0 ses=23823 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=8304 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447249984.852:713953): pid=8304 uid=0 auid=0 ses=23823 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=8304 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447249984.852:713954): pid=8304 uid=0 auid=0 ses=23823 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=8304 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447249984.853:713955): pid=8304 uid=0 auid=0 ses=23823 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447249984.873:713956): pid=8301 uid=0 auid=0 ses=23823 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447249984.873:713957): pid=8301 uid=0 auid=0 ses=23823 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447249984.879:713958): pid=8301 uid=0 auid=0 ses=23823 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447249984.879:713959): pid=8301 uid=0 auid=0 ses=23823 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447249984.879:713960): pid=8301 uid=0 auid=0 ses=23823 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8301 suid=0 rport=62984 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447249984.879:713961): pid=8301 uid=0 auid=0 ses=23823 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=8301 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447249984.879:713962): pid=8301 uid=0 auid=0 ses=23823 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=8301 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447249984.879:713963): pid=8301 uid=0 auid=0 ses=23823 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=8301 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447250401.853:713964): pid=9593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447250401.853:713965): pid=9593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447250401.853:713966): pid=9592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447250401.853:713967): pid=9592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447250401.854:713968): pid=9593 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23824 res=1
type=LOGIN msg=audit(1447250401.854:713969): pid=9592 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23825 res=1
type=USER_START msg=audit(1447250401.871:713970): pid=9592 uid=0 auid=0 ses=23825 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447250401.872:713971): pid=9593 uid=0 auid=0 ses=23824 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447250401.872:713972): pid=9593 uid=0 auid=0 ses=23824 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447250401.872:713973): pid=9592 uid=0 auid=0 ses=23825 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447250401.880:713974): pid=9593 uid=0 auid=0 ses=23824 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447250401.881:713975): pid=9593 uid=0 auid=0 ses=23824 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447250401.892:713976): pid=9592 uid=0 auid=0 ses=23825 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447250401.894:713977): pid=9592 uid=0 auid=0 ses=23825 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447250461.901:713978): pid=9829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447250461.901:713979): pid=9829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447250461.901:713980): pid=9829 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23826 res=1
type=USER_START msg=audit(1447250461.910:713981): pid=9829 uid=0 auid=0 ses=23826 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447250461.911:713982): pid=9829 uid=0 auid=0 ses=23826 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447250461.936:713983): pid=9829 uid=0 auid=0 ses=23826 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447250461.938:713984): pid=9829 uid=0 auid=0 ses=23826 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1447250701.734:713985): arch=c000003e syscall=159 success=yes exit=0 a0=7fab199d7920 a1=1 a2=0 a3=7fab1b6572e0 items=0 ppid=1 pid=12596 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key="time-change"
type=USER_ACCT msg=audit(1447251001.954:713986): pid=11477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447251001.954:713987): pid=11476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447251001.955:713988): pid=11477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447251001.955:713989): pid=11476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447251001.955:713990): pid=11477 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23827 res=1
type=LOGIN msg=audit(1447251001.955:713991): pid=11476 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23828 res=1
type=USER_START msg=audit(1447251001.973:713992): pid=11477 uid=0 auid=0 ses=23827 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447251001.973:713993): pid=11476 uid=0 auid=0 ses=23828 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447251001.973:713994): pid=11477 uid=0 auid=0 ses=23827 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447251001.973:713995): pid=11476 uid=0 auid=0 ses=23828 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447251001.980:713996): pid=11477 uid=0 auid=0 ses=23827 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447251001.985:713997): pid=11477 uid=0 auid=0 ses=23827 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447251001.985:713998): pid=11476 uid=0 auid=0 ses=23828 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447251027.014:713999): pid=11476 uid=0 auid=0 ses=23828 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=? acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=failed'
type=CRYPTO_KEY_USER msg=audit(1447251182.787:714000): pid=12046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12046 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447251182.788:714001): pid=12046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12046 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447251182.788:714002): pid=12046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12046 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447251182.832:714003): pid=12045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=12046 suid=74 rport=64976 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447251182.832:714004): pid=12045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=12046 suid=74 rport=64976 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447251182.952:714005): pid=12045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=64976 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447251182.952:714006): pid=12045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=64976 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447251182.960:714007): pid=12045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447251182.961:714008): pid=12045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12046 suid=74 rport=64976 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447251182.962:714009): pid=12045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447251182.962:714010): pid=12045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447251182.963:714011): pid=12045 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23829 res=1
type=USER_ROLE_CHANGE msg=audit(1447251183.033:714012): pid=12045 uid=0 auid=0 ses=23829 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447251183.059:714013): pid=12045 uid=0 auid=0 ses=23829 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447251183.061:714014): pid=12045 uid=0 auid=0 ses=23829 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447251183.062:714015): pid=12045 uid=0 auid=0 ses=23829 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447251183.063:714016): pid=12048 uid=0 auid=0 ses=23829 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12048 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447251183.063:714017): pid=12048 uid=0 auid=0 ses=23829 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12048 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447251183.063:714018): pid=12048 uid=0 auid=0 ses=23829 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12048 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447251183.064:714019): pid=12048 uid=0 auid=0 ses=23829 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447251183.085:714020): pid=12045 uid=0 auid=0 ses=23829 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447251183.085:714021): pid=12045 uid=0 auid=0 ses=23829 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447251183.090:714022): pid=12045 uid=0 auid=0 ses=23829 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447251183.091:714023): pid=12045 uid=0 auid=0 ses=23829 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447251183.091:714024): pid=12045 uid=0 auid=0 ses=23829 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12045 suid=0 rport=64976 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447251183.091:714025): pid=12045 uid=0 auid=0 ses=23829 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12045 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447251183.091:714026): pid=12045 uid=0 auid=0 ses=23829 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12045 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447251183.091:714027): pid=12045 uid=0 auid=0 ses=23829 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12045 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447251183.111:714028): pid=12056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12056 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447251183.111:714029): pid=12056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12056 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447251183.111:714030): pid=12056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12056 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447251183.155:714031): pid=12055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=12056 suid=74 rport=64977 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447251183.155:714032): pid=12055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=12056 suid=74 rport=64977 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447251183.282:714033): pid=12055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=64977 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447251183.282:714034): pid=12055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=64977 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447251183.290:714035): pid=12055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447251183.291:714036): pid=12055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12056 suid=74 rport=64977 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447251183.294:714037): pid=12055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447251183.295:714038): pid=12055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447251183.295:714039): pid=12055 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23830 res=1
type=USER_ROLE_CHANGE msg=audit(1447251183.360:714040): pid=12055 uid=0 auid=0 ses=23830 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447251183.381:714041): pid=12055 uid=0 auid=0 ses=23830 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447251183.384:714042): pid=12055 uid=0 auid=0 ses=23830 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447251183.384:714043): pid=12055 uid=0 auid=0 ses=23830 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447251183.386:714044): pid=12058 uid=0 auid=0 ses=23830 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12058 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447251183.386:714045): pid=12058 uid=0 auid=0 ses=23830 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12058 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447251183.386:714046): pid=12058 uid=0 auid=0 ses=23830 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12058 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447251183.387:714047): pid=12058 uid=0 auid=0 ses=23830 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447251184.669:714048): pid=12055 uid=0 auid=0 ses=23830 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447251184.669:714049): pid=12055 uid=0 auid=0 ses=23830 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447251184.673:714050): pid=12055 uid=0 auid=0 ses=23830 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447251184.674:714051): pid=12055 uid=0 auid=0 ses=23830 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447251184.675:714052): pid=12055 uid=0 auid=0 ses=23830 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12055 suid=0 rport=64977 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447251184.675:714053): pid=12055 uid=0 auid=0 ses=23830 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12055 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447251184.675:714054): pid=12055 uid=0 auid=0 ses=23830 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12055 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447251184.675:714055): pid=12055 uid=0 auid=0 ses=23830 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12055 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447251184.707:714056): pid=12130 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12130 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447251184.707:714057): pid=12130 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12130 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447251184.708:714058): pid=12130 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12130 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447251184.751:714059): pid=12129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=12130 suid=74 rport=64978 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447251184.752:714060): pid=12129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 pfs=diffie-hellman-group-exchange-sha1 spid=12130 suid=74 rport=64978 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447251184.878:714061): pid=12129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=64978 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447251184.878:714062): pid=12129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=1024 fp=2a:cb:4c:e1:1e:b3:7d:79:1a:15:b6:e1:45:d0:07:b7 rport=64978 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447251184.887:714063): pid=12129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447251184.888:714064): pid=12129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12130 suid=74 rport=64978 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_AUTH msg=audit(1447251184.890:714065): pid=12129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447251184.890:714066): pid=12129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=LOGIN msg=audit(1447251184.890:714067): pid=12129 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23831 res=1
type=USER_ROLE_CHANGE msg=audit(1447251184.960:714068): pid=12129 uid=0 auid=0 ses=23831 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447251184.978:714069): pid=12129 uid=0 auid=0 ses=23831 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1447251184.981:714070): pid=12129 uid=0 auid=0 ses=23831 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_START msg=audit(1447251184.981:714071): pid=12129 uid=0 auid=0 ses=23831 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447251184.982:714072): pid=12132 uid=0 auid=0 ses=23831 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12132 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447251184.982:714073): pid=12132 uid=0 auid=0 ses=23831 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12132 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447251184.982:714074): pid=12132 uid=0 auid=0 ses=23831 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12132 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRED_REFR msg=audit(1447251184.983:714075): pid=12132 uid=0 auid=0 ses=23831 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447251185.001:714076): pid=12129 uid=0 auid=0 ses=23831 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1447251185.001:714077): pid=12129 uid=0 auid=0 ses=23831 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=USER_END msg=audit(1447251185.004:714078): pid=12129 uid=0 auid=0 ses=23831 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRED_DISP msg=audit(1447251185.005:714079): pid=12129 uid=0 auid=0 ses=23831 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.5.3.131 addr=10.5.3.131 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447251185.006:714080): pid=12129 uid=0 auid=0 ses=23831 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12129 suid=0 rport=64978 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447251185.006:714081): pid=12129 uid=0 auid=0 ses=23831 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=12129 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447251185.006:714082): pid=12129 uid=0 auid=0 ses=23831 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=12129 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447251185.006:714083): pid=12129 uid=0 auid=0 ses=23831 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=12129 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.5.3.131 terminal=? res=success'
type=USER_ACCT msg=audit(1447251601.043:714085): pid=13360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1447251601.043:714084): pid=13361 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447251601.044:714086): pid=13361 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1447251601.044:714087): pid=13360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1447251601.045:714088): pid=13361 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23832 res=1
type=LOGIN msg=audit(1447251601.045:714089): pid=13360 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23833 res=1
type=USER_START msg=audit(1447251601.062:714090): pid=13360 uid=0 auid=0 ses=23833 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447251601.062:714091): pid=13361 uid=0 auid=0 ses=23832 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447251601.063:714092): pid=13361 uid=0 auid=0 ses=23832 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1447251601.063:714093): pid=13360 uid=0 auid=0 ses=23833 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447251601.071:714094): pid=13361 uid=0 auid=0 ses=23832 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1447251601.074:714095): pid=13361 uid=0 auid=0 ses=23832 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1447251601.077:714096): pid=13360 uid=0 auid=0 ses=23833 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1447251610.144:714097): pid=13436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=13436 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.4.238 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447251610.144:714098): pid=13436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=13436 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.4.238 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1447251610.144:714099): pid=13436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=13436 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.4.238 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447251610.145:714100): pid=13435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-ctr ksize=256 mac=hmac-sha1 pfs=diffie-hellman-group-exchange-sha256 spid=13436 suid=74 rport=53316 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.4.238 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1447251610.146:714101): pid=13435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-ctr ksize=256 mac=hmac-sha1 pfs=diffie-hellman-group-exchange-sha256 spid=13436 suid=74 rport=53316 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.4.238 terminal=? res=success'
type=USER_AUTH msg=audit(1447251616.162:714102): pid=13435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.0.4.238 addr=10.0.4.238 terminal=ssh res=success'
type=USER_ACCT msg=audit(1447251616.166:714103): pid=13435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.0.4.238 addr=10.0.4.238 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1447251616.167:714104): pid=13435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13436 suid=74 rport=53316 laddr=10.7.3.31 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.4.238 terminal=? res=success'
type=USER_AUTH msg=audit(1447251616.168:714105): pid=13435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.0.4.238 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1447251616.168:714106): pid=13435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.0.4.238 addr=10.0.4.238 terminal=ssh res=success'
type=LOGIN msg=audit(1447251616.168:714107): pid=13435 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23834 res=1
type=USER_ROLE_CHANGE msg=audit(1447251616.240:714108): pid=13435 uid=0 auid=0 ses=23834 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.4.238 addr=10.0.4.238 terminal=ssh res=success'
type=USER_END msg=audit(1447251616.248:714109): pid=13360 uid=0 auid=0 ses=23833 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1447251616.261:714110): pid=13435 uid=0 auid=0 ses=23834 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.0.4.238 addr=10.0.4.238 terminal=ssh res=success'
type=SYSCALL msg=audit(1447251616.379:714111): arch=c000003e syscall=2 success=yes exit=8 a0=7fc98a88dc3e a1=80002 a2=7fc98a88dc2f a3=7fff3ef9e860 items=1 ppid=13435 pid=13443 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=23834 comm="sshd" exe="/usr/sbin/sshd" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key="session"
type=CWD msg=audit(1447251616.379:714111):  cwd="/"
type=PATH msg=audit(1447251616.379:714111): item=0 name="/var/run/utmp" inode=15508 dev=00:12 mode=0100664 ouid=0 ogid=22 rdev=00:00 obj=system_u:object_r:initrc_var_run_t:s0 objtype=NORMAL
type=SYSCALL msg=audit(1447251616.379:714112): arch=c000003e syscall=2 success=yes exit=4 a0=7fc98bcb7821 a1=1 a2=7fff3ef9eaf0 a3=7fff3ef9e860 items=1 ppid=13435 pid=13443 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=23834 comm="sshd" exe="/usr/sbin/sshd" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key="session"
type=CWD msg=audit(1447251616.379:714112):  cwd="/"
type=PATH msg=audit(1447251616.379:714112): item=0 name="/var/log/wtmp" inode=134 dev=08:06 mode=0100664 ouid=0 ogid=22 rdev=00:00 obj=system_u:object_r:wtmp_t:s0 objtype=NORMAL
type=SYSCALL msg=audit(1447251616.379:714113): arch=c000003e syscall=2 success=yes exit=4 a0=7fff3ef9f770 a1=42 a2=180 a3=8 items=3 ppid=13435 pid=13443 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=23834 comm="sshd" exe="/usr/sbin/sshd" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key="logins"
type=CWD msg=audit(1447251616.379:714113):  cwd="/"
type=PATH msg=audit(1447251616.379:714113): item=0 name="/var/log/" inode=128 dev=08:06 mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:var_log_t:s0 objtype=PARENT
type=PATH msg=audit(1447251616.379:714113): item=1 name=(null) inode=133 dev=08:06 mode=0100600 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:lastlog_t:s0 objtype=NORMAL
type=PATH msg=audit(1447251616.379:714113): item=2 name=(null) inode=133 dev=08:06 mode=0100600 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:lastlog_t:s0 objtype=NORMAL
type=USER_LOGIN msg=audit(1447251616.381:714114): pid=13443 uid=0 auid=0 ses=23834 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.0.4.238 addr=10.0.4.238 terminal=/dev/pts/0 res=success'
type=USER_START msg=audit(1447251616.381:714115): pid=13443 uid=0 auid=0 ses=23834 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.0.4.238 addr=10.0.4.238 terminal=/dev/pts/0 res=success'
type=CRYPTO_KEY_USER msg=audit(1447251616.382:714116): pid=13443 uid=0 auid=0 ses=23834 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=b3:50:cc:16:c6:99:6e:43:70:b8:31:5f:92:ed:74:f3 direction=? spid=13443 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.4.238 terminal=pts/0 res=success'
type=CRYPTO_KEY_USER msg=audit(1447251616.382:714117): pid=13443 uid=0 auid=0 ses=23834 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a0:7e:93:be:57:11:61:ec:f0:2f:92:08:78:67:6f:1c direction=? spid=13443 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.4.238 terminal=pts/0 res=success'
type=CRYPTO_KEY_USER msg=audit(1447251616.382:714118): pid=13443 uid=0 auid=0 ses=23834 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=a3:2f:3f:4c:81:76:83:05:2e:ec:99:6e:50:62:08:65 direction=? spid=13443 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.0.4.238 terminal=pts/0 res=success'
type=CRED_REFR msg=audit(1447251616.383:714119): pid=13443 uid=0 auid=0 ses=23834 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=10.0.4.238 addr=10.0.4.238 terminal=ssh res=success'